Permissions for Owner role

M

Mickey

Hi All,
Does anyone know which permission(s) provides the project manager with
the owner role of the project plan? The ability to edit the owner role
is not available to our project managers in PWA because someone
accidentially edited the permissions incorrectly so I need to fix it.

Any information you can provide is appreciated!


Thanks,
Mickey
 
D

Dale Howard [MVP]

Mickey --

You won't like this answer. The permission required to change the Owner of
a project is the Manage Enterprise Features permission. If you grant this
permission to your PM's, it gives them access to the Admin menu and the
Manage Enterprise Features submenu in PWA. Hope this helps.
 
M

Mickey

Thanks, Dale...

You are right - I definitely don't like that answer for obvious
reasons. Is it possible that another premission also impacts the Owner
of a project setting? We didn't have that permission turned on for any
of the project managers to start with so I am baffled as to how that
could have impacted our configuration. Any ideas?

Thanks again,
Mickey
 
D

Dale Howard [MVP]

Mickey --

Well, who edited the permissions and what permission did they edit? All I
can tell you is that the Manage Enterprise Features permission is what
drives the right to change the Owner field. Hope this helps.
 
M

Mickey

Thanks, Dale....

I made the change to allow the Manage Enterprise Features permission
and the Owner field still does not appear for the Project Managers in
PWA. Here's a list of the permissions that were recently changed to be
denied.

Open Project Template
New Project
Read Enterprise Global
Save Baseline
Save Project Template
Change Password


Would any of the permissions above combined with the Manage Enterprise
Features permission impact the Owner field?

Thanks again,
Mickey
 
D

Dale Howard [MVP]

Mickey --

Your problem is probably caused by using the Denied state for those
permissions. As a general rule, you should never or rarely ever use the
Denied state of a permission because permissions are cumulative across the
Groups and Categories to which each user has access. If you set a
permission as Denied in one group, that permission trumps the permissions in
all other Groups to which a user belongs. Therefore, I would strongly
recommend that you change the Denied state to Not Allowed for each of those
permissions (neither Allow or Deny is selected) and see if that rectifies
the situation. Let us know if this helps.
 
M

Mickey

Thanks, Dale--

I realize that Not Allowed is preferred over Denied for those reasons.
Unfortunately, the difference should not impact me in this situation
since I am testing it with only the Project Managers group listed under
my user profile. Just to be sure, I changed all of the Denied
permissions to Not Allowed and it still does not work.

Any other ideas?

Thanks again,
Mickey
 
D

Dale Howard [MVP]

Mickey --

Are the people in the Project Managers group also members of other security
Groups as well? If so, have you set Denied permissions in those other
Groups? Let us know.
 
M

Mickey

Dale,

No, I removed myself from all other groups in order to test this with
my user profile and it still does not work with my user profile.

Thanks,
Mickey
 
D

Dale Howard [MVP]

Mickey --

I'm blanking. Without being able to see your system configuration to know
all of the default settings you changed, I can't imagine what is the source
of your problem. Perhaps someone else has an idea for you. Sorry.
 
Top