How does permission retrictions affect a resource ......

[San Diego]

...... who has several groups attached to his name.

So I have Project Mangers that belong to Project Manager group & Team Member
group. Does the fact that I have the Team Member group heavliy restricted
affect the permissions (many more) that I have assigned to the Project
Manager group.
Basically, do the Team Member permissions affect someone that also belongs
to the Project Manager group?

Thanks,
Gary

 

[Gérard Ducouret]

Hello Gary,
There are 3 possible states for each permission in every group.
- Allowed (Allowed case checked)
- Not Allowed (nothing checked)
- Denied (Denied case checked)

Denied has the highest priority
Allowed the second priority
Not allowed the third one

If a user belongs to several groups, and has a permission which is denied in
one of these groups, it will be denied everywhere else.

Gérard Ducouret

 

[Dale Howard [MVP]]

Gary --

If a user is a member of multiple groups, the system processes cumulative
permissions as follows:

Any permission set to Deny in one Group will override the Allowed or Not
Allowed values in every other Group
Any permission set to Allow in one Group will override the Not Allowed value
in every other Group
Any permission which is set to Not Allowed in all Groups will not allow the
user to perform the action specified in the permission

Based on your example, if you set the View Project Center permission to Deny
in the Team Members group, those users who are members of both the Team
Members group AND the Project Managers group will be prevented from seeing
the Project Center page, in spite of the fact that the View Project Center
permission is set to Allow in the Project Managers group. Therefore, if you
have heavily restricted the permissions in the Team Members group by setting
any permissions to Deny, then I would strongly urge you to reset those
permissions to Not Allowed instead (neither Allow or Deny is selected for
each permission).

Beyond this, I would strongly encourage you to purchase our company's books
on Project Server 2003 (if you have not done so already) and to study the
Administrator's book thoroughly. You can purchase our books by clicking on
either of the URL's in my signature block. Hope this helps.