Skip to content

SPProjectServerGlobalPermissions

dscbot edited this page Mar 17, 2023 · 11 revisions

SPProjectServerGlobalPermissions

Parameters

Parameter Attribute DataType Description Allowed Values
Url Key String The default zone URL of the Project site to manage the group at
EntityName Key String The name of the user or group
EntityType Key String What type of entity are you setting permissions for? User, Group
AllowPermissions Write StringArray[] What permissions should be allowed for this entity?
DenyPermissions Write StringArray[] What permissions should be denied for this entity?

Description

Type: Distributed Requires CredSSP: No

This resource allows you to enforce global permissions in a PWA site for a specific project server group or an individual resource.

Examples

Example 1

This example shows how to set permissions for a specific resource in a PWA site

Configuration Example
{
    param
    (
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $SetupAccount
    )

    Import-DscResource -ModuleName SharePointDsc

    node localhost
    {
        SPProjectServerGlobalPermissions Permissions
        {
            Url                  = "http://projects.contoso.com"
            EntityName           = "Domain\user"
            EntityType           = "User"
            AllowPermissions     = @(
                "LogOn",
                "NewTaskAssignment",
                "AccessProjectDataService",
                "ReassignTask",
                "ManagePortfolioAnalyses",
                "ManageUsersAndGroups",
                "ManageWorkflow",
                "ManageCheckIns",
                "ManageGanttChartAndGroupingFormats",
                "ManageEnterpriseCustomFields",
                "ManageSecurity",
                "ManageEnterpriseCalendars",
                "ManageCubeBuildingService",
                "CleanupProjectServerDatabase",
                "SaveEnterpriseGlobal",
                "ManageWindowsSharePointServices",
                "ManagePrioritizations",
                "ManageViews",
                "ContributeToProjectWebAccess",
                "ManageQueue",
                "LogOnToProjectServerFromProjectProfessional",
                "ManageDrivers",
                "ManagePersonalNotifications",
                "ManageServerConfiguration",
                "ChangeWorkflow",
                "ManageActiveDirectorySettings",
                "ManageServerEvents",
                "ManageSiteWideExchangeSync",
                "ManageListsInProjectWebAccess"
            )
            DenyPermissions      = @(
                "NewProject"
            )
            PSDscRunAsCredential = $SetupAccount
        }
    }
}

Example 2

This example shows how to set permissions for a specific group that exists in a PWA site

Configuration Example
{
    param
    (
        [Parameter(Mandatory = $true)]
        [PSCredential]
        $SetupAccount
    )

    Import-DscResource -ModuleName SharePointDsc

    node localhost
    {
        SPProjectServerGlobalPermissions Permissions
        {
            Url                  = "http://projects.contoso.com"
            EntityName           = "Group Name"
            EntityType           = "Group"
            AllowPermissions     = @(
                "LogOn",
                "NewTaskAssignment",
                "AccessProjectDataService",
                "ReassignTask",
                "ManagePortfolioAnalyses",
                "ManageUsersAndGroups",
                "ManageWorkflow",
                "ManageCheckIns",
                "ManageGanttChartAndGroupingFormats",
                "ManageEnterpriseCustomFields",
                "ManageSecurity",
                "ManageEnterpriseCalendars",
                "ManageCubeBuildingService",
                "CleanupProjectServerDatabase",
                "SaveEnterpriseGlobal",
                "ManageWindowsSharePointServices",
                "ManagePrioritizations",
                "ManageViews",
                "ContributeToProjectWebAccess",
                "ManageQueue",
                "LogOnToProjectServerFromProjectProfessional",
                "ManageDrivers",
                "ManagePersonalNotifications",
                "ManageServerConfiguration",
                "ChangeWorkflow",
                "ManageActiveDirectorySettings",
                "ManageServerEvents",
                "ManageSiteWideExchangeSync",
                "ManageListsInProjectWebAccess"
            )
            DenyPermissions      = @(
                "NewProject"
            )
            PSDscRunAsCredential = $SetupAccount
        }
    }
}
Clone this wiki locally