Create a security group in Project Server 2010
Applies to: Project Server 2010
Topic Last Modified: 2012-01-19
Summary: Create custom security groups by using the Manage Groups page in PWA Server Settings.
Seven default security groups are installed with Microsoft Project Server 2010. To better meet the security requirements of your own organization, you can also create custom groups by using the Manage Groups page on the Microsoft Project Web App (PWA) site Server Settings page.
Before you perform this procedure, confirm the following:
You have read Manage security groups in Project Server 2010.
You have access to Project Server 2010 through Microsoft Project Web App.
Important
The Manage users and groups global permission in Project Server 2010 is required to complete this procedure.
Perform the following procedure to create a custom group in Project Server 2010.
To create a security group
On the Server Settings page, in the Security section, click Manage Groups.
On the Manage Groups page, click New Group.
Complete the required fields on the Add or Edit Group page. See the following sections for information about each area.
Click Save.
Group information
Use the Group Information section to specify a name and description for the group.
If you want to synchronize the membership of this group with an Active Directory group, click Find Group and search for the group that you want to synchronize. To stop synchronizing an existing group, click Clear Group.
The following table describes the group information options.
| Attribute | Description |
|---|---|
Group Name |
The name of the group. |
Description |
A description of the group. |
Active Directory Group to Synchronize |
The name of the Active Directory group from which this group obtains its membership. If you configure this group to synchronize with an Active Directory group, the membership of this group will be synchronized with the Active Directory group specified on the schedule that you configure. |
Users
Use the Users section to specify which Project Server users are members of this group.
To add users to the group, select the users in the Available Users list, and then click Add. To remove users from the group, select the users in the Selected Users list, and then click Remove.
If you have configured Active Directory synchronization for this group, the group membership is maintained by that mechanism. Any changes that you make manually may be overwritten the next time that the group is synchronized with the Active Directory directory service.
The following table describes the options for users in the group.
| Attribute | Description |
|---|---|
Available Users |
The users in Project Server that are not members of this group. |
Selected Users |
The users in Project Server that are members of this group. |
Categories
Use the Categories section to define which security categories area associated with this group.
To associate a category with this group, select the category in the Available Categories list, and then click Add.
To set the category-level permissions for a particular category, select the category in the Selected Categories list, and then click Allow for the permissions that you want to enable for this category/group combination.
The following table describes the categories options for a group.
| Attribute | Description |
|---|---|
Available Categories |
The categories that are not associated with this group. |
Selected Categories |
The categories that are associated with this group. |
Permissions for <category> |
The permissions that members of this group have within the selected category. This option appears when you select a category in the Available Categories list. |
Set permissions with Template |
To set the category permissions for the selected category from a template — such as Project Manager or Team Member — select the desired template from the drop-down list, and then click Apply. |
Global permissions
Use the Global Permissions section to configure global permissions for this group.
To allow a permission for the group, select the Allow check box for that permission.
To deny a permission for the group, select the Deny check box for that permission.
For a complete list of global permissions, see Project Server 2010 global permissions.
Note
If neither check box is selected for a permission, the user is not allowed the permission unless it is allowed in another group that the user is a member of, or it is allowed at the user level. If the Deny check box is selected for a permission, that permission is denied for all users in the group and cannot be enabled through other group or user settings.