Different user permission layers in PWA 2007

[asadim]

Can someone please guide me through all the different permission levels and
layers in Project Server 2007 and PWA? So far I have come across the
following places that need permission settings:
PWA -> Server Settings -> Manage Users
PWA -> Server Settings -> Manage Categories
PWA -> Server Settings -> Manage Groups
PWA -> Server Settings -> Manage Templates
PWA -> Site Actions -> Site Settings - > People and groups
PWA -> Site Actions -> Site Settings - > Advanced permissions
SP Central Administration -> Application Management -> Policy for Web
Application

I think that's pretty much it... I'd appreciate it if somebody could either
provide a quick explanation about each, or let me know of the steps to create
a user with access to PWA. The way I have things set up is using common
sense, since I didn't have any documentations or manuals.

Thanks.

 

[Dale Howard [MVP]]

asadim --

Think of Project Server security this way:

Categories control what you can SEE in Project Server (projects, resources,
and Views).
Groups control what you can DO in Project Server.
The interaction between Groups and Categories controls what you can DO with
what you can SEE.

To control permissions for users the most efficient way, never change
permissions at the user level individually. Instead, control all
permissions for users through Groups and Categories. Hope this helps.