Projects Security Group

Hi, can anyone tell me (under collaboration) what's the difference between user1 and user2 under this circumstances:
1. Projects being the security group that comes as default in the system.
user1 - Projects(RWD)
user2 - Projects(RWDA)
where local access (ACL) and account (Prj) permissions are the same?
2. Prj being the Account that comes as default in the system.
user1 - Prj(RWD)
user2 - Prj(RWDA)
where local access (ACL) and Projects (Security Group) permissions are the same?
Thanks!

any help? plz

Similar Messages

How to checkin document with 'Projects' security group

Hi everyone,
i want to checkin a document thru a java class, and set it to Projects security group, also i want to set folder, userlist, grouplist...
Does anyone know how to define these things in java class before execute the CHECKIN service, or there are any extra service needed to run?
Thanks

Hi
I am putting the snippet on how to do a checkin for content RIDC :
public class TestRIDCCheckin {
* @param args
public static void main(String[] args) {
// Create a new IdcClientManager
IdcClientManager manager = new IdcClientManager ();
try{
// Create a new IdcClient Connection using idc protocol (i.e. socket connection to Content Server)
IdcClient idcClient = manager.createClient ("idc://hostname for ucm:intradocserverport");
// Create new context using the 'sysadmin' user
IdcContext userContext = new IdcContext ("sysadmin");
// Create an HdaBinderSerializer; this is not necessary, but it allows us to serialize the request and response data binders
HdaBinderSerializer serializer = new HdaBinderSerializer ("UTF-8", idcClient.getDataFactory ());
// Databinder for checkin request
DataBinder dataBinder = idcClient.createBinder();
dataBinder.putLocal("IdcService", "CHECKIN_UNIVERSAL");
//dataBinder.putLocal("dDocName","TestRIDCCheckin");
dataBinder.putLocal("dDocTitle", "Test RIDC Checkin");
dataBinder.putLocal("dDocType", "ADACCT");
dataBinder.putLocal("dDocAccount", "");
dataBinder.putLocal("dSecurityGroup", "Public");
dataBinder.addFile("primaryFile", new File("/home/oracle/cis"));
dataBinder.putLocal is used set the metadata and details for the content .
Hope this helps
Thanks
Srinath
Edited by: srinathmenon on Aug 20, 2010 1:23 PM

Collaboration Projects security group query

We have installed the Collaborative Projects component. When I create a Project by default it takes Projects as its security group & prj as accounts.
We want to add custom SG & accounts in my Projects.
any idea how to achieve this??
Thanks in Advance.
Edited by: user11264760 on Jun 12, 2009 10:00 PM

any help? plz

Project Server 2010: PWA Removing Default Project Site Security Groups When Creating a New Project

I looked for this specific issue with Project Server 2010/PWA/SharePoint and could not find an exact answer... hopefully someone can help.
We are currently using Project Server 2010 and have a number of project site templates that are used dependent upon the enterprise project type selected. Each of these project site templates have unique permissions which should create the default security
groups on the project site upon publishing/syncing:
<Project Name> Members
<Project Name> Owners
<Project Name> Visitors
<Project Name> Project Managers (Project Web App Synchronized)
<Project Name> Team Members (Project Web App Synchronized)
Web Administrators (Project Web App Synchronized)
Whether a user creates a project through PWA or Project Pro 2010 and imports the project into PWA, we get a weird result in the Site Permissions of the newly created project site. PWA will remove all default security groups from the project site template
and add a whole list of users in the Site Permissions list without groups.
Once the project is published and the project site is created, we can then go back and add those default security groups back in the project Site Permissions and even add a couple of custom groups without them being removed on all subsequent project syncs
or publishing.
How do we get PWA to not overwrite the project site templates' security groups and place each user in the proper default security groups? At the same time, how is PWA adding a number of users into the Project Site Permissions?
Thanks in advance.

Paul,
Thanks for that information. Right now we are using the Test environment to turn the Auto-sync feature back on. I suspect that the reason this is happening is due to PWA groups/categories/security templates. There may be more than one PWA group that is "overwriting"
the default project site groups upon initial creation of the project. We will look further into the security settings to tighten up the policies.

PS2010: Resource synchronization fails in project site creation and when changes users at the Security Groups.

I am not using AD syncronization for resource pool and security groups in Project Server 2010.
When I publish a new Project or try to create a Project web site manually it creates the Project site, but fails to synch the resources.
If I add or change one or more resources at the Project Managers security group at PWA it also fails to synchronize the root site and existing Project web sites.
I looked at the ULS log and appears the the following error:
Add or remove resources from a Security Group error excerpts:
"GeneralQueueJobFailed (26000) - AddSingleUserMembershipInWss.AddSingleUserMembershipInWssMessage. Details: id='26000' name='GeneralQueueJobFailed' uid='36d89522-f218-4bd2-870e-f07c9292435e' JobUID='f083e721-d7b2-4334-839b-fb10b5c0c513' "
"Failed to find the XML file at location '14\Template\Features\ReportServer\feature.xml'
Feature definition missing for Feature 'ReportServer' (Id: 'e8389ec7-70fd-4179-a1c4-6fcb4342d7a0')"
Create a new Project site error excerpt:
"CreateWssSiteContent: Creating project site failed! Project Uid=20450550-17ec-4278-83b0-b86116c63fb9, site URL=http://project.b2w/PWA/Teste 1001 2S, site name=Teste 1001 2S. System.Runtime.InteropServices.COMException (0x8107058A): <nativehr>0x8107058a</nativehr><nativestack></nativestack>The
content type name _$Resources:ReportServerResources,DataSourceContentTypeName;_ cannot contain: \ / : * ? " # % < > { } | ~ & , two consecutive periods (..), or special characters such as a tab..."
My Project site template is exactly the same than original Project Server site template (for test purpose) but created as Project site and then saved as template with another name.
In both cases there are a reference to "ReportServer", but I do not have either a Report Server installed in the farm or the Reporting Services Service Application.
Any ideas how can I correct this issue?
Best regards, Ricardo Segawa - Segawas Projetos / Microsoft Partner

Hi Segawa,
In the above thread you are saying that there are reference to "Report Server". Save the template to local file system and extract the template. Now check the onet.xml under "Webtemplates" folder. Do you see the references of report server there.
If that is the case, my suggestion would be to recreate the template without the reference for report server and then test the behavior.
Also, you can even remove the reference in the onet.xml and use some compressing tools to rebuild the wsp file and then use that as template.
Happy troubleshooting...
Vikram Daruru - MSFT

Security Groups when in 'Project Server Permissions Mode' - Project Online

Hi All,
We have Project Online up and running, by default the PWA instance we added to O365 was in "SharePoint Permissions" Mode, we changed to "Project Server Permissions" Mode because of some complex security we need to configure. For some
reason (different from Project Server 2013) Project Online creates a number of Security Groups by default that seem to be duplicates. For example for Administrators there are:
- Administrators
- Administrators for Project Web App
- Web Administrators (Project Web App Synchronized)
For Project Managers:
- Project Managers
- Project Managers (Project Web App Synchronized)
- Project Managers for Project Web App
And there is something similar for all the groups (compared to Project Server 2013):
I have looked online, with no luck, for some guidance on what all these groups are and if I can delete some of them without causing PWA to crash.
If anyone out there can point me in the right direction / send me some documentation or links it will be greatly appreciated!
Thanks!
Jorge

Hi Jorge, I had the same thing on two different tenants within the last week - one today. I will just clean up the SharePoint groups manually. The ones with the descriptions are the correct Project Server permission mode groups... Hopefully Microsoft will
fix this soon, you could raise a support ticket on your office 365 tenant - support is pretty quick! Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

Project Server 2013: Synchronization of AD with security groups - missing from list of timer jobs

I have same problem in:
http://social.msdn.microsoft.com/Forums/en-US/2b916bb9-2277-4c53-8b97-271a912414ba/ps2013-timer-job-missing-quotproject-server-synchronization-of-ad-with-security-groups-forquot
"I cannot find timer job in SPS central administration "Project Server: Synchronization of AD with security groups for <PWAIntanceName>" to schedule synchronization. Enterprise Resource Pool synchronization working fine and timer job
"Project Web App: Synchronization of AD with the Enterprise Resource Pool job for <PWA site name>" exist on server."
Don't offer solution for "Schedule Enterprise Resource Pool synchronization".
Only "Timer job in SPS central administration "Project Server: Synchronization of AD with security groups".
Have a solution?

Project Server timer job "Synchronization of AD with security groups" don't exist.
So I created job in Task Scheduler of Project Server OS, that every day start PowerShell-script:
if ((Get-PSSnapin | where {$_.Name -eq "Microsoft.SharePoint.PowerShell"}) -eq $null)
Add-PSSnapin Microsoft.SharePoint.PowerShell
Invoke-SPProjectActiveDirectoryGroupSync –Url http://project/pwa
Security groups of Project Server automatically synchronize with groups from AD!
http://technet.microsoft.com/en-us/library/jj219472.aspx

Sync Project Online Security Group to SharePoint Security Groups

Hi,
Is there any way to sync prject server security group(Custom) into SharePoint Security Groups.
My scenario is: I created a document library, I want to apply project server security on it, based on project server security groups, for that currently I created a custom group in sharepoint and manualy added the users into that group. That doesn't looks
good, because if my project online group will change, than manually I have to change sharepoint group too. So what I want is, that sharepoint group is automatically synced with project online group.
Or is there any other way to assign project online security in document library?
Thanks
PSN

No there is no workaround other then creating a group on Office 365 server.
SharePoint Online lets you create security groups via the Admin Overview page
http://technet.microsoft.com/en-us/magazine/hh395478.aspx
Just found a 3rd part. check if it can help
http://en.share-gate.com/blog/migrate-to-office-365-configure-sharepoint-to-use-active-directory
Active Directory Synchronization: Allows you to sync your Active Directory Objects such as users and groups to your Office 365 account. This is a one-way synchronization, which means you continue to manage users On-Premises, and your changes
will appear on Office 365 SharePoint. However, authentication and passwords are still managed by Office 365. It will be required for Password Sync and Single Sign On (see below).
If this helped you resolve your issue, please mark it Answered

Virtual machine VHD file is missing the "Virtual Machine" Security group from ACL

Hey All,
Doing support work for a client and they are unable to take snapshots from certain vm's. I think this is down the VM not having the virtual machines security group within its ACL instead is seems to just have two GUIDs. to me if looks like the vm's have
been moved and imported or something like that but was obviously not done correctly.
When taking a snapshot they get a general access denied error
Does anyone know a quick way to add the virtual machines security group back into the ACL, I did find some powershell commands however this errored stating I could not change the owner of the group.
I'll keep looking but if someone knows a quick fix for this I would appreciate it. One other thing I had thought of was turning the vm off, The creating a new Virtual machine and attaching the VHD as the new VM? Would this work?
thanks in advanced

Hi Dunn2010,
Yes , please try to copy the VHD then create a new virtual machine and attach the replication .
If it is possible please try to find the relevant Error messege of your question in event log and post it here .
Any further information please feel free to let us know.
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Project Server 2013 - New - Project, creates groups at the root site level, Server is in Project Server Permission mode

I created an Enterprise Project in PWA and moving up to the root site settings I see there was the four basic groups created there just for this project. This is not acceptable when there will be 500 projects on the server. Is there a setting to turn this
off. I guess we will rarely create projects with PWA, so I will see if creating a Project in Desktop has the same effect. Still would like to understand why this is happening. Thank you.
Site Provisioning settings are located under Central Administration -> Manage Service Applications -> Project Application Service -> Manage ->
Project Site Provisioning Settings
Turning that off allows the group creation to cease.
Then PWA Settings -> Operational Policies -> Connected Sharepoint Sites
allows selective creation of a Project Site (Workspace)
This set up is perfect for what I require.

I assume that you're talking about the SharePoint security groups for each Project site? If so, then this is as designed. Each site can have different users, so this is absolutely necessary when you use SharePoint. If you do not want to create project sites
for your projects automatically, you have already discovered how to turn off automatic site creation.
If you turn off the Project application service, you disable Project Server. I don't think that is what you want to do. I don't understand your objection to the groups because if you are running in Project Server classic permissions mode, Project Server
manages the group membership for you.
Gary Chefetz, MCITP, MCP, MVP msProjectExperts
Project and Project ServerFAQs
Project Server Help BLOG

AD security groups listed in user groups in Config Manager however not listed when selecting values for the "System Resource - System Group Name" query

Morning All,
We are in the process of setting up our SCCM 2012 infrastructure and are experiencing issues with our device collection querys based on AD security groups.
I can see the security groups are being updated per adsgdis.log - i can see the computers that are members of the groups in AD are being recorded in the same log. Issue is when we build the device collection query - click the value button for the string,
only 2 of the 18 AD security groups are displayed. These are 2 AD groups we setup initially to test.
We have since added several additional yet they only appear to populate as user groups in config manager.
The same goes for additional OUs that we have created with AD.
When i click the value button only the initial 10 OUs that were created are populating in the list of applicable OUs.
We have the discovery methods Group Discovery & System Discovery enabled and set to search the parent OU recursively
I'm wondering if there might be an SQL issue with this as it initially worked but stopped...
Additionally we added an OU recently that now appears in in the Values options in the query but the ones added previously and additionally after are not showing up....
Any help is appreciated.
Thanks,
Jeff

Given the adsgdis.log lists the new pc and the group it's assigned to it appears the AD group discovery is working.
Have the following excert from the adsgdis.log
INFO: Processing discovered group object with ADsPath = 'LDAP://************.****.COM/CN=Software - Microsoft Project Professional 2010 x64,OU=Software,OU=US-West,DC=*****,DC=com' SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180
(0x1FF4)
INFO: DDR was written for group '*****\Software - Microsoft Project Professional 2010 x64' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\userddrsonly\asg8ud94.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012
7:08:13 AM 8180 (0x1FF4)
INFO: DDR was written for system 'THURMANWIN7VM' - E:\Program Files\Microsoft Configuration Manager\inboxes\auth\ddm.box\adhh8419.DDR at 10/4/2012 7:8:12. SMS_AD_SECURITY_GROUP_DISCOVERY_AGENT 10/4/2012 7:08:13 AM 8180 (0x1FF4)
Here you can see it processes the new members in the Software - Microsoft Project Professional 2010 x64 group and captures Thurmanwin7vm as a member.
I did find some log entries that reference permission issues with objects in the SQL database and have opened a case with MS to get that looked into. Hopefully that will be where the issue lies.

Need info regarding Oracle UCM Accounts and Security Groups behaviour

Need information regarding Oracle UCM Accounts and Security Groups behaviour.
Oracle UCM version: 11.1.1.5.0
Steps:
1. Log in with "weblogic" user and created a content with id "content1"
2. Applied "@acc1(R)" and "TestGroup1" to the cotent created in step 1
3. Log out
4. Log in as "acc1user1", the user is not able to see the "content1"
5. Log out
6. Log in as "role1user1", the user is not able to see the "content1"
Account and Group information:
1. User "acc1user1" is part of "@acc1(R)"
2. User "role1user1" is part of "role1(R)" and is mapped to "TestGroup1" in UCM
Expected:
Both "acc1user1" and "role1user1" should be able to see "content1" as they have at least Read permission.
Please help me understand why the users are not able to see the content.

ACLs, like Accounts, are optional security setting which may add on some extra functionality to mandatory security groups. Likewise, the resulting permission is taken as an intersection of SG and ACLs.
But in the second part the number of set of users is huge (approx say 600)I don't get this completely. Does this mean that those "sets of users" (users who see the same data) are distinct and that there is 600 of such groups?
If you read thoroughly the manual I sent earlier, there is a recommendation that there should be maximum 50 security groups, and you should use accounts, should this number be exceeded. This means you could have all the documents in one security group (and have one common role with Read permission), but combine it with accounts. ACLs are not a good choice here - their performance and manageability is much worse than of accounts. ACLs are primarily used if you expect security settings to change during the lifetime (e.g. a project manager adds temporarily rights to access an item to another user, and revokes it when the user finishes his or her work).
Note that accounts as well as permissions of users within accounts can also be mapped externally (from LDAP/AD) and it usually follows some kind of org chart.
I'd feel more comfortable not to speak about users, security groups, roles, etc., but about some real-life objects and scenarios.

How to change mail-enabled security group to security group

Hi,
As a test I have configured on the properties page of a security group an email adres. By doing this converted a security group to a mail-enabled security group. Also this group has been transferd to Office 365. But after testing I want to make the distribution
groups on the Exchange in Office 365. So I deleted the emaila dres of the security group, but it still synchronized to Office 365 as a mail-enabled security group. How can I change in AD the mail-enabled security group to a security group?
Thanks in advance

Hi StijnS,
For the O365 question there are Office 365 technical forums available at
http://community.office365.com/en-us/f/default.aspx.
The related article:
Office 365 Forum Assistant
http://blogs.technet.com/b/neilhobson/archive/2011/09/20/office-365-forum-assistant.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Adding multiple users into one security group at one shot

Hi,
Is there any way we can add multiple users into one security group at one shot into PWA.
For example: I want 100 create 100 users in EPM and Providing them with custom define Team defined permissions and can I add Time sheet Manager as well while creating bulk user through resource template in Project server 2010.
Thanks,
Prashant

Hi Prashant,
In order to add users in a security group, you can open the group, select all the appropriate resources (pressing CTRL key) and add them to the group. There is no other easy way. Otherwise a powershell script could do the job.
For the timesheet manager, if all the 100 resources have the same timesheet manager, you can go to the resource center, select the resources (sorting by resource ID will give you together the latest resources added), bulk edit the resources and select the
timesheet manager for the selected resources.
Hope this helps,
Guillaume Rouyre, MBA, MVP, P-Seller |

Security groups

Hi All
Can somebody tell me how to find a way to check the users who belong to a specific security group?
Ex: Project Analyst - i need to find who are the members of this particular group.
Please help me on this.
Regds
Mano

Hi,
Which obiee version r u using?
for checking users who belong to a specific security group you should have Admin (Powerd users) by using that users id u can login into
in obiee10g:
1) RPD(Admin tool) -->manage--> security--> Groups-->select any one of group then view the
member.
If u r using obiee11g -->
1) RPD(Admin tool) -->manage--> identity--> Apps.Roles --> select any one of roles then view the
member.
2) In weblogic EM/Console:
Console:
Home >Summary of Security Realms >myrealm >Users and Groups
In EM(Enterprise manager)
EM--> weblogic_Domain--->bifoundation_domain_right click_application roles-->here u can find
Note: If u r using LDAP/other external table user security u need to make sure
Thanks
Deva

Projects Security Group

Similar Messages

Maybe you are looking for