Manage the Farm Administrators Group

Dan Holme

by Dan Holme on 2/15/2014

Share this:

Article Details

Date Revised:

Sponsored by

The Farm Administrators group represents the accounts that can use the Central Administration application to perform administrative tasks. By default, the setup user account (for example, SP_Admin), the farm account (SP_Farm), and the local Administrators group are members of the Farm Administrators group. In a secure, least-privileged configuration, a SharePoint administrator will rarely be logged on as one of those accounts. Therefore, immediately after creating your farm, you should add appropriate user accounts to the Farm Administrators group.

For example, after you install and configure SharePoint while logged on as the setup user account (SP_Admin), you should add your administrative user account—the Active Directory account that is assigned to you as an individual—to the Farm Administrators group. From that point forward, you should not log on as the setup user and administrator (SP_Admin) account, except to install additional products on the server or to perform major, farm-level operations such as installing a service pack.

To manage the Farm Administrators group, perform the following steps:

  1. In the Central Administration quick launch, click Security.

  2. In the Users section, click Manage The Farm Administrators Group.

Members of the Farm Administrators group have permissions to and responsibility for all servers in the server farm. Members can perform all administrative tasks in Central Administration for the server or server farm. Members of this group can also use Windows PowerShell to create and manage configuration database objects and can perform command-line operations such as Stsadm.exe. They can assign administrators to manage service applications, which are instances of shared services.

The Farm Administrators group does not have permissions to access individual sites or their content, by default. However, members can take ownership of a site collection by assigning themselves as site collection owners in Central Administration. For example, if a site collection administrator leaves the organization and a new administrator must be added, a member of the Farm Administrators group can take ownership of the site collection to make the change.

Topic: Deployment

Sign in with

Or register