Remove an administrator from a User Profile service application (SharePoint Server 2010)

Applies to: SharePoint Server 2010

Farm administrators can remove a service application administrator from a User Profile service application. For example, the account for a user who leaves the organization should be removed from the list of service application administrators. Another reason for the removal is when a service application administrator is no longer required. For more information about administrators, see Choose administrators and owners for the administration hierarchy (SharePoint Server 2010).

Before you perform this procedure, confirm the following:

• A User Profile service application is running in the farm.

In this article:

• Remove an administrator from a User Profile service application by using Central Administration

• Remove an administrator from a User Profile service application by using Windows PowerShell

Remove an administrator from a User Profile service application by using Central Administration

You typically use the Central Administration Web site to remove an administrator from a User Profile service application in a stand-alone deployment.

To remove an administrator from a User Profile service application by using Central Administration

1. Verify that you have the following administrative credentials:

   • To use Central Administration, the user account that is performing this procedure must be a member of the Farm Administrators group.

2. On the Central Administration Web site, in the Application Management section, click Manage service applications.

3. In the list of service applications, click User Profile Service Application.

4. On the Service Applications tab, in the Operations group, click Administrators.

5. On the Administrators for User Profile Service Application page, select a user or group account, click Remove, and then click OK.

Remove an administrator from a User Profile service application by using Windows PowerShell

You typically use Windows PowerShell to remove an administrator from a User Profile service application when you want to automate the task, which is common in enterprises.

To remove an administrator from a User Profile service application by using Windows PowerShell

1. Verify that you meet the following minimum requirements:

   • See Add-SPShellAdmin.

2. On the Start menu, click All Programs.

3. Click Microsoft SharePoint 2010 Products.

4. Click SharePoint 2010 Management Shell.

5. From the Windows PowerShell command prompt (that is, PS C:\>), type the following commands:

   1. To get a list of all service applications and their GUIDs, type the following command:

      Get-SPServiceApplication
      

   2. To create a variable that contains the GUID of the User Profile service application for which you want to remove an administrator, type the following command:

      $serviceapp = Get-SPServiceApplication <guid>
      

      Where <guid> is the GUID for the User Profile service for which you want to remove a service application administrator.

   3. To create a variable that contains the list of administrators for the User Profile service application, type the following command:

      $security = Get-SPServiceApplicationSecurity $serviceapp -Admin
      

   4. To create a variable that contains the claims principal for a user account, type the following command:

      $principalUser1 = New-SPClaimsPrincipal -Identity "<domain\user>" -IdentityType WindowsSamAccountName
      

      Where <domain\user> is the administrator you want to remove.

   5. To remove the user from the list of service application administrators, type the following command:

      Revoke-SPObjectSecurity $security -Principal $principalUser1
      

   6. To apply the changes to the User Profile service application, type the following command:

      Set-SPServiceApplicationSecurity $serviceapp -ObjectSecurity $security -Admin
      

   For more information, see Get-SPServiceApplication, Get-SPServiceApplicationSecurity, Revoke-SPObjectSecurity, and Set-SPServiceApplicationSecurity.

See Also

Concepts

User Profile Service administration (SharePoint Server 2010)
Assign administration of a User Profile service application (SharePoint Server 2010)
User Profile service application overview (SharePoint Server 2010)
Windows PowerShell for SharePoint Server 2010 reference