There are times when it is critical for the Farm Administrator to designate security policies for a web application. An administrator can do this from Central Administration and it overrides security implemented at the site collection and at sub-site level.
The following are some useful scenarios where this may be implemented:
Enterprise organizations need to designate at least one person as the Site Administrator. Once assigned, they are now the administrator of the web application. This is not to be confused with the Farm Administrator or a Site Collection Administration.
When bringing sites online, it is advantageous to set up security to deny access to all users. Allow access to only those users who are your beta users. After the site is live, you can remove these restrictions.
In this recipe, we will show how to create a new policy and then add users to it.
