Group/Category Permissions

[JVK]

We user MS Project Professional 2007 and Project Server 2007 in IT, and most
IT staff have unlimited access to all projects. We also want to encourage
non-IT power users to use Project and Project Server as well, but on a
limited basis. I want to give those people the following permissions:

(1) 'View Only' access to *all* projects
(2) 'Edit' access to projects which they own or are a resource in
(3) Restricted from using IT Resources in projects

I pretty much have (2) covered with Groups/Categories, but I'm not sure how
to affect (1) and (3). For (3) I may have to restrict all Resources...
Thanks for any suggestions.

 

[BK Searcy]

We user MS Project Professional 2007 and Project Server 2007 in IT, and most
IT staff have unlimited access to all projects.  We also want to encourage
non-IT power users to use Project and Project Server as well, but on a
limited basis.  I want to give those people the following permissions:

   (1)  'View Only' access to *all* projects
   (2)  'Edit' access to projects which they own or are a resource in
   (3)  Restricted from using IT Resources in projects

I pretty much have (2) covered with Groups/Categories, but I'm not sure how
to affect (1) and (3).   For (3) I may have to restrict all Resources....  
Thanks for any suggestions.

JVK,
You should be able to accomplish (1) by the following:

If you already have (2), then I'm assuming you have a Group and a
Category set up to grant edit perimissions per your statement. In
addition, create a new Category, named My Project View Only or
something to that affect and set the category permission for PROJECTS
to ALL current and future Projects.

In you Group, add this category to your Selected Categories, along
with the one you already have. Once you've added, click on the
Category in the box. Scroll down and check the box to ALLOW "Open
Projects" but don't select any other permissions.

This will give users in this group additonal permissions to Open all
projects in MS Project but not Save or Publish or Corrupt.

If you want these users to see all projects in some Project Server
Views, go back to the Category in Manage Categories and add the views
you want to the views section at the bottom.

For (3), one option is to utilize a simple RBS of IT and NON-IT but
that would require you to put this in place for all you current
resources and categories so I'm going to yield to those that have
proven their expert knowledge over and over in this discussion group
to advise on that or an easier option.

Hope this helps.

 

[JVK]

BK:

Thanks very much for the reply, I appreciate it. Yes it did help a bit, but
now unfortunately I'm more tangled up than ever. I dropped playing with my
(1) and (3) issues; now I can't get my (2) to work by itself - in other
words, 'Edit' access to *only* projects for which persons in this Category
are the Project Owner, Status Mgr or is on that project's Project Team.
Here's my scenario.

My test person is in the "Elite Project Managers" Group, and that Group is
the only item referenced in the "My Personal Projects" Category under Users
and Groups. Under Projects for this Category, I have the "All current and
future..." radio button selected, no projects indicated specifically, and the
first two check boxes checked: "The User is the Project Owner or..." and
"The User is on that project's...". When I log in as my test person in
Project Center, *all* projects come up, regardless of whether this person is
on the team or not. And it allows the test person to Edit and save any and
all projects. What am I missing? Thanks again

 

[BK Searcy]

I believe the problem with (2) not working is that you have the option
"All Current and future" selected. By selecting that option, it gives
the users belonging to a group with that category permission, access
to ALL current and future projects. The page does not gray out the
selections below, which can be deceiving, so while you selected
options below the project listing, the All Current and Future
selection overrides those.

You need to select "Only the projects indicated" option instead, and
while you aren't choosing any specific projects, the permissioning
will be based off the options you select in the "Apply the above
Project security..." section. Then it should provide the resources in
your "Elite Project Managers" group with access to only the projects
that they own or are a resource on.

Hope that helps

BK

 

[JVK]

Yesss - that did the trick for (2), the edit *only my projects* view -
thanks!!!

Now I'm back to the other problem of also giving these people 'View Only'
access to all projects. I tried adding the new Category per your earlier
suggestion, and testing it, but I think I have a separate problem now.

When I'm in PWA as myself and I select 'Sign in As Different User', it gives
me a login window, I log in as the test person, then it shows 'Welcome Test
person..." in the upper right. But when I 'Edit' a project from the Project
Center list, it lets me, and it shows the status of that project as Checked
Out by *me*(!), not by the test person. I'm going to table this for the time
being, unless you have a quick fix for that one - thanks very much again for
your help!!

JVK

 

[BK Searcy]

One thing to try is to totally close out of your browser, and when you
are prompted to sign in, select Use Another Account and enter in the
credentials for your test record. Haven't seen this be an issue
before, but worth a try. One other thing is to make sure that you
don't have MS Project opened with a connection to the server as
yourself.