Website Upgrade Incoming - we're working on a new look (and speed!) standby while we deliver the project

Tips on using this forum..

(1) Explain your problem, don't simply post "This isn't working". What were you doing when you faced the problem? What have you tried to resolve - did you look for a solution using "Search" ? Has it happened just once or several times?

(2) It's also good to get feedback when a solution is found, return to the original post to explain how it was resolved so that more people can also use the results.

Managing PMO Team security profiles, privileges

5 replies [Last post]
Fri, 2009-10-23 02:38
Jose Ramirez
User offline. Last seen 13 years 1 day ago. Offline
Joined: 6 Sep 2008
Posts: 105
Groups: None
Ello,

I guess I have been given the role as a Primavera Administrator and I need to put together the following for the Project Management Office (PMO):

The Creation of standards for WBS, Resource Codes, OBS, EPS, Users, Security Profiles, Activity Codes, and anything else. (These are not the problem)

Also I need to managing security profiles, privileges, resource/role pools, timesheet apps, creating standard layout and standard reports.

My question is that I do n’t know what each member of the PMO team needs for security profile and privileges or what information they will need to view: (I always been able to do everything on Primavera. So, I have always given meself all the allowable privileges)…

After you create the Security Profile for each user what Privilege they should be allowed? Also when you create the Users what Global Access could they be assigned? For each of the PMO Team what specify the resource that the User (PMO member) will be able to access? Finally licensing should it be Concurrent User for Team Member or Project Management (40 Licenses available).

This is what I think the team looks like please feel free to add other roles from the PMO team I have missed:

- Lead Program Planner/Scheduler - maintain/analyze the project schedules and resources
- Project Planner/Scheduler/s – development of project schedules/maintain schedules/analyze project schedules including roles/resources at a project level.
- Primavera Administrator [ Me, x} ] - to provide support for P6 issues (i.e. call tech support)/DB/Report or Layout standard templates/historical data library
-Project Manager
-Cost Control Office
-Procurement Office
-Engineering Office

Thanks to all that are able to help,

JoseR o_O
Top

Replies

Tue, 2009-10-27 03:13
#1
Dieter Wambach
User offline. Last seen 8 years 7 weeks ago. Offline
Joined: 15 Jan 2007
Posts: 1350
Groups: Petro-Chem / Oil & Gas, TILOS
José

Thanks, José; it was filled with work.

These codes are valuable in case of cooperation - if customer or a subcontractor receive a project-file or have access to the database. In my opinion the most important characteristic of these codes is: They are not exported.

Examples might be:
- Characteristics of persons (workers) - regulations to keep personal data secret.
- Informations (classifications) on business partners which must be kept as company’s secret.
- Financial classifications.

Much success with your project!

Regards

Dieter
Top
Mon, 2009-10-26 15:36
#2
Jose Ramirez
User offline. Last seen 13 years 1 day ago. Offline
Joined: 6 Sep 2008
Posts: 105
Groups: None
Hi Dieter,

Thank you so much again. This is very helpful in creating the best possible security profiles and privileges for this folks. I also read the adm guide it was also helpful in getting this far.

I wanted to ask you about the EPS Secure Codes:

"A global or EPS-level activity code that is accessible only to certain users. If an EPS-level or global activity code is marked as a secure code in the Activity Code Definitions dialog box, the user will need the appropriate access rights to view, edit, delete and assign this code and its values."

Would you be able to provide me with a few examples of what these secure codes are, since I don’t know what information one would want to hide with these codes?

Thank you Dieter,

Hope you had a great weekend.
Top
Mon, 2009-10-26 10:27
#3
Dieter Wambach
User offline. Last seen 8 years 7 weeks ago. Offline
Joined: 15 Jan 2007
Posts: 1350
Groups: Petro-Chem / Oil & Gas, TILOS
José

What you’ll allow to your users depends on the organization you are working for. Basic principle for me allways was: Read access: liberal, Write: restrictive, Delete: Very restrictive. The roles that you defined seem quite reasonable. Just some remarks/questions:

CCAM: Needs
- View resource and Role Costs
- Edit Project Activities

PCC:
NOT: Edit Users, Edit Profiles
Shall she/he vreate projects and condes?

PM:
Plus: Edit WBS, Apply Actuals, Maintain and Assign BL, Monitor Risks...

Edit codes, resources, Imp/Exp, create projects should be restricted to yourself and your "Deputy"

RM:
Edit Committed Flag If you’ll use the web interface, then he’ll need it otherwise it’s not accessible.

Regards

Dieter
Top
Fri, 2009-10-23 21:25
#4
Jose Ramirez
User offline. Last seen 13 years 1 day ago. Offline
Joined: 6 Sep 2008
Posts: 105
Groups: None
Okay PPL of Planning Planet and Dieter(Thank you for your guidance), This is what My Security Profiles and Privileges are staring to look like:

I place a (?) on privileges I wasn’t sure about. So, if anyone would like to advise me on: Sec. Profile, if they should have/not have the PRIVILEGE I have ALLOWED THEM, listed below for each of the Profiles. Please, Let me know.

Security Profile:

Cost Control Account Manager (CCAM)

Privilege:
Store Period Performance
Edit Period Performance
View Project Costs/Financials
Edit Project WBS Financials
Edit EPS Financials
Edit Project Expenses

Project Controls Coordinator (PCC)

Privilege:
The PCC has all rights n privilege (edit access to all data, including administration rights)


Project Manager (PM)

Privilege:
Summarized Project
Edit Project Details Except Financials
Schedule Project
Apply Actuals?
Maintain Project Baseline?
Assign Project Baseline?
Edit Project Work Products and Documents
View Project Costs/Financials
Check In/Check Out Project
Assign Issue Forms
View Timesheets In Report
Project Top-Down Estimation?
Edit Project Thresholds, Issues and Risk?
Add/Edit Project Level Layout

Lead Project Planner/Scheduler

Privilege:
Create Projects Within EPS
Summarize Project
Edit Project Details Except Finacials
Adminster Project Externals Applications
Schedule Project
Level Resources
Apply Actuals
Store Period Performace?
Maintain Project Baselines
Run Baseline Updates
Assign Project Baseline
Edit Project Work Products and Documents?
Add/Edit Project Template Documents
Edit Project Activity Code
View Project Cost/Financials
Edit Project Activity Codes
Add Project Activity Codes
Edit Project WBS Except Financials
Edit Project Expenses
Edit Project Activity Relationship
Add/Edit Project Activities Except Relationship
Add/Edit Project Level Layout
Monitor Project Thresholds?
Edit Project Reports
Check In/Check Out Project
Assign Issue Forms
View Timesheets In Report
Import/View Contract Manager Data
Project Top-Down Estimation
Edit Project Thresholds, Issues and Risk
Create Work Group?
Modify Project Workspace and Workgroup Preferences?

Project Planner/Scheduler

Privilege:
Schedule Project
Apply Actuals
Maintain Project Baselines
Run Baseline Updates
Assign Project Baseline
Edit Project Work Products and Documents?
Add/Edit Project Template Documents
View Project Cost/Financials
Check In/Check Out Project
Edit Project Activity Relationship
Add/Edit Project Activities Except Relationship
Delete Project Activities
Add/Edit Project Level Layout

Resource Manager

Privilege:
Delete Resource
Add Resource
Edit Resource
Approve Resource Timesheet
Edit Global Reports
Edit Global Tracking Layouts
Edit Roles
Edit Global Calendar
Edit Resource Calendar
Edit Timesheet Dates
Edit Project Codes
View Resource and Role Costs
Schedule Project
Level Resources
Perform Acitivity Resource Request
Edit Resource Assignment For Resource Planning
Edit Committed Flag for Resource Planning?

Thank you all,

JoseR

(\__/)
(+’.’+)
(")_(")




















Top
Fri, 2009-10-23 03:36
#5
Dieter Wambach
User offline. Last seen 8 years 7 weeks ago. Offline
Joined: 15 Jan 2007
Posts: 1350
Groups: Petro-Chem / Oil & Gas, TILOS
José

The roles seem ok, maybe to add a resource planner (Head of Team or Department). Cost Control may work with a read-only profile.

You can start with those profiles:

- Read everything maybe without costs: The whole team
- Two "Admin Superusers" - one might be sick, on business trip,...
- Each planner and scheduler should have her/his test area with a right "Project Superuser" - or create a second database for testing.
- Be careful with the right to delete (projects, activities, codes, resources). Only Admins should be allowed
- Study the concept of "secure codes"
- Study the Help function, it is very good.

Don’t forget to create and to enable a batch job (Tools --> Job Service) which summarizes every night.

I’m very surprised to see you start with P3e.

Good luck!

Dieter


Top