IIS Manager Permissions

 

Applies To: Windows Server 2012 R2, Windows Server 2012

Use the IIS Manager Permissions feature page to manage IIS Manager users, Windows users, and members of Windows groups that are allowed to connect to a site or an application. Users can configure delegated features in any sites and applications to which you grant them permission from the IIS Manager Permissions page.

This feature is available only for server connections. When you open the feature at the server level in IIS Manager, you can view the users who are granted permission to all sites and applications on the Web server, and you can select a user to remove the user's permission to a site or an application. To grant a user permission to a site or an application, select the site or application and then open the IIS Manager Permissions feature to configure the users who are allowed to connect to that site or application.

Sort the list by clicking one of the feature page column headings or select a value from the Group by drop-down list to group similar items.

Related scenarios

In this document

UI Elements for IIS Manager Permissions

The following tables describe the UI elements that are available on the feature page and in the Actions pane.

Feature Page Elements

Element Name

Description

Name

Displays the user name that is used to connect to sites or applications in IIS Manager.

Path

Displays the path of the object that the administrator can manage. For example, the path might be a site name, such as Default Web Site, or the path of an application in the default website, such as Default Web Site/calendar.

Level

Displays the level of the administrator. The possible values are Site or Application.

Type

Displays the type of credentials that the administrator uses. The value can be:

  • Windows Group: if the user is a member of a Windows group on the server.

  • Windows User: if the user is a Windows user on the server.

  • IIS Manager User: if the user is not a Windows user or a member of any Windows groups on the server. IIS Manager credentials are specific to IIS, and Windows does not recognize nor do other applications on the server.

Actions Pane Elements

Element Name

Description

Allow User

Opens the Allow User dialog box in which you can select a user to grant them permission to connect to a site or an application.

Deny User

Removes the selected user from the IIS Manager Permissions list.

Show all users

Displays users at the current level and lower levels.

Show only site users or Show only application users

Displays users at only the current level.

Allow User Dialog Box

Use the Allow User dialog box to allow IIS Manager users, Windows users, or members of Windows groups to connect to a site or an application. Users can configure delegated features in any sites and applications to which you grant them permission.

Element Name

Description

Windows

Select this option when you want to allow a Windows user or members of a Windows group to connect to the site or application. When you select this option, the Windows account must already be created on the Web server or the domain to which the server is joined.

IIS Manager

Select this option when you want to allow an IIS Manager user to connect to the site or application. When you select this option, the IIS Manager user account must already be created at the server level in IIS Manager.

Note

This option is enabled only when you configure the management service to accept connections from both Windows users and IIS Manager users.

Select

If you selected the Windows option, click Select to open the Select User or Group dialog box and search for a Windows user or group.

Note

To include Windows groups in a search, on the Select User or Group dialog box click Object Types, select Groups, and then click OK. Additionally, if your computer is joined to a domain and you want to search for users or groups on the domain, click Locations, select a location, and then click OK.

If you selected the IIS Manager option, click Select to open the Users dialog box and select one or more IIS Manager users.

Users Dialog Box

Use the Users dialog box to select an IIS Manager user who you want to allow to connect to a site or an application. Users can configure delegated features in any sites and applications to which you grant them permission.

Element Name

Description

Select user

Select the IIS Manager user name that you want to allow to connect to the site or application.