Categories and Global permissions with AD sync

[JenniferW]

I have AD sync running for Enterprise Resource Pool and Groups. It creates
the resources and users ok, and assigns them to the correct group, but none
of the categories or global permissions associated with that group are being
populated on the resource / user.

Is this standard or is something not working right?

 

[Dale Howard [MVP]]

JenniferW --

You are misunderstanding what you see when you edit a User account in PWA.
All you need to see for any User account is the security Group(s) to which
the user belongs. The Category and Global Permissions are within the Group
itself, not in the User account. Merely adding a user to a security Group
is enough most of the time.

In fact, you should RARELY ever add a Category to a User account, or set
Global Permissions for a User account. If you do this, you are creating an
OVERRIDE to the Categories and Global Permissions specified in the Group(s)
to which the user belongs. When you start overriding the permissions for
User accounts, you are creating a maintenance NIGHTMARE.

Best practice here it the KISS (Keep It Simple, Silly) rule. Control
security by simply adding users to Groups. Only add a Category or Global
Permission for a User account as an exception, and do this rarely, if ever.
Hope this helps.

 

[JenniferW]

Perfect. Thanks Dale

JenniferW --

You are misunderstanding what you see when you edit a User account in PWA.
All you need to see for any User account is the security Group(s) to which
the user belongs. The Category and Global Permissions are within the Group
itself, not in the User account. Merely adding a user to a security Group
is enough most of the time.

In fact, you should RARELY ever add a Category to a User account, or set
Global Permissions for a User account. If you do this, you are creating an
OVERRIDE to the Categories and Global Permissions specified in the Group(s)
to which the user belongs. When you start overriding the permissions for
User accounts, you are creating a maintenance NIGHTMARE.

Best practice here it the KISS (Keep It Simple, Silly) rule. Control
security by simply adding users to Groups. Only add a Category or Global
Permission for a User account as an exception, and do this rarely, if ever.
Hope this helps.

 

[Dale Howard [MVP]]

Jennifer W --

You are more than welcome, my friend!