Create a project from list item not working if EPT has Project Plan Template

Question

HI,
i am trying to leverage the new feature in 2013 to create a project from an idea list.
This works fine if the EPT does not have Project Plan template assigned to it. Even through workflow action "Create Project from current list item".
However if i assign a project plan template and the user creating the project  is not Administrators Group member, i get an error. While doing this trough a workflow the worfklow gets suspended and i have the below message:
RequestorId: 654a6744-eb11-3d9c-0000-000000000000. Details: RequestorId: 654a6744-eb11-3d9c-0000-000000000000. Details: An unhandled exception occurred during the execution of the workflow instance. Exception details: System.ApplicationException: HTTP 403
{"error":{"code":"20010, Microsoft.ProjectServer.PJClientCallableException","message":{"lang":"en-US","value":"PJClientCallableException: GeneralSecurityAccessDenied\u000d\u000aGeneralSecurityAccessDenied"}}}
{"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["290"],"SPRequestGuid":["654a6744-eb11-3d9c-9d1e-ff8135e50f19"],"request-id":["654a6744-eb11-3d9c-9d1e-ff8135e50f19"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4535"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Wed, 23 Apr 2014 14:40:46 GMT"],"Server":["Microsoft-IIS\/7.5"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}  
at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context)   at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor, BookmarkManager bookmarkManager)  
at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)
Any one has experienced this ?
Thx

Answer 1

Hi, RonyZ.
I think it could help.
I have experienced the same problem as you are, except "Create project" option, my managers could do it.
So, for me a solution was to set definite permissions for Workflow Initiators (I have created new group, but you can edit, including
Global permissions
New project
Open project template
Server configuration management
For category “My organization”
Open Project
Publish Project
Save Project on Project Server
Excuse me my translation, some names can be written not properly, cause I have localized SP.
In you case, I think, you should check, if you PM  group has all these permissions.
And Workflow Initiator should be in group which has.
In LOGS error notifications starts with “Permission denied”, then goes account
name and then the name of permission which is left.