how to remove permission for some users explicitely on only on pro

[Imran Admin]

Hi I wants to remove edit/delete modify permission on master project this way

1. project managers who has project professional installed should not be
able to open master project
2. Project manager and all other users can have read only permission via
project web access to Master project that i have.

how can i achive above goal.

 

[Andrew Lavinsky]

That's a question with quite a wide variety of answers depending on how you've
set up your security model, RBS, and who actually owns the project in question.

The most universal way, which is not necessarily the most recommended way
in some environments, would be to set up a brand new category. Assign the
single project to the category, and then assign the PM Group and the Team
Member Group. Make sure each of those groups have the appropriate permissions.
Make sure to set the category to apply to the selected project only.

Then figure out which group will actually have read/write permissions (Admin
perhaps?) and make sure to assign them to the category with the right permissions.


- Andrew Lavinsky
Blog: http://blogs.catapultsystems.com/epm

 

[Dale Howard [MVP]]

Imran --

This isn't hard at all. You can do this through a custom Category. Do the
following:

1. Log into PWA with administrator permissions.
2. Click Server Settings - Manage Categories.
3. Click the New Category button.
4. Name the new category something like Banned Projects.
5. In the Users and Groups section, add the Project Managers group.
6. In the Permissions grid for the Project Managers group, select the DENY
setting for the Open Project permission.
7. In the Projects section, add the master project to the list on the
right.
8. DO NOT select anything else on the page.
9. Click the Save button.

Also, make sure that YOU are not a member of the Project Managers group, or
YOU will not be able to open the master project either. As the Project
Server administrator, you should only be a member of the Administrators
group.

Beyond this, if there are any other projects you need to ban your PMs from
opening, all you need to do is to add the banned projects to the Banned
Projects category. Hope this helps.

 

[Xiao]

Hi Andrew and Dale,
I have a question similar to the question of Imran Admin:
In my organization, we are using master projects too, but we want that all
the progress updates are made at the elementary project level, by the
Project Managers. We want to prevent the Executives from entering any
progress when they open the master projet in Project Pro.
How can we do that?
Thanks for your help

 

[Andrew Lavinsky]

I guess the main question is are you sure Executives should be opening projects
in MS Project? It's rare that I see a company that allows Executives to
do that.

I am not sure how you have your security set up, but I would generally recommend
following either of these two options in a default setup scenario:

A) Go into the Executive security group and deselect the option to Log On
To Project Server from Project Professional

or...

B) Go into the Executive security group, select My Organization, and deselect
Save Project to Project Server

(Both of those would usually be unchecked unless someone went in and turned
them on)

Then test either with a dummy account, or using the View Effective Rights
Tool to determine if there are any other changes required to restrict Executive
access to the project.


- Andrew Lavinsky
Blog: http://blogs.catapultsystems.com/epm