Manage users, groups, and categories in Project Server

Summary: Manage users, groups, and categories in Project Server permission mode.
Applies to: Project Server Subscription Edition, Project Server 2019, Project Server 2016, Project Server 2013

In Project Server permission mode, Project Web App security is based on users, groups, and categories. Groups contain sets of users who need to access the same set of data in the same way. Categories provide access to projects and resources based on parameters that you define. For complete information about planning groups and categories, see Plan groups, categories, and RBS in Project Server.

Define your groups by identifying common needs based on the areas of Project Web App to which users in your organization need access. After you define your groups, you can add users to the groups and grant permissions to the groups. Permissions assigned to groups apply to all of the users that the group contains. Using groups to control access to Project Web App simplifies security administration.

Users can be automatically added or removed from groups based on Active Directory group membership. This can be configured in Project Web App through the Active Directory synchronization feature. For more information, see Manage security group synchronization with Active Directory in Project Server.

Users can belong to multiple groups according to their role in the organization and their access requirements. Several groups are created by default when a Project Web App instance is created, each of which is assigned a set of predefined categories and permissions. For more information, see Manage security groups in Project Server.

Administrators usually assign permissions by adding a user account to one of the built-in groups or by creating a new group and assigning specific permissions to that group.

For complete lists of Project Web App permissions in Project Server 2013, see Category permissions in Project Server 2013 and Global permissions in Project Server 2013.

Articles about Security settings for Project Server permission mode

The following are the tasks for managing security in Project Server permission mode:

	Content	Description
	Manage users in Project Server	Use the Manage Users page in Project Web App to add, modify, deactivate, and reactivate user accounts.
	Manage security groups in Project Server	Administrators can manage security permissions for groups by using the Manage Groups page in Project Web App Settings.
	Manage categories in Project Server	Administrators can organize a system of categories to manage user and group access to projects, resources, and views in Project Web App.
	Manage security templates in Project Server	Administrators can use security templates in Project Web App to standardize the granting of user permissions by role.
	Manage Project Web App permissions (Project Server permission mode)	Project Web App global and category permissions can be disabled, but this action should be examined carefully before it is done.
	Manage delegates in Project Server	Project Server 2016 enables user delegation throughout all of Project Web App.
	Manage security group synchronization with Active Directory in Project Server	Project Server security group synchronization controls Project Server security group membership by automatically adding and removing users from specified Project Server security groups based on group membership in the Active Directory directory service.
	Plan users, groups, and catagories in Project Web App	This article addresses planning for groups and categories in a Project Server deployment.

Videos about Security settings for Project Server

Video series: How security permissions work in Project Server