In our SP2013 on-premise farm, we have two web applications. One for standard team sites and one for MySiteHost. These 2 web application are running under two different IIS app pool with two different identity.

Users followed some sites. The users can post newsfeed directly from their Mysite to those team site's newsfeed. However, they encountered error. After investigation, (refer to this site) I ran follow scripts:

$wa= Get-SPWebApplication $WebApp_MySite
$wa= Get-SPWebApplication $WebApp

It seems fix the problem. However someone told me I don't need to run last 2 lines. It grants unncessary permission to users.

My question is, how can I reverse what I have done?

2 Answers 2


In Central Administration, on page /_admin/WebApplicationList.aspx select your WebApp and click on User Policy in ribbon. You can see in a dialogbox your account ID_WebApp_MySite with full control. Select it and click Delete selected users.

  • Thanks for your answer. After I ran a few tests, I found GrantAccessToProcessIdentity command will grant the user to all content databases under that web application, too.
    – Mark L
    Mar 11, 2015 at 7:57
  • Hi using powershell how to remove these permissions?
    – adilahmed
    Feb 10, 2016 at 15:21

To remove a permission from the Web Application:

$wa = Get-SPWebApplication $WebApp_MySite

$wa.policies.remove("Policy Name")

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.