SharePoint 2010: Cannot add group to Managed Metadata Service

While configuring the term store for a client I came across a “fairly” basic step that was left out during my initial configuration of the environment –>  Security permissions for the service applications.  See, although you might be able to view the managed service applications, you will not be able to complete any other tasks pertaining to that specific service.

The example that I’m referring to specifically was that of creating a new group in the managed metadata service application.  When first arriving at the termstoremanager page I could not see the context menu for adding new groups.  I didn’t immediately click, because in the security architecture in 2010 is slightly different.  What I mean with this is that in 2007, if you were able to get into for example the SSP, then changes were pretty good that you could modify items.  In 2010, there is specific security for each managed service which is configured on the service itself.  I love this approach as it allows large enterprise deployments to delegate responsibility for specific functions in a far more granular fashion.

To resolve the “problem” I simply navigated to the manage service applications page, selected the application in question and clicked on Administrators in the ribbon.  (It takes a little getting used to, but don’t click ON the actual service, just select it and then use the ribbon).

 

In the administrators dialog, select yourself and allocate FULL CONTROL.  (Remember to tick FULL CONTROL before clicking OK).  Now you have given yourself administrator privileges on the service and badaboom.

The next step in managing the store, would be to configure the Term Store Administrators.  Simply add yourself, check names, and click on “Save”.  Once completed you can manage all the features of the Managed Metadata Service.

Note:  The concept of administrators apply to ALL managed service applications, so have fun.