MSP 2007 Permissions problems

[Clara]

We are using active directory groups and AD synch to add resources to our
groups such as Team Member. I have virtually all permissions enabled in
Server Settings/Project Web Access Permissions. I have used the default
security templates named ProjectServer2007_Project Manager, Team Member, etc.
and set permissions, making slight changes. I then assigned the default
groups to the Categories, so a project manager is in the PS2007_Project
Manager group, which has the category PS2007_ My Projects, which uses the
PS2007 Project Manager security template. I have allowed all current and
future projects and resources. The permissions do not seem to be inherited.
Most users could not even access PWA unless I manually applied the templates.
What am I doing wrong? This all worked fine in 2003, except we didn't use AD
groups and synch. Thanks

 

[Dale Howard [MVP]]

Clara --

To use AD synchronization with Project Server 2007, must must set up the AD
synch in two places in PWA:

1. Click Server Settings - Active Directory Resource Pool Synchronization.
The settings you make on the Active Directory Resource Pool Synchronization
page populate the Enterprise Resource Pool with resources. Obviously, you
must have an AD group containing the names of resources who must show up in
the Enterprise Resource Pool. From your description, it sounds like you
have done this first step.

2. Click Server Settings - Manage Groups. Click the name of each PWA Group
individually and then connect the PWA Group with a corresponding AD group.
This is how the system assigns resources to the PWA security Groups during
each synchronization cycle. It sounds like you may not have done this step.
Can you confirm that each PWA Group maps to a corresponding AD group? Let
us know.

 

[Clara]

Yes, we have synched the groups to our AD groups, Dale. I am just stymied
and so are the MS support people I have talked with. Thanks