none
How to add all users to project server (PWA site) RRS feed

  • Question

  • Hi,

    I am new to project server. I'm trying to find our how can I add "NT AUTHORITY\Authenticated Users" to the PWA 2010 site with read-only permissions.

    via the Settings->Site Settings->Manage Users, it just gives me an message that this user cannot be added.

    I wonder how to provide PWA read-only access for everybody? is there any other group that i have to use?

    Thanks

    Rithu

    Tuesday, June 3, 2014 9:38 PM

Answers

  • Hello,

    You can't, you will need to add everyone individually via the PWA > Server Settings > Manage Users page or you can automate this by syncing a AD group (domain users for example) with the Project Server Team Members security group. All of those users will require a PWA CAL though...

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Tuesday, June 3, 2014 10:20 PM
    Moderator
  • You need not add all the users manually to the group. You can use Group Sync option as mentioned by Paul.

    Please follow the below steps:

    1. Create a group in Active Directoy say "TeamMembersSync" and add all the Domain users who need Read access to PWA to this group

    2. Once the group is created, navigate to PWA > Server Settings > Manage Groups

    3. Edit Team Members group. Under Active Directory Group to Synchronize, Click on Find Group and look for the group you just created. Click on Ok and then click on Save

    4. Now in Manage Groups page, Click on Active Directory synchronization options and then click on Save and Synchronize now.

    The users should be automatically added to the group now.


    Cheers! Happy troubleshooting !!! Dinesh S. Rai - MSFT Enterprise Project Management Please click Mark As Answer; if a post solves your problem or Vote As Helpful if a post has been useful to you. This can be beneficial to other community members reading the thread.

    Wednesday, June 4, 2014 3:26 PM
    Moderator
  • So out of those 100000+ users, which are the 5000+ that need access? They will need to be a an AD group, the sync that AD group with the Team Members Project Server security group... Just an FYI, all of those 5000+ users will require a PWA CAL.

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Wednesday, June 4, 2014 8:11 PM
    Moderator
  • Wow, all 100000+ users, that is a lot! Make sure the system is scaled correctly!! When you say access to the Project site. Do they all need to log in to the PWA site? What is the purpose for all users needing to log in? Are all 100000+ users being assigned to tasks and have to submit task progress? Or are all 100000+ users required to submit a timesheet in Project Server? Please be aware all of these 100000+ users accessing PWA will require a PWA CAL. To set up the AD synch, you could create a Universal security AD group, then add all of the 40 domain users groups to the universal security group. So for example you would the universal group called "Forest Users", this group would contain Domain1\domain users, Domain2\domain users etc. When setting up the AD sync you would add the "Forest Users" group to sync with the Team Members Project Server group. Please bear in mind for Project Server 2010, you will need two way trusts between all of your 40 domains where you are syncing users! Also, I have no idea how Project Server will handle syncing that many users, it will take a while if you have many project sites in PWA etc. For details on Project Server AD sync, see:

    http://technet.microsoft.com/en-us/library/gg750243(v=office.14).aspx

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Wednesday, June 4, 2014 9:32 PM
    Moderator

All replies

  • Hello,

    You can't, you will need to add everyone individually via the PWA > Server Settings > Manage Users page or you can automate this by syncing a AD group (domain users for example) with the Project Server Team Members security group. All of those users will require a PWA CAL though...

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Tuesday, June 3, 2014 10:20 PM
    Moderator
  • hi Paul,

    So if we have 5000+ users we need to add them individually?

    Rithu

    Wednesday, June 4, 2014 3:08 PM
  • You need not add all the users manually to the group. You can use Group Sync option as mentioned by Paul.

    Please follow the below steps:

    1. Create a group in Active Directoy say "TeamMembersSync" and add all the Domain users who need Read access to PWA to this group

    2. Once the group is created, navigate to PWA > Server Settings > Manage Groups

    3. Edit Team Members group. Under Active Directory Group to Synchronize, Click on Find Group and look for the group you just created. Click on Ok and then click on Save

    4. Now in Manage Groups page, Click on Active Directory synchronization options and then click on Save and Synchronize now.

    The users should be automatically added to the group now.


    Cheers! Happy troubleshooting !!! Dinesh S. Rai - MSFT Enterprise Project Management Please click Mark As Answer; if a post solves your problem or Vote As Helpful if a post has been useful to you. This can be beneficial to other community members reading the thread.

    Wednesday, June 4, 2014 3:26 PM
    Moderator
  • Thank you Dinesh for clear explanation. Do we have any group by default that all the domain users are part of it. We have more than 40 domains and 100000 + users, So it would be hard for me to ask AD team to add all the users to the single group.

    Thanks

    Rithu

    Wednesday, June 4, 2014 6:22 PM
  • So out of those 100000+ users, which are the 5000+ that need access? They will need to be a an AD group, the sync that AD group with the Team Members Project Server security group... Just an FYI, all of those 5000+ users will require a PWA CAL.

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Wednesday, June 4, 2014 8:11 PM
    Moderator
  • Thank you Paul for reply. Sorry for the confusion, I gave 5000 as an example.But I need all 100000+ users have access to project server.

    Just to make it simple every user in my organization should have read access to project site

    Wednesday, June 4, 2014 9:03 PM
  • Wow, all 100000+ users, that is a lot! Make sure the system is scaled correctly!! When you say access to the Project site. Do they all need to log in to the PWA site? What is the purpose for all users needing to log in? Are all 100000+ users being assigned to tasks and have to submit task progress? Or are all 100000+ users required to submit a timesheet in Project Server? Please be aware all of these 100000+ users accessing PWA will require a PWA CAL. To set up the AD synch, you could create a Universal security AD group, then add all of the 40 domain users groups to the universal security group. So for example you would the universal group called "Forest Users", this group would contain Domain1\domain users, Domain2\domain users etc. When setting up the AD sync you would add the "Forest Users" group to sync with the Team Members Project Server group. Please bear in mind for Project Server 2010, you will need two way trusts between all of your 40 domains where you are syncing users! Also, I have no idea how Project Server will handle syncing that many users, it will take a while if you have many project sites in PWA etc. For details on Project Server AD sync, see:

    http://technet.microsoft.com/en-us/library/gg750243(v=office.14).aspx

    Paul


    Paul Mather | Twitter | http://pwmather.wordpress.com | CPS

    Wednesday, June 4, 2014 9:32 PM
    Moderator
  • Wow! That PWA site has to be one of the biggest in the world!  I would suggest that you bring in some heavy duty consultants to help with this AD sync and scaling.   This is so huuuuuuge!!!  It's so big, I am not surprise Microsoft is not giving you a hand. Microsoft loves big case studies.

    Just curious. How many servers are you using for this?

    Cheers!


    Michael Wharton, MVP, MBA, PMP, MCT, MCTS, MCSD, MCSE+I, MCDBA
    Website http://www.WhartonComputer.com
    Blog http://MyProjectExpert.com contains my field notes and SQL queries

    Thursday, June 12, 2014 3:16 AM
    Moderator