users,groups, categories

C

cindy.becken

I have read the book on this and thought I understood the relationship but
my model isn't working so I guess not.
When you log on has admin and look at a individual user you can modify the
groups and categories. When you go into Groups you can modify the Category
permissions and when your in category you can users and groups, project,
resources etc. I'm confused when you modify permissions at the different
levels. For example, I created a custom category and put 5 projects into
it. I also put specific people in it and said they can view projects in
project center. But when they log in they don't sse the projects. I guess
i need help with the relationship and permission setting.

Thanks
 
C

cindy.becken

I should have said the people viewing the projects are in different
organizations in the RBS.
 
D

Dale Howard [MVP]

Cindy --

You were so close and yet so far away. I believe you need to do the
following to solve your problem:

1. Log into PWA with administrator permissions
2. Click Admin - Manage Security
3. Select the new custom Category and click the Modify Category button
4. In the Users and Groups section, select the first user from the list on
the right
5. In the Permissions grid of the Users and Groups section, set the See
Projects in Project Center permission to Allow
6. In the Permissions grid of the Users and Groups section, set the See
Projects in Project Views permission to Allow
7. Select each of the resources individually and repeat steps #5 and #6 for
each resource
8. In the Projects section of the page, select at least one detailed
Project view for this Category
9. In the Project Center Views section, select at least one Project Center
view for this Category
10. Click the Save Changes button

Hope this helps.
 
C

cindy.becken

Thank you but could you help me by describing why at the user level you can
set groups and categories and then at the group level and category. Which
is the overriding factor? For example at the category level it says you
can view projects in project center but at the user level it is not checked
which overrides?
 
C

cindy.becken

One more question, when setting up security you see the option ' see all
current and future project in project in project server' If i was in the
category ' My Projects" and I didn't select that option and I didn't select
any individual projects would that mean they can't see any projects? Or in
this case if I select the option to see all project would it still be only
for the projects they own?
 
C

cindy.becken

Not sure if I should start a new question for us but it is kindof related to
the security questions.
At the user level I gave Person A - access to the following categories My
Direct Reports, My projects, My Tasks then I created a custom Category and
named them as a user but they cannot see the projects I selected in that
category. If I go back to the User setup and add the category then they can
see it. Why isn't adding them at the category level good enough?
 
D

Dale Howard [MVP]

Cindy --

We always recommend that you control Project Server security using Groups
and Categories, and only set permissions for an individual user when there
is a major exception to the Groups to which the user belongs. If I were
faced with the situation you described in your original post, I would have
done the following:

1. Created the custom Category specifying the particular project, the
Project Center view, and the detailed Project view
2. Created a custom Group, added the five users to the Group, added the
custom Category to the Group, selected the custom Category and set the
Global permissions as specified in my last post.

Since you had already added those five users to the custom Category, I gave
you the steps in my last post to use what you had already created. Hope
this helps.
 
D

Dale Howard [MVP]

Cindy --

Here's how the system works:

1. Categories control what users can see
2. Groups control what users can do
3. The overlap between Groups and Categories controls what users can do
with what they can see

The overlap between Groups and Categories can be seen in the Permissions
grid when you create/modify a Group or a Category. Notice, for example,
that members of the Project Managers group have access to both the My
Projects and My Organization categories by default. The My Projects
category specifies that any project is one of my projects if it meets at
least one of three criteria:

- It is a project that I manage
- It is a project in which I am a team member
- It is a project in which my resources are team members

If you modify the Project Managers group, select the My Projects category in
the Categories section, and then look at the Permissions grid, you will see
what I am allowed to do with my projects. Notice that I can open my own
projects and save them; I can see my own projects in the Project Center and
detailed Project views; I can build a team on my own projects, etc.

While you are looking at the definition of the Project Managers group,
select the My Organization category in the Categories section, and then look
at the Permissions grid. The My Organization category gives blanket acess
to all projects, resources, and Views within the system. Notice, however,
that I am allowed to do only a couple of things with the objects in the My
Organization category. Specifically, I have only the Assign Resource and
the See Enterprise Resource Data permissions. These permissions allow me to
see all resources and their resource information in the Build Team from
Enterprise dialog. That's all I can do. I cannot open and save anyone
else's projects because I don't have the Open Project and Save Project
permissions set to allow for the My Organization category. I can't see
anyone else's projects in the Project Center because I don't have the See
Projects in Project Center permission set to allow for the My Organization
category.

In a nutshell, that's how Project Server secuirty works. Now, to answer
your specific question. If you do not select the "All current and future
projects..." option in the My Projects category, and do not specify any
individual projects, then the system uses the following four checkboxes to
determine what projects belong to you. As I noted above, a project is "my
project" if it meets at least one of the three criteria selected by default.
Hope this helps.
 
D

Dale Howard [MVP]

Cindy --

It isn't enough to add a user or Group to a Category. You must also set the
specific permissions for that Category in the Permissions grid, as I stated
clearly in steps #5-6 in my previous post. Hope this helps.
 
Top