Project Server 2007 Security Re-set

[thayden]

I am the Administrator of our Project Server 2007, and I am also a member of
the Project Manager group.

After I adjusted the Group security settings for the Project Manager group,
I lost all Admin rights and am now locked out of being able to access the
Project Web Access Permissions Page. Our Tech Support was able to re-set ALL
group security settings to "Allow" but this has still not restored my Admin
rights.

Question: What can I do to regain access to the PWA Permissions Page as
well as other Admin access?
Thanks!

 

[Gary L. Chefetz]

Thayden:

It depends on what you did to make this happen. This FAQ describes a fairly
common cause of this:

http://www.projectserverexperts.com...inistrators group in Project Server 2007.aspx

Based on what you're saying this is the likely scenario, but we'd really
need to know exactly what actions you took to make this happen. Adjusting
permissions for the PM group does not have any impact on Administrators,
unless you were getting your admin permissions from that group, which would
be a non-standard configuration.

 

[Gary L. Chefetz]

Thayden:

I meant to add to last reply that you should not be a member of any other
group other than the Administrator's group. It may be that removing yourself
from the PM group will restore your ability to manage the system. The only
way I could see this happening is that you set admin permissions in the PM
group to "Deny," which is a very bad practice. If you did this, you really
should consider our book, Implementing and Administering Project Server,
which gives you best practices for building your security model.

 

[thayden]

Thank you for the quick response! I was set up as a member of other groups,
AND admin permissions in PM group were set to Deny - which has been
rectified, but it did not restore my rights. I will have myself removed from
the other groups and see what happens. Your book would have come in very
handy last week. I will add it to my library. Many thanks!

 

[thayden]

I was removed as a member of all groups except for Admin, and that resolved
the problem.
Thank you so much!

 

[Gary L. Chefetz]

Now remove all those deny permission settings. I've setup more than a
hundred Project Server instances and I've only used a DENY setting on two
occasions and then it was only for very specific exceptions.