70-339 · Question #1
You are a SharePoint administrator for Contoso, Ltd. The company acquires WingTip Toys. You must be able to manage and administer SharePoint site collections in the WingTip Toys SharePoint farm by…
The correct answer is C. Add the Contoso, Ltd. SharePoint administrators to the SharePoint_Sheii_Access role. To manage a remote SharePoint farm via Windows PowerShell, Contoso administrators must be granted the SharePoint_Shell_Access database role, which provides the required SQL-level permissions for running SharePoint cmdlets against the WingTip farm.
Question
You are a SharePoint administrator for Contoso, Ltd. The company acquires WingTip Toys. You must be able to manage and administer SharePoint site collections in the WingTip Toys SharePoint farm by using Windows PowerShell. You need to configure permissions for SharePoint site collection administrators. What should you do?
Options
- AAdd the WingTip Toys SharePoint administrators to the Site Collection Administrators group.
- BAdd the Contoso, Ltd. SharePoint administrators to the Site Collection Administrators group.
- CAdd the Contoso, Ltd. SharePoint administrators to the SharePoint_Sheii_Access role.
- DAdd the WingTip Toys SharePoint administrators to the SharePoint_Sheii_Access role.
How the community answered
(48 responses)- A15% (7)
- B4% (2)
- C75% (36)
- D6% (3)
Why each option
To manage a remote SharePoint farm via Windows PowerShell, Contoso administrators must be granted the SharePoint_Shell_Access database role, which provides the required SQL-level permissions for running SharePoint cmdlets against the WingTip farm.
Adding WingTip administrators to Site Collection Administrators grants SharePoint UI-level access to site collections, not the SQL-level permissions required to run Windows PowerShell cmdlets remotely.
Site Collection Administrators is a SharePoint permission group controlling UI access to site collections, not the backend database-level access required for PowerShell administration of a farm.
The SharePoint_Shell_Access role is a SQL Server database role that grants the minimum permissions needed to execute SharePoint Windows PowerShell cmdlets against a farm. Contoso administrators need this role on the WingTip farm because they are the ones performing the remote administration tasks. Without this role, PowerShell cmdlets will fail with access-denied errors regardless of SharePoint-level permissions.
WingTip administrators do not need the SharePoint_Shell_Access role; the Contoso administrators who are performing the remote management tasks are the ones who require this role on the WingTip farm.
Concept tested: SharePoint PowerShell Shell Access role permissions
Source: https://learn.microsoft.com/en-us/sharepoint/administration/add-a-user-to-the-sharepoint-shell-access-role
Topics
Community Discussion
No community discussion yet for this question.