.png)
Plan user access in Project Server 2013
Published: August 15, 2012
Summary: Each instance of Project Web App can use either Project Server permission mode or SharePoint permission mode to control user access.
Applies to: Project Server 2013
Project Server 2013 offers two security modes for controlling the kind of access that users have to sites and projects:
-
SharePoint permission mode In this mode, which is new in Project Server 2013, a special set of SharePoint security groups are created in sites associated with Project Server 2013. These groups are used to grant users varying levels of access to projects and Project Server functionality. SharePoint permission mode is new for Project Server 2013.
-
Project Server permission mode In this mode, Project Server provides a set of customizable security groups and other functionality that is distinct from SharePoint groups. This is the same security mode that was available in Project Server 2010.
The following table illustrates the features available in each security mode.
Comparison of features for security modes in Project Server
| Feature | SharePoint permission mode | Project Server permission mode |
|---|---|---|
|
Unified security management through SharePoint Server |
× |
|
|
Permissions inheritance for PWA and Project Sites |
× |
|
|
Direct authorization against Active Directory security groups |
× |
|
|
Claims-based authorization |
× |
× |
|
Manage authorization by role-based groups |
× |
× |
|
Extensible and customizable |
× |
× |
|
User delegation |
|
× |
|
Ability to secure work resources |
|
× |
|
Impersonation |
|
× |
|
Security filtering using the Resource Breakdown Structure |
|
× |
|
Custom Security Categories |
|
× |
New Project Web App instances use the SharePoint permission mode by default. In an on-premesis installation, the mode can be changed for a given instance of Project Web App by using the Set-SPProjectPermissionMode Windows PowerShell cmdlet. For more information, see Set-SPProjectPermissionMode.
In Project Online, the mode can be changed in the Microsoft Office 365 portal site. For more information, see Change permission management in Project Web App for Project Online.
Warning:
|
|---|
|
Switching between SharePoint permission mode and Project Server permission mode deletes all security-related settings. If you switch from SharePoint permission mode to classic Project Server permission mode, you have to manually configure your security permissions structure in Project Server 2013. Switching from Project Server permission mode back to SharePoint permission mode deletes your security permissions information from Project Server 2013. |
Using the table above, determine which permission mode you want to use for a given Project Web App instance. For detailed information about each mode, see the following articles:
-
For information about SharePoint permission mode, see Plan SharePoint groups in Project Server 2013.
-
For information about Project Server permission mode, see Plan groups, categories, and RBS in Project Server 2013.
Understanding Project Server permission modes
In this chalk talk, Microsoft Program Manager Matt Roe discusses the two Project Server permission modes and gives guidance for their usage.
Video: Project Server permission modes
