Team vs. Group

I'd like to hear the experiences of those who have worked with Groups and Teams. My requirements are pretty basic:
1. All users can see all records. (This is easy.)
2. Each user needs an easy way to filter their visibility to those records owned by their department. Users can update records owned by others in their department. (This appears to be the tough one.)
3. Each user needs an easy way to filter their visibility to those records they own. Users can update records they own. (This is easy.)
In short "All", "Ours", and "Mine".
Using a Team requires the record owner to explicitly list the other users who have update access. Is there a way to eliminate the need for a user to list the names of other users? Is there a way to list a team "by name"?
I began to think that Group was the way to go since it was less work for the record owner. If a user is in a group and that user asks to see "all records I own", does he see all records owned by the group (requirement #2 above) or all records actually owned by that user (#3 above)? What is rerurned if we use Groups and the user asks for "all records where I'm on the Team"? Do the group members automatically become Team members?
Group appear to not apply to custom objects and I expect we'll be using a couple of custom objects. How do we allow updates to users other than the owner? Since custom objects and Teams work together, can we mix the use of Groups and Teams?
Any information would be appreciated.
Regards,
Jeff

Jeff, would it help if you used workflows:
Add the group name to the Division field on all the users's records.
Add a dropdown list on the pages that lists all the "Groups"
Create a workflow where division = X then it fills in the group value on the page.
The groups can then use this value in their lists?
hope this helps.
cheers
alex

Similar Messages

Team or Group similar feature workaround for Service Request?

Hi all,
I understand that Service Request currently has no support for Teams or Groups, but is there any work-around which can offer the same functionality where I can easily add a specific user to enable him\her to access a specific Service Request record?
Thanks.

I think your best option is Book of Business. Create two picklists in the SR object that contain your users and let workflow assign the SR to the correct user book
(each user would have a book).
Edited by: bobb on Apr 23, 2010 12:09 AM

Deploying Creative Cloud for Teams via Group Policy

Good afternoon, we are trying to deploy our Creative Cloud for Teams products. Our ideal situation would be where we are able to deploy the Creative Cloud Software (e.g. including Photoshop, InDesign, Illustrator, etc) using Group Policy, then assign the respective user licenses using the Management Console. This would send out the email to the applicable user for them to create and Adobe ID, and use the software that has been installed. However, we are able to install the software using Group Policy Deployment using the msi created using the Creative Cloud Packager, but any user is able to use the software on the PC, not just the person who has been assigned the licence via the console email. Is anyone else successfully deploying in this way?
Kind regards
Mel

Team license links that may help
-team plans https://creative.adobe.com/plans?plan=team
-http://www.adobe.com/creativecloud/buy/business.html
-https://helpx.adobe.com/contact/creative-cloud-teams.html for Team help
-manage your team account http://forums.adobe.com/thread/1460939?tstart=0
-Team Installer http://forums.adobe.com/thread/1363686?tstart=0

Regarding Collaboration Team room group getting stored in LDAP

Hi ,
i have a requirement to met at earliest .
Presently we are running with EP 7.0 SP 17 with MSADS as UME datasource.
Requirement is that collaboration team room are getting stored in LDAP directory in mass.
i have to store collaboration room groups in portal database and should not travel into Active Directory Groups.
Kindly help me ASAP.

This will happen if your UME AD poiinter is set to read/write.

How can Sales team assign groups to existing marketing campaigns and send mass emails?

We would like to empower our sales team to be able to identify small groups of contacts in their CRM and assign them to existing Eloqua campaigns that Marketing sets up and makes available to Sales. Ideally Marketing would enable specific campaigns to be available to Sales team through Engage, instead of sending a one off emails.
Does this functionality currently exist?

Juan,
from an earlier post you noted you were using SFDC.
Your sales team could add multiple contacts to a campaign by creating a list view (or report) of your contacts and merely checking the box next to the name and hitting the 'add to campaign' button.
Then you can use the CDO method from this post to have your marketers find the campaign members and add to a campaign. This would work for ongoing campaigns as well as a 'one-time' send.
Nathan

Team Skill Group Association

Hello:
I am looking for a point in the right direction with a configuration change. The layout is this, UCCE 8.0(AWHDSDDS/PROGGER) with IP/IVR as a queueing source. They have a CTIOS server running on the PG that's running CAD/CSD. My question is this, I created a new Skill Group in ICM, associated agents amended both the IVR Script and ICM Script. Functionally everything is fine. I just need to find out where I would go to associate this newly created Skill Group to the respective Team that it belongs to. This way when you look under team in CSD, you see the new SG in there.
Thanks in advance for the assistance,
Sean

Hi Sean,
it does not work that way, unfortunately. You assign agent profiles, not skill groups, to teams.
An agent may belong to zero or more skill groups.
An agent may also belong to zero or one team.
Skill groups are groups used when making call routing decisions.
Teams are provided to group agents using a different aspect.
For instance, you may have a skill group named "Support" and "Sales", but you also want to group agents by their geographic location - you can use teams for that.
To sum it up, if you want anything to appear in the context of an agent team, you will have to assign agents to a team.
G.

No data found message w/multiple group by

I am doing a report that has multiple group by and not sure where the code needs to go so it will bring back No data found for the report. Can anyone help me out?
group ROW by GRANDTOTAL
group by EMP_NAME
Employee Name: EMP_NAME
group by CASE_MGMT_TEAM_CD
Team: CASE_MGMT_TEAM_CD
group by ACTIVITY_ID
Activity: ACTIVITY_ID (Following is a Table)
Process Date     Amount     Count
F PROCESS_DT 9,990.00 9,990 E
Total by Activity:     9,990.00 9,990
end by ACTIVITY_ID
end by CASE_MGMT_TEAM_CD (Following is a Table)
Total for Employee <?EMP_NAME?>:     999,990.00 999,990
end by EMP_NAME (Following is a Table)
Grand Total:     9,999,990.00 9,999,990
end ROW by GRANDTOTAL

Take a look at this: http://winrichman.blogspot.com/2009/05/no-data-found.html
Thanks!

Best approach for multi-team/multi-projects.

Hi,
I'm looking for the best approach to handle multi-teams/multi-projects scenario. We have 20 development groups and over 300 products. Each products on it's own Schedule.
Product X can be assign to Group A, but at some point, it can be assign to Group B.
We are currently using TFS 2012, but will be upgrading to 2013 soon.
Based on many reading, we are thinking to create only one Team Projects to ease management.
In it, we will create a team for each development group, but we will not create an associated area path with the name of the team.
- Group A
- Group B
- Group C
Than, we will create an Area for each product.
- Product X
- Product Y
- Product Z
and, we will create multi-level of iterations to match each Schedule.
- Product X
   - Release 1
      - Sprint 1
      - Sprint 2
- Product Y
    - Release 1
       -Sprint 1
    - Release 2
       -Sprint 1
The main issue, we have with this approach is that we can't use the Backlog or the Task Board effectivelly, as there is no way to filter per areas and iterations.
Reading "How do I change the underlying query for the task board (and backlog board) on TFS Preview", this doen't seam to be possible in TFS 2012.
In TFS 2013, "The Agile Portfolio Management: Using TFS to support backlogs across multiple teams" was introduced. Will this help to solve the problem?
We would create a management team for each development group.
We would create an agile team with an associated area for each product.
The only thing that I couldn't find in the documentation is how to re-assign an agile team to another management team. Is this possible?
Also can each agile team have their specific itérations, if so will it roll up properly to the management team?
Regards
SYSOTI
PS: Sorry couldn't post the links of the quoted text as I get the message: Body text cannot contain images or links until we are able to verify your account. ;-(

Hi SYSOTI,
Based on your description, seems the area path is not configured properly hence you can't use the Backlog or the Task Board effectivelly.
From the
Agile Portfolio Management: Using TFS to support backlogs across multiple teams, the area path is set as agile team which is a consist of team members but not a product name. For you scenario, you can set the area path name as your product name to
identify the associate products for work items. And the groups you mentioned for products in the team projects are sub-group of contributors.
Seems there is no need to create a management team for each development group since management team might be in a higher level to view the progress for all of the work across the agile teams. Certianly, you can create multiple management teams, but the management
teams will be able to view works for all agile teams.
If you have multiple teams and products, you can create a team project for each product if the products don't have much relationship. However, it's OK to manage the projects for multiple products in the same team project. And working within a single team
project also have benifits, you ccan check this
blog for more information.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Team assignment questions

I was looking into doing team assignments for out projects that we have, and i just wanted to make sure that it was the best way to handle what we are trying to accomplish, since I have seen some posts that lead me to believe this may not be the best option.
what I am trying to do is Assign each task to multiple people (only 1 of which has login credentials to PWA, the team leader/foreman). I am hoping to get it so that he will only have to report updates on each task once for the whole group, and not
once per team member (already made him the assignment owner for each person/generic resource).
1) would making a team resource and assigning just that to the task be enough? once all the people are assigned to that group that is. it seemed like doing it this way, you would also have to deal with the work column yourself, since it is auto-calculated
for just 1 resource and not the 3-4 you intended (might be best solution)
2) if 1 is the right way to do it, are the resources assigned to the team able to be placed in other groups for other projects? or are they stuck in that one until they are unassigned? also, the team assignment groups are system wide, not just
for each specific project? for example, can i have (user 1, user 2, user 3) and (user 1, user 4, user 5)?

Hi Abhijit,
Indeed as you stated, the team assignment can only be self-assigned. Meaning that a manager cannot assign a team assignment to another member. Customizing this feature could be quite complex and time/money consuming. If you decide to go that way, then it
is out of my knowledge.
Using the "reassign task" feature will not help because once reassigned, the manager will not be able to change the assignment again for another resource.
I'd rather suggest to put in place a process together with the project manager who is actually managing assignments in the project with Project Pro. For example the manager can access the project plan and should only update his resources on assignments but
not the project itself.
Hope this helps,
Guillaume Rouyre, MBA, MVP, P-Seller |

IDK automatically adding Everyone group to collab community project

Hi,
I deleted Everyone group from the community project members. I tried to read the properties of community project of collab using the IDK. What I observed is IDK call automatically adding Everyone group in the members. Can anybody tell me the reason why its happening.
Note: I am 100% sure that i am not changing any property of the community project using portal collab ui or using the IDK.

Hi Juan,
I just made a test with my Project Online instance and when I create a new user, the team member group is already selected in the user's creation interface. Thus by default, any user will be in the team member group.
Hope this helps,
Guillaume Rouyre, MBA, MVP, MCP |

Package not getting Copied from One Team Folder to Other.

Hello Experts,
I am working on SAP BPC MS 7.5 Ver. and while trying to Copy Package from one Team Folder to other ( i.e. Copy Import package from Company Folder to any other Team Folder) via Organize package List,but I am not able to do so.
The package is getting copied successfully but not getting saved in the respective team folder.
I have aasigned the destination Team folder, the Execute Access of Data Manager.
Can anyone pelase help on the same?
Regards,
Apoorva

Hi Apoorva,
you have to set the destination team and group, click on ok this will copy the package and at the end the save button to apply the changes.
You can also copy manually from one folder to the other the dtsx file and after you can made it visible via Organize package List by adding the package.
Regards
Roberto

Project Server default groups when we create new project site

Hi,
When we create new project site in project server 2013 in site settings page some default groups are already present with some default permissions and some default members.
Interesting thing is that the members of these group are same when ever we create a new site.
Can you please help me understand, what these groups are, how they get created and how they are having some default members. Where are these members coming from.
Our project server is having project server permission mode.
Thanks,
Bhawna.

I briefly searched the MSTechNet but was not able to find a succinct article on this point for 2013, if someone has that, can they pls share. However, if you read most of the articles under this area,
you get the idea.
http://technet.microsoft.com/en-us/library/fp161361(v=office.15).aspx
From 2010 this applies and is still "similar"
http://technet.microsoft.com/en-us/library/cc197668(v=office.14).aspx
In 2013, for every Project Site (connected SharePoint site as it is now called in 2013), 2 Site specific SharePoint security groups are created: "SiteProjectName Project Managers (Project Web App Synchronized)"
& "SiteProjectName Team Members (Project Web App Synchronized)".
And Web Administrators (Project Web App Synchronized) is also created.
In addition, the default SharePoint groups for: Site Members, Site Owners, Site Visitors are present but remain empty.
Project Server controls the creation of these groups and the membership. The membership is a "formula" that goes something like this: If the user is the Project Owner then put them in the PM group.
If the user is a PWA Administrator, then put them in the Administrators group. If the user is a team member on the project, then put them in the Team Members group. There are other factors like RBS that are used in the formula.
Reading the descriptions of the groups reveals that for Project Managers =
Users who have Published this project or who have Save Project Permission in PWA.
For Team Members = Users who have assignments in this project in PWA.
I believe these are the old 2010 descriptions and actually Team Members = anyone who is part of the Build Team even if no assignments.
Further complicating matters is that if you are a site collection admin, you will see all the groups, for PWA and for all the project site (b/c you are actually seeing the site collection groups).
But only the ones mentioned above apply specifically to this project site.
Hope this sheds some light on the topic,
Thanks, Eric S. Pcubed

Project Server 2010 - Active Directory Enterprise Resource Pool Synchronization limitations

Greetings again.
I have a quick question about the limitations of Active Directory Enterprise Resource Pool Synchronization. Specifically, what has your experience
been with extremely large numbers of users (10k plus). Is anyone aware of a
practical limit of users in your AD group you would recommend when using the
Schedule Synchronization feature on a nightly or weekly basis?
There is a caveat to this question however. The client has decided (perhaps for some misinformed reasons) to allow access for every user, to every
project site, within their PWA environment. They’ve selected the View Project Site option within the
Categories for the Team Members PWA Group for which 90% of their intended users reside. So when we ran a couple test syncs in DEV with a smaller AD group of about 8,000 users, the sync understandably
lasted upwards of 18 hours. Obviously unacceptable for a PROD environment on a nightly basis and not necessarily ideal for a weekly sync either.
Experience in addition to documents like these, “Best
practices for managing a large number of resources in Project Server 2010” tell me that we are way over the practical limit of a scheduled resource pool synchronization...IF
the client really desires that all users access all their sites. But before I submit my recommendations, I wanted to check with the community just in case others may have found a way to synchronize large numbers of users (10k plus) on a nightly or weekly
basis, within a reasonable time frame AND allowed all users to access all sites within PWA.
What do you think?
As always, thanks for your help.
Chris Addis - MCTS

Hello Hrishi.
My delayed response has been due to a large amount of testing we have been performing on this particular topic. Here is an update, please feel free to provide feedback.
We went back to testing and spent more time reviewing the documents:
Best practices for managing a large number of resources in Project Server 2010 and
SharePoint Server 2010 capacity management: Software boundaries and limits. Our team interpreted those documents as saying, 1,000 security
scopes per site is a recommended limit. It does not say it’s a hard limit, just a recommended limit. “When the recommended unique security scope boundaries are exceeded, performance issue can occur.”
So we decided to perform some tests (31 in total) to try and get a gage of what we are seeing.
We needed to establish a baseline first. So we performed a series of 23 Active Directory Resource Pool Synchronizations with various settings in a clean, Out of the Box, environment in order to see some consistent numbers. Here is it’s summary:
Our AD group of 8,000 users took about 32 minutes, on average, every time to sync. The difference between the first sync and last sync differed only by 1-3 minutes.
Adding 40 project sites increased the average sync time from 32 to 120 minutes.
Adding 100 users to each of those 40 project sites, did not increase the sync times.
One setting (identified at this time) reduced the synchronization time. It was the
Project Site Permissions check box found within the Project Web App > Server Settings > Project Site Provisioning Settings area. By deselecting this check box we reduced or synchronization time back to the 32 minute
average.
The View Project Site check box within the Project Web App > Server Settings > Manage Groups > Team Members group had no apparent effect on the sync times besides what we had gleaned from the Microsoft documentation.
Naturally, this left us with a problem. As I’m sure you know, by deselecting the check box (Project Site Permissions), our project sites are now (figuratively speaking) orphans with no connection to the parent site. This generates
a new set of issues. For example:
Newly created project sites cannot be accessed by the owner and team members. They will require someone like the farm admin to come in behind them and add the intended users to the project site along with their required permissions.
All current and futures sites will no longer have users added via the standard method of building a team and publishing the project, but will have to be added manually.
You can use the Synchronize option found within Project Web App > Server Settings > Project Sites page, but that kinda defeats the purpose. It would require constant updating on a per site basis to keep up with
PM changes. Not very sensible, but it does work.
With this baseline information, we moved our tests into our DEV environment which somewhat mimics our PROD environment. This environment has 352 project sites and we performed 8 tests. This is where we had some large sync time numbers.
Here is the DEV test summary:
With the Project Site Permissions check box cleared, our AD group of 8,000 users took on average 30 minutes to sync. This was in line with our baseline times. With the exception of one test sync that took 99 minutes to complete.
That anomaly is acquiescent with what I’ve seen over the years. Sometimes syncs do some unusual things.
With the Project Site Permissions check box selected, our AD group of 8,000 users took on average 690 minutes (11.5 hours) to sync. Unacceptable of course.
So here’s what we’ve learned when dealing with extremely large numbers of active directory users in your Resource Pool sync:
We did not see a decrease in subsequent sync times after the initial Active Directory Resource Pool Synchronization as some might expect.
Our attempt to decrease sync time via the option of removing the View Project Sites was not successful. (Unless we interpreted Microsoft's document incorrectly.)
However, our interpretation of the recommended software boundaries and limits of SharePoint Server 2010 as it pertains to security scopes per site at 1,000, appears to be correct.
Using the option of clearing the Project Site Permissions does produce a reduction in AD sync time, but at a cost segregating your project sites and thus the creation of new processes of maintaining them.
I’ll remind others that these results are particular to our environments, there may still be exceptions yet to discover. Others may see numbers contrary to ours.
The biggest surprise to some members on our team (myself excluded) was that we did not see a reduced sync time after any of our initial syncs. Some are under the impression that after your initial sync, you should see reduced sync times. I haven’t
found that to be the absolute case in all situations, just in some situations. The reason for this still eludes me. Any thoughts would be appreciated.
I’ll let this sit a bit longer, but if no one disagrees with the results, I think we have our answer:
The number of project sites directly affects your Active Directory Resource Pool Synchronizations if you are using the
Project Site Permissions option. If you plan on synchronizing over 1,000 users
and you have a large number of project sites, proceed with the knowledge that you may have performance issues and long sync times.
As always, I’d love to hear from you or others just in case I’m missing something.
Chris Addis - MCTS

Project Server 2010 Active Directory Synchronization - duplicate Windows Name - Event ID 7734

Environment: SharePoint Server 2010, Project Server 2010, SP2, DEC 2013 CU (Farm Build number: 14.0.7113.5001)
Scenario:
Domain user has been added to the Active Directory group being synchronized with Project Server for the Team Members group.
That user has participated as a team member in numerous projects, added documents, been assigned tasks, typical project stuff...
Employee quits.
AD account is deleted. (NOT deactivated or moved into another OU)
Time passes...
Employee gets rehired. NEW AD account is set up: same display name, SamAccountName, email address, different GUID of course.
Daily Active Directory job runs again and throws event ID 7734 and the sync ends with a partial fail.
I understand why this is happening. Solutions I've found point me to deleting the Enterprise Object resource in Project Server and then rerunning the sync. Sure, this works BUT won't all of the previous documents, tasks,
etc. be disassociated from that user? If so, this is not ideal.
2 questions:
Is there a better way to deal with the fixing of the resource in Project Server to somehow link the old resource to the new resource allowing the sync to run successfully while still leaving the association to all old content intact?
How are other organizations dealing with rehires when they have been added as resources in Project Server? What is the best practice guidance from Microsoft on this? Are other companies not actually deleting AD accounts when users leave organizations
or are they putting them into a "ARCHIVE" OU or something like that? This happens at least half a dozen times a year at my company. We would like to keep our AD as clean as possible, but this appears to change our approach.
Any suggestion/guidance is appreciated.

For the question to relink the new account to the account which is already available in Project Server. You will have to update the WRES_AD_GUID to Null for the the Resource in MSP_RESOURCES table in the published database.
Whenever a users gets synchronized to the PWA his ADGUID, SAMAccountName, Display Name, Email Address and DepartmentName is Synchronized from AD to Project Server. When the user was deleted and recreated the ADGUID got changed. During the next sync, project
found the user with similar properties but different ADGUID which was updated in WRES_AD_GUID column in MSP_RESOURCES table. Hence it says that there is a duplicate account in the table with the same properties but a different ADGUID
Nullifying the WRES_AD_GUID column value in MSP_RESOURCES table should get the user synchronized to Project server in the next sync.
Cheers! Happy troubleshooting !!! Dinesh S. Rai - MSFT Enterprise Project Management Please click Mark As Answer; if a post solves your problem or Vote As Helpful if a post has been useful to you. This can be beneficial to other community members reading
the thread.

How do I get multiple hyperlinks to diplay in a query output?

I am using two tables to list all of the sport teams for a school. The sports table lists all of the team data grouped by gender. The second table uses the sportID from the first table to associate the team with a schedule. The problem is not all teams have a schedule yet.
I am trying to display a link for those teams with schedules. I compare the two tables, sports & schedule and use a CFIF statement to compare the 2 sportIDs in the output to determine which teams have a schedule. If the two sportIDs match then a hyperlink is displayed.
Unfortuanetely, only one link will be displayed, even though there should be three links. Below is my code:
Table to display the teams grouped by gender
<cfquery name="getSports" datasource="#application.database#">
select gender, team, levels, sportID
from sports
group by gender, team, levels, sportID
</cfquery>
Table used to get the sportID for schedules already created
<cfquery name="getID" datasource="#application.database#">
select sportID
from schedules
group by sportID
</cfquery>
I then compare the sportIDs and if they match, I then display a hyperlink
<cfoutput query="getSports" group="gender">
<h1">#gender#'s Teams</h1>
<ul>
<cfoutput>
     <li>
          <cfif getID.sportID EQ getSports.sportID><a href="teams.cfm?sportID=#sportID#"></cfif>
           #team# <cfif levels GT "">(#levels#)</cfif>   //levels is used to differentiate between J.V. and Varsity. Not all teams use levels
          <cfif getID.sportID EQ getSports.sportID></a></cfif>
     </li>
</cfoutput>
</ul>
</cfoutput>
How do I get the other teams to display their links?

I'm hesitant to give you an example because there are so many ways to do this and I don't want to lead you in a direction that might not be appropriate for what you are trying to do (outside of this code block).
I think WolfShade is on the right track. I would also use a single query with a join instead of trying to use a condition in a loop. I think you would want an outer join instead of an inner join though. You want all rows returned whether or not they have a schedule. Right? If so, you should be able to use an outer join and then your condition for the hyperlink becomes whether the schedules.sportID is NULL or not. I think this would be the best way to handle this.
OR
If you can't do that for some reason, then you need to modify your cfif logic. You could move your "getID" query inside of your <cfoutput query="getSports"... loop. Add a where condition to the query "where sportID = getSports.sportID". Then you can check if the getID.recordcount is greater than 0 (or equal to 1). If so it has a schedule so create the hyperlink. Not pretty though, because as you see it will need to query for each record in "getSports" query.
OR
You could keep your queries the same but place a cfloop around your cfif logic to check for each record in your "getID" query. Again, not pretty because you have to loop over the "getID" query for each record in the "getSports" query. Something like:
     <li>
          <cfloop query="getID">
          <cfif getID.sportID EQ getSports.sportID><a href="teams.cfm?sportID=#getSports.sportID#"></cfif>
           #team# <cfif levels GT "">(#levels#)</cfif>   //levels is used to differentiate between J.V. and Varsity. Not all teams use levels
          <cfif getID.sportID EQ getSports.sportID></a></cfif>
          </cfloop>
     </li>
OR
You could do a query of a query... Lots of ways to skin a cat...

Unable to add delegate calendars in iCal

I'm using OS 10.6.7 and am on an Exchange 2010 server and have it hooked into iCal. It shows my calendar just fine, but when I go into preferences->account->delegation and hit the plus button to add a delegate, I can enter a username of a delegate into the appropriate field, but when I click away (hitting the "enter" key just goes down a line, which is odd for when I'm entering what should be a single-line item) , the text I've just entered disappears and I'm left with an empty list. So, effectively, I cannot add a delegate exchange calendar to iCal.
I know that permissions for the exchange calendar are correct serverside, because I can view the delegate's calendar just fine from Exchange webmail. It's just in iCal that it won't add. Any ideas? I have tried deleting and re-adding the exchange account in iCal, and that doesn't help.

iCAL (Calendar) may be unable to access a shared calendar if the person's access to it is defined using a group that contains another group to provide access.. The access must be an account within the membership of the group not a group entered as a member of the group.
For example: SharedCalendarA has a group named All-Teams with Reviewer access. All-Teams has a Red-Team, Green-Team, etc groups listed in it. PersonA's account is listed in Red-Team. PersonA may not be able to access ShardCalendarA since All-Teams is being used to control access. However, if Red-Team is used instead access will work. It seems iCAL is unable to resolve access for security groups within groups. The group being used MUST have the person's account listed in it.
I thought this is worth passing along since Outlook 2011 for Mac and OWA work with groups within group access but iCAL may be having an issue with extra level security access.

Team vs. Group

Similar Messages

Maybe you are looking for