The Farm Administrators group represents the accounts that can use the Central Administration application to perform administrative tasks. By default, the
setup user account (for example, SP_Admin), the farm account (SP_Farm), and the local Administrators group are members of the Farm Administrators group. In
a secure, least-privileged configuration, a SharePoint administrator will rarely be logged on as one of those accounts. Therefore, immediately after
creating your farm, you should add appropriate user accounts to the Farm Administrators group.
For example, after you install and configure SharePoint while logged on as the setup user account (SP_Admin), you should add your administrative user
account—the Active Directory account that is assigned to you as an individual—to the Farm Administrators group. From that point forward, you should not log
on as the setup user and administrator (SP_Admin) account, except to install additional products on the server or to perform major, farm-level operations
such as installing a service pack.
To manage the Farm Administrators group, perform the following steps:
In the Central Administration quick launch, click Security.
In the Users section, click Manage The Farm Administrators Group.
Members of the Farm Administrators group have permissions to and responsibility for all servers in the server farm. Members can perform all administrative
tasks in Central Administration for the server or server farm. Members of this group can also use Windows PowerShell to create and manage configuration
database objects and can perform command-line operations such as Stsadm.exe. They can assign administrators to manage service applications, which are
instances of shared services.
The Farm Administrators group does not have permissions to access individual sites or their content, by default. However, members can take ownership of a
site collection by assigning themselves as site collection owners in Central Administration. For example, if a site collection administrator leaves the
organization and a new administrator must be added, a member of the Farm Administrators group can take ownership of the site collection to make the change.