Export (0) Print
Expand All

Plan user access in Project Server 2013

Project Server 2013
 

Applies to: Project Server 2013

Topic Last Modified: 2013-12-18

Summary: Each instance of Project Web App can use either Project Server permission mode or SharePoint permission mode to control user access.

Project Server 2013 offers two security modes for controlling the kind of access that users have to sites and projects:

  • SharePoint permission mode   In this mode, which is new in Project Server 2013, a special set of SharePoint security groups are created in sites associated with Project Server 2013. These groups give users varying levels of access to projects and Project Server functionality. SharePoint permission mode is new for Project Server 2013.

  • Project permission mode   In this mode, Project Server provides customizable security groups and other functionality that is distinct from SharePoint groups. This is the same security mode that was available in Project Server 2010.

Use this table to compare the features available in each security mode.

Comparison of features for security modes in Project Server

Feature SharePoint permission mode Project Server permission mode

Use a single set of security groups across Project Web App and SharePoint Server.

×

Permissions inheritance for PWA and Project Sites

×

Direct authorization against Active Directory security groups

×

Claims-based authorization

×

×

Manage authorization by role-based groups

×

×

Extensible and customizable

×

×

User delegation

×

Ability to secure work resources

×

Impersonation

×

Security filtering using the Resource Breakdown Structure

×

Custom Security Categories

×

When you’ve determined which permission mode you want to use, more information is available:

New Project Web App instances use the SharePoint permission mode by default. If you have more than one instance of Project Web App, each site can use a different permission mode.

In an on-premises installation of Project Server 2013, the permission mode can be changed for a given instance of Project Web App by using the Set-SPProjectPermissionMode Windows PowerShell cmdlet. For more information, see Set-SPProjectPermissionMode.

In Project Online, the mode can be changed in the Microsoft Office 365 portal site. For more information, see Change permission management in Project Online.

WarningWarning:
Switching between SharePoint permission mode and Project Server permission mode deletes all security-related settings. If you switch from SharePoint permission mode to classic Project Server permission mode, you have to manually configure your security permissions structure in Project Server 2013. Switching from Project Server permission mode back to SharePoint permission mode deletes your security permissions information from Project Server 2013.

In this chalk talk video, Microsoft Program Manager Matt Roe discusses the two permission modes and offers some best practices.

Video: Project Server permission modes

Video (play button) icon

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft