A secondary SharePoint site collection administrator must be defined when creating a new site collection.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-60007	SP13-00-000185	SV-74437r1_rule		Low

Description
If a site reaches its maximum size, users will be denied access until an administrator fixes the problem. Having a secondary administrator reduces the risk of having a Denial-of-Service on a site. If the site reaches its maximum size, the secondary administrator can fix the problem if the primary administrator is not available. In some situations, having a secondary site administrator could be inappropriate for reasons of control or confidentiality.

Description

If a site reaches its maximum size, users will be denied access until an administrator fixes the problem. Having a secondary administrator reduces the risk of having a Denial-of-Service on a site. If the site reaches its maximum size, the secondary administrator can fix the problem if the primary administrator is not available. In some situations, having a secondary site administrator could be inappropriate for reasons of control or confidentiality.

STIG	Date
MS SharePoint 2013 Security Technical Implementation Guide	2018-06-27

Details

Check Text ( C-60697r2_chk )
Review the SharePoint server to ensure a secondary site collection administrator is defined when creating a new site collection. Log on to SharePoint Central Administration as a member of the Farm Administration Group. Click on "Application Management". Select "Site Collections" >> Change Site Collections Administrator. For each Site Collections, review Secondary Site Collection Administrator. If Secondary Site Collection Administrator is not defined, this is a finding.

Check Text ( C-60697r2_chk )

Review the SharePoint server to ensure a secondary site collection administrator is defined when creating a new site collection.

Log on to SharePoint Central Administration as a member of the Farm Administration Group.

Click on "Application Management".

Select "Site Collections" >> Change Site Collections Administrator.

For each Site Collections, review Secondary Site Collection Administrator.

If Secondary Site Collection Administrator is not defined, this is a finding.

Fix Text (F-65417r1_fix)
Configure a secondary SharePoint site collection administrator when creating a new site collection. Log on to SharePoint Central Administration as a member of the Farm Administration Group. Click on "Application Management". Select "Site Collections" >> Change Site Collections Administrator. For each site, define a Secondary Site Collection Administrator. Select "OK".