Hi,

this post will be a short one! I will show you Permissions Cumulative Behavior in MS PROJECT SERVER 2010. First I will open, for example, Manage Categories view:

and I will get:

When I click on My Projects, I will get:

Now I I will choose Project Managers Group:

Let us look, for example, on the Create New Tasks or Assignment permission. It is set to Allow. What does it mean? It means that every user will be able to Create new Task or Assignment in CASE THAT THIS PERMISSION IS NOT DENIED in some other Group which this user belongs!

I will choose the Resource Managers group and I will set this permission to Denied:

Now, user has set that permission to Deny in Resource Managers group, and Allow in the Project Manager group, and that means that the user will NOT BE ABLE to Create New Task or Assignment!

But what if I choose to set this permission neither to Allow nor to Denied in Resource Managers group:

Because this permission is not set to Allow nor to Deny it means that it is set to Not Allowed! But! There is a huge difference between Deny and Not Allowed Permission set. If you choose Deny then user will not be able to Create New Task or Assignment even if this Permission is set to Allow in some other group. But if this permission is set to Not Allowed (e.g. neither Allow nor Deny), the user will be able to Create New Task or Assignment if this permission is set to Allow in some other group.

So cumulative behavior, for Create New Task or Assignment (for example) will be:

For the end of this Post, be vary careful with Deny permission setting. Use in only if you are 100% sure that you want to prohibit user to use this functionality from anywhere. In any other case use the Allowed – Not allowed combination instead!

Regards,