Question Regarding Controlling Who Can Edit/Add Resources in MSPS

[Tim Mccoy]

I am setup as an Administrator and can see and edit/add all resources in the
enterprise resource pool. How can I give a user permissions so they can only
edit/add certain resources? This person also needs to see all resources.

I tried setting up the RBS and they could add resources only to the RBS
group they were assigned. However, the user could not see all resources.

Thank you!

Tim

 

[Jonathan Sofer [MVP]]

I assume you are controlling permissions through security groups and not
directly against resources. If so, then add the My Organization category to
the security group in question and only enable the permission "View
Enterprise Resource Data" to that security group.

Jonathan

 

[Tim Mccoy]

Thank you for the suggestion Jonathan, your assumption is correct and I am
using groups to manage permissions.

I did your suggestion and it allowed the user to edit all resources, not
just the ones with the same RBS. What did I do wrong?

Thank you.

Tim Mccoy

 

[Jonathan Sofer [MVP]]

Tim,

I verified that your security model should work. I was able to set up a
test account to only edit resources that were below the test account in the
RBS structure. And when I tried to edit resources that either did not have
an RBS set or were not under the test accounts RBS structure I would get the
"You do not have sufficient permissions to view the specified page" error
page which is correct.

You must have a security category associated to this security group that has
the "Edit Enterprise Resource Data" category permission enabled and has
visibility to all resources in the system. Remember that these category
permissions all overlay on top of each other.

You might need to backtrack all your security groups and categories to find
out where that occurs.

Jonathan