STIGUI
V-223272CAT III — Low severitySV-223272r961863_rule

A secondary SharePoint site collection administrator must be defined when creating a new site collection.

Rule version SP13-00-000185 · STIG v2 · 2024-12-10

Discussion

If a site reaches its maximum size, users will be denied access until an administrator fixes the problem. Having a secondary administrator reduces the risk of having a Denial-of-Service on a site. If the site reaches its maximum size, the secondary administrator can fix the problem if the primary administrator is not available. In some situations, having a secondary site administrator could be inappropriate for reasons of control or confidentiality.

Check

Review the SharePoint server to ensure a secondary site collection administrator is defined when creating a new site collection.

Log on to SharePoint Central Administration as a member of the Farm Administration Group.

Click on "Application Management".

Select "Site Collections" >> Change Site Collections Administrator.

For each Site Collections, review Secondary Site Collection Administrator.

If Secondary Site Collection Administrator is not defined, this is a finding.

Fix

Configure a secondary SharePoint site collection administrator when creating a new site collection.

Log on to SharePoint Central Administration as a member of the Farm Administration Group.

Click on "Application Management".

Select "Site Collections" >> Change Site Collections Administrator.

For each site, define a Secondary Site Collection Administrator.

Select "OK".

Identifiers

Group ID
V-223272
Group title
SRG-APP-000516
Rule ID
SV-223272r961863_rule
Check ID
C-24945r430873_chk
Fix ID
F-24933r430874_fix