Now you would think that giving a user Farm administrator rights in SharePoint (Central administration > Operations > Update farm administrator's group) would give them full rights to everything wouldn't you? Well not quite! You farm administrators' may also need:
- Permissions to Shared Services Provider – By default 'all authenticated users' just have rights to '
2. Full Control over all applications – In order to grant a Farm administration account to administer all SharePoint applications. It is necessary to add this per application
NB: both of these accounts can be carried out by the affected farm administrator.