Min Permissions for Pro access to Server?

J

Jim Moon

Good day!

We would like for an individual user of Project Professional to have
permission to connect to Project Server and to access a single project in
Project Server. What is the (are the) minimal permission(s) setting(s) in
Project Server that could be set for this user? If there are options, I'd
be interested in hearing all of them with advantages/disadvantages.

Thank you for your time!

Jim
 
J

Jim Moon

I've looked further into the user request on this matter.

The user is actually getting:
HTTP Error 401.2 - Unauthorized: Access is denied due to server
configuration.
Internet Information Services (IIS)

The following is NOT installed on the Windows 2003 server hosting Project
Server:
Internet Explorer Enhanced Security Configuration

Some of us (administrators on the Win 2003 Server) are NOT having the
connection problem.

The users having the connection problem are members of Active Directory
groups which have been added to the Users group on the Win 2003 Server.
And, the Users group has read and execute permissions on the file system for
the Project Server directories in the IIS hierarchy.

The IIS web is HTTP (NOT HTTPS). Windows Authentication alone is selected
for that web. No anonymous access.

Thanks in advance for any help!

Jim
 
D

Dale Howard [MVP]

Jim --

Please answer the following questions:

1. Have you changed the default Group and Category permissions in Project
Server in any way?

2. Is the person in question the one who actually created the project, or
did someone else create the project and he/she will manage it?

Let us know.
 
J

Jim Moon

Hi Dale,

Answers:
1. AD Groups have been associated with a couple of default Groups. It's
possible that permissions have been altered in default Groups. New
Categories have been created. It's possible that permissions have been
changed in default Categories. I wish I could say something more definitive
about the permissions.

2. Someone else created the project, and she will manage it.

Thanks,
Jim
 
D

Dale Howard [MVP]

Jim --

Since I have no idea what changes your people made to the default Groups and
Categories, please understand that I will be "shooting in the dark" for an
answer to your question. So, here goes...

1. Create a custom Category that gives permission to this one project, plus
the relevant Views that the new PM needs to see in PWA
2. Create a custom Group for this one PM using the Project Managers
template
3. Include the custom Category in the custom Group
4. On the Modify Group page, select the custom Category and then set the
Permissions using the Project Managers template
5. Remove the one PM from the Project Managers group and add her to the
custom Group

That's one way to do it. Hope this helps.
 
J

Jim Moon

Dale,

Thank you for the tip. After taking those 5 steps, and continuing to get
the 401.2 Authorization error, we found the source of the issue.

The new PM's Internet Explorer Security Trusted Sites had listed the
<domain_name>:<port_number>. The fix was to add <domain_name> alone,
without the port number as a trusted site.

I had assumed that since she could access PWA from the same workstation, her
Trusted Sites and associated settings were OK.

Thank you again for your feedback!

Jim
 
Top