Setting user rights to add solution to SharePoint 2007 solution store

You might want to give some accounts the access to deploy solutions into sharepoint 2007 farm without having to use installation account. As when you start distributing the installation account to other team, the changes performed on the farm can be very hard to track without strict change management process.

We'll need to give the user the following rights on the sharepoint & SQL server:

  • SharePoint Farm Administrators Group Account
  • Member of local administrators group on each Sharepoint WFEs
  • Member of db_owner on the SharePoint Central Admin web application content database
  • Give the user full permission to the web application thru Web Application Policy.

Please be aware that doing all of these steps will give full access to the user to the farm configuration, web applications, as well as the Sharepoint servers.

In this example, we've solutionuser2 that needs to have the rights to deploy solution to Sharepoint 2007 farm:

  • Giving the user permission to be member of farm administrators

 

  • Setting him as member of local administrators group,
  • Member of the db_owner of the sharepoint central admin web application content database thru SQL Server management studio. In this example, the content database name is SharePoint_Admin_Content_2007

 

  • Give the user full permission to the web application thru Web Application Policy.

 

And now the user can add solution to the solution store as well as deploying the solution package to the farm.