I would like to give a user Read only access to Central Administration. I have put the user into the Read Group that is created OOB, but the user can still create web applications and site collections. I even created a new permission level that has very limited permissions, but the user is still able to do more than just read. My objective is to allow a user to “View all site collections” at http://contoso.com/_admin/SiteCollections.aspx.
It seems CA doesn’t store information in lists and libraries like a regular site collection. Any suggestions on how a user can access the information surfaced in _admin/SiteCollections.aspx? Unfortunately we won’t be able to use PowerShell.
