Servera. project managers <<continued>>

E

Earl Forrence

I know that this question was addressed on the 17th ...
but my search today is not showing the post created
by "Montse" and answered by Dale Howard.

===============

I too -- by the demand of our HW Engineering group -- am
forced to implent an environment where Project Managers in
one department can not view those of another department.

I've made the change that Dale suggested to Montse
(removing My Organization from the Project Manager's
group).

Unfortunately, while logging in under another name (so as
to be a PM, not an ADMIN), I still can see and open other
group's project plans. Ouch

Not sure what to do now ... help ...

Thanks .. Earl
 
D

Dale Howard [MVP]

Earl --

Assume that your two departments are Department A and Department B. Your
two possible scenarios are:

1. Nveryone in Department A to be able to see another's Department A
projects, but they should not be able to see any of those in Department B,
and vice versa.

2. Each manager in either department only be able to see the projects that
they are managing, but no one else's projects.

Which one of these is your scenario? Let me know, as the solution depends
on which scenario you need to set up.
 
E

Earl Forrence

Dale,

The desire is that mostly along the lines of your option 1.

Everyone in dept A (PM, team lead, team members)
should only see the plans of their department (currently
coded in the Group field if that's any help).

Some departments have multiple PM's; they would expect
to see all the plans for their department (but this is a
lower priority than the above).

Next, anyone in department B (PM or otherwise) should
not even realize that the department A's plans exist. Or
if they can see them, then that they can not open them.

Resource Managers are kind of an "undefined" notion at
the moment. Yet in our current setup, we made PM's to be
RM's as well.

Then, Executives should be able to peruse their way
through anyone's plans ... but, presumably, not to update
them.

Lastly, the Admin's should be able to get to any of
the plans ...

Thanks for any help you can be ... Earl

PS: Should it make a diffeeence, we are still using 2002
Project Server and Professional.
 
D

Dale Howard [MVP]

Earl --

To set up the environment you want to use, I believe you will need to do the
following:

1. In PWA, remove ALL of your project managers from both the Project
Managers group and the Resource Managers group.

2. Create two new Categories and name they something like Department A
Projects and Department B Projects. Do not add any resources or Groups to
the category. In the Projects section, select the "Only the projects
indicated below" option and then select the specific projects which can be
seen by the PM's in that department. (Whenever new projects are added to
the Project Server database, you will need to manually add each project to
the correct Category as there is no "automatic" way to make this happen.)
You will also need to specify which views can be seen by the members of each
category (you'll probably want to the Add All button in each section of
available Views).

3. Create two new Groups in PWA and name them something like Department A
Project Managers and Department B Project Managers. Add the appropriate
project managers to their respective group. Add the appropriate Category to
each new Group. Set the permissions and the Global Permissions for each
Group based on the Project Manager security template (As new project
managers are added to the company, you will need to manually add them to
either one of these two groups, but you will never add them to the Project
Managers group as this would defeat your security requirements.)

4. Leave the Executives and the Admininstrators groups untouched, as their
permissions already meet your reporting requirements. Don't give your
executives a copy of Microsoft Project Professional, however, as everything
they need to do should be done within Project Web Access.

Unless I am forgetting something, the above steps should take care of your
situation. As a test, I have created this exact same security environment
on my own system, and after following the above steps, everything seems to
be working as intended. Hope this helps.

--
Dale A. Howard [MVP]
Enterprise Project Trainer/Consultant
Denver, Colorado
http://www.msprojectexperts.com
"We wrote the book on Project Server"
 
E

Earl Forrence

Thanks Gary ... will give it a try today.

But it's too bad that we can't add projects to a certain
catagory, but this is better than what I had expected...

Thanks again ... Earl
 
D

Dale Howard [MVP]

The name is Dale. Gary is my partner, but I was the one who answered your
question.
 
E

Earl Forrence

Dale,

Don't know where I pick up "Gary", but indeed I knew it
was you Dale. Sorry ... Earl
 
Top