Join John Riopel for an in-depth discussion in this video Managing security templates, part of Microsoft Project Server 2013: Administration.
- Security Templates are a set of features within Project Server. They are created to be applied to categories to manage permissions within the application. They can be found under Server Settings Manage Security Templates. Each of the templates listed is a role-based template that comes out of the box. We're going to look at the Team Member template that's used to manage the team member role. You can see in the Team Member template, they're broken up into category permission sets which allow you to allow or deny that particular feature within the application and global permissions which allow you access into the application in the whole site.
Each of these templates has the Allow or Deny function or you can also use the Not Allowed option. We're going to take the Team Member template, return to the original group of templates that come out of the box and press the New Template to create one for our contractors. We're going to put in the contractor name for our contractor template. We're going to put in a description for that template so say "Allows Contractors to see "their projects and tasks." We'll select the Team Member template to copy it from.
Under the dropdown and press OK, It will apply the permission set as a copied template from that Team Member original. Each of the template items has been checked from the team member's original template. We're going to de-select the Create Deliverable and Legacy Items link and create a new task assignment. We want them to only be able to view the projects and view their tasks so we're going to leave the project schedule in the project web app.
That way they'll be able to see the complete schedule, view the Project Summary. That will give them the top level view of the project within the Project Center and we'll scroll down to Additional Options in the Global Settings where they can contribute to the Project WebApp, Log on. We'll leave their managed personal notifications but take away their new task assignment and reassign task. Now, we're not denying these functions. Again, Project Server will look to the Allow or Deny option anyplace where it's a hard deny, they would not be able to perform that function.
We're allowing this to be governed by another set of rules, possibly on another category that they might get applied and we'll leave their Self assign Team Task option and that way they can pick up if you're using Team Task and we'll take away their View Approvals options. We'll select Save to save our new template into the list of options. Here we now have our new template available for us to select from.
- Managing users, groups, permissions, and categories
- Working with enterprise custom fields and lookup tables
- Working with enterprise calendars
- Managing enterprise objects
- Managing views
- Adjusting time and task settings
- Changing and restarting workflows