Resource manager role

[Paul Linscott]

Hi,

I need to assign permissions to a user who will be responsible to maintain
the resource pool for the entire company. I assigned him to the resource
manager group, thinking that this should give him read/write access to the
resource pool. This does not work. I tried modifying several permissions, but
all attempts failed. The message I get from PWA is "You do not have
permission to edit any of the selected resources". This message comes when I:

1. Select a user from the list of resources under the Resource Menu in PWA
2. Choose the "Open" option

Can someone tell me exactly which group/categories/permissions I need to
assign so he can modify the resource pool?

thx

Paul

 

[Marke]

Try setting him up as administrator

 

[mark.everett]

Paul -

You can't achieve what you want using your approach. If you use
Security Templates, I would start with the Admin template (or use the
Admin group). Call it ERP Admin or something like that. Then, do not
allow (e.g., leave both Allow and Deny unchecked) those features you
don't want the ERP Admin to be able to modify. For example, the way I
have that role set up is:

PWA -> Admin - > Manage Security - > Security Templates
ERP Administrator
Name Allow Deny
Account Creation (Mixed) No
Create Accounts when Requesting Status Reports No No
Create Accounts when Delegating Tasks No No
Create Accounts from Microsoft Office Project Yes No
Admin (Mixed) No
About Microsoft Office Project Server 2003 No No
Clean Up Project Server database Yes No
Customize Project Web Access No No
Manage Enterprise Features No No
Manage Security Yes No
Manage Server Configuration No No
Manage Users and Groups Yes No
Manage Views No No
Manage Windows SharePoint Services No No
Collaboration Yes No
View Documents No No
View Issues No No
View Risks No No
Enterprise Portfolio Management Yes No
Assign Resource No No
Assign Resource to Project Team No No
Backup Global No No
Build Team On New Project No No
Build Team On Project No No
Check in My Projects No No
Edit Enterprise Resource Data Yes No
New Project No No
New Resource Yes No
Open Project Yes No
Open Project Template No No
Read Enterprise Global Yes No
Save Baseline No No
Save Enterprise Global Yes No
Save Project Yes No
Save Project Template No No
See Enterprise Resource Data Yes No
General (Mixed) No
Change Password Yes No
Connect to Project Server using Microsoft Project 2002 No No
Go Offline from Project Web Access Yes No
Integration With External Timesheet System No No
Log On Yes No
Set Personal Notifications No No
Set Resource Notifications No No
User defined 1 No No
User defined 2 No No
User defined 3 No No
View Home Yes No
Status Reports No No
Manage Status Report Request No No
Submit Status Report No No
View Status Report List No No
Tasks No No
Approve Timesheets for Resources No No
Change Work Days No No
Create Administrative Projects No No
Create New Task or Assignment No No
Delegate Task No No
Delete Project Yes No
Hide Task from Timesheet No No
New Project Task No No
New Task Assignment No No
Timesheet Approval No No
View Timesheet No No
To-Do List Yes No
Assign To-Do List Tasks No No
Create and Manage To-Do List No No
Publish To-Do List to All Users No No
Transactions Yes No
Manage Rules No No
Manage Task Changes No No
Views Yes No
Adjust Actuals No No
See Projects in Project Center Yes No
See Projects in Project Views Yes No
See Resource Assignments in Assignment Views Yes No
View Adjust Actuals No No
View Assignments View Yes No
View Models No No
View Portfolio Analyzer No No
View Project Center Yes No
View Project View Yes No
View Resource Allocation Yes No
View Resource Center Yes No
View Risks, Issues, and Documents No No
Workgroup Yes No
Publish/update/status No No


If you have the Microsoft Admin and Config guide (or the better ones
from Msprojectexperts.com) then that will make sense, even with the
fouled up formatting. If you want the Excel page that I use to
document those settings (along with what they mean), email me at mark
dot everett at gmail dot com. Remove spaces as appropriate.

Mark S. Everett | PMP

 

[Paul Linscott]

Mark -

Excellent, thx. My last resort was to give him a reduced version of admin
rights. I thought adding a couple of permissions to the resource manager
group would have been easier and safer than removing rights from a copy of
the admin group.

cheers

Paul

 

[Dale Howard [MVP]]

Paul --

Although Mark's suggestion is probably a good one, I think there may be a
simpler solution. You might try these steps to see if it works for you:

1. Log into PWA with administrator permissions
2. Click Admin - Manage security
3. Select the My Resources category and click the Modify Category button
4. In the Resources section, select the "All current and future resources
in the Project Server database" option
5. Click the Save Changes button
6. Click Modify users and groups in the sidepane on the left
7. Click the Groups link in the sidepane
8. Select the Resource Managers group and click Modify Group
9. In the Categories section of the page, select the My Resources category
10. In the Permissions grid, make sure that the "Edit enterprise resource
data" permission and the "See enterprise resource data" permission are both
set to Allow
11. Click the Save Changes button if you make changes in step #10

Performing the above steps should now allow your staff to edit the resources
in the Enterprise Resource Pool. Hope this helps.

--
Dale A. Howard [MVP]
Enterprise Project Trainer/Consultant
Denver, Colorado
http://www.msprojectexperts.com
"We wrote the book on Project Server"

 

[mark.everett]

Dale -

My settings for the ERP Admin work and are in production, along with
the training I wrote to support it, so I know it works. Your method
will, of course, work, but it gives all resource managers the ability
to edit ERP data. I think that is poor security and configuration
management. However, if Paul's organization allows that, then
certainly, yours is a very valid and sound approach.

Best Regards,
Mark

 

[Dale Howard [MVP]]

Mark --

I was assuming that there were no other Resource Managers in their company.
We rarely ever see clients use the Resource Managers group and I assumed
that Paul Linscott was in the majority on this one. Yes, if there are
others in the Resource Managers group, then they ALL get permission to edit
all resources, which certainly could present a problem. Thanks for your
comment.

 

[Paul Linscott]

Gentlemen,

Thank you both for your contribution. We will have 2 people taking over the
RM role. A main person and a backup. Only those 2 people will have access and
will be insync with one another on maintaining the resource pool. I will
discuss this topic in-house further. thx again.

cheers

Paul

 

[Gary L. Chefetz [MVP]]

Mark:

It's generally accepted practice that Resource Managers have this
responsibility, and therefore it wouldn't be considered a security risk
unless the business model defined Resource Managers as people who manage
widgets and not people.