AD Sync and Permission Groups

[Teresa S]

We are using EPM 2007 with MOSS 2007. I set up a view only group with the
view permissions I want to designate. I then entered an AD group to sync
with. I went to the page to activate the synchronization and it said that it
synchronized that group with AD. Back in the group edit page there are no
additional users showing. The list shows those people that are resources. I
don't want this group to be resources, they are other people in the
organization that just need view only access. But the people in the AD group
can't view pwa. Am I doing something wrong? Is there a way to give a group
of people view only access and link to AD?
TIA
Teresa

 

[Paul Conroy]

All users with a requirement to view pages in PWA need to be configured with
log on permissions. If you've created a custom group with permissions to a
view, and nothing else, then it's unlikely that you've included the
permissions for them to log on.

Try adding the global permission to log onto PWA to your custom group.

These users will still consume a PWA CAL.

 

[Teresa S]

Thanks for the response. I did give permission to log on to the group. It's
not a permission problem. It's an AD sync problem.

 

[Teresa S]

Thanks for the reply. I did give the group permission to log on. It's an AD
sync issue not a permission issues.

For those who are encountering this problem: we tracked to the sync error
that a custom resource field required was not filled in. So, for resources
we have a custom resource field that we require be filled in. The people in
the view-only group aren't resources so I thought that required field would
not pertain to them but apparently in 2007, required is for anyone you give
access to the system not just resources. Anyway, we changed that field to
not be required and that solved the problem.