Users who install, configure, and manage the PCC for SharePoint product will need different permissions to perform various actions. Below is a list of actions that can be performed and the permissions required to perform each action.
Install using GUI Application
Installation of PCC for SharePoint using the GUI Application requires a certain set of permissions. Furthermore, if using the GUI application, then the user must also manually activate some features through the SharePoint UI. The permissions required to successfully perform these steps are as follows:
- User is an administrator on the local machine.
- User is a site collection administrator – to enable the Prizm Configuration Tools feature.
Installing using PowerShell
Installation of PCC for SharePoint using PowerShell requires a different set of permissions than when using the GUI application. Permissions required:
- User is a farm administrator.
- User is an administrator on the local machine.
- User is a shell administrator. See Microsoft documentation for Add-SPShellAdmin.
Configuring Global Settings
Through Central Administration you can configure global settings for PCC for SharePoint. This includes settings such as the location of the tempcache folder. Permissions required:
- User is a farm administrator.
Activate Prizm Digital Rights Management Feature
Through central administration you can activate and de-activate the Prizm Digital Rights Management feature for any web application in the farm. Permissions required:
- User is a farm administrator.
Activate Prizm Configuration Tools Feature
In the site settings of the root web of a site collection, you can activate and de-activate the Prizm Configuration Tools feature for a site collection. Permissions required:
- User is a site collection administrator.
Control DRM and Annotation Permissions
Site and list owners (and also designers) can modify DRM and Annotations permissions. Permissions required:
- User has “Manage Lists” permission for a library – allows the user to override DRM and Annotations permissions for a document library.
- User has Manage Lists” permissions for a site – allows the user to set DRM and Annotations permissions that will be used in document libraries throughout the site.