It’s a bit of a mundane topic this one, but like all of my topics, it’s soooo real world!
I have a customer (okay, so I’ve got lots, not just the one!) and this particular customer is only using Project Online, and not Project Pro for O365/Project 2013 Professional. For those of you familiar with this solution, this means that they are creating and editing all of their projects using a browser. The customer is also using the default permission mode of SharePoint Permissions Mode.
Prior to Project Server 2013 (and hence by implication the 1st iteration of Project Online) the permissions in Project Server were based on a very granular and customisable security model; this model is now known as Project Server Permission Mode (for an explanation please click here…) With the introduction of Project Online and Project Server 2013, an additional permission model was introduced, call SharePoint Permission Mode, which provides a simplified way to manage users, and has parity to the default permissions within the “traditional” Project Server Permission Mode. One of the important decisions to make when deploying Project Server/Project Online is to decide, early on, which permission model to use.
In SharePoint Permission Mode, a user can belong to one of the following groups
Project Web App Members
Project Web App Visitors
Project Web App Owners
Portfolio Managers for Project Web App
Project Managers for Project Web App
Administrators for Project Web App
Team Members for Project Web App
For an overview of the default permissions have a look at https://technet.microsoft.com/en-us/library/jj219510.aspx . From this page, we can see that by default Project Managers have the permission to delete their own projects (a category permission associated with the My Projects category)
My customer has lots of users who belong only (and rightly) to the Project Managers for Project Web App group, and they can happily create and edit projects to their hearts content (and they are content, on the whole). The issue is, that they can’t delete any of their own projects (and this is where they are not content!)
Hmm I hear you say…
I was quite surprised at this revelation, and so went about testing it. The 1st thing to understand is exactly where can a user delete a project by using the browser only. There are two menu interfaces where this is possible…
1. Using the ellipses button from the Project Centre.
2. Using the Delete Enterprise Objects from the Server settings.
Now, I wouldn’t expect a user who is just a Project Manager to have access to Delete Enterprise Objects and this is the case, but I would expect a PM to be able to access the the Delete menu item from the Ellipses button, but alas the button doesn’t exist as can be seen in the following screen shot, taken from a user who is a Project Manager!
In Sharepoint Permission Mode, there aren’t any unless you deploy the project client to the PC. The project client does allow you to delete a project via it’s UI, but this assumes i) you have the money to do so 2) your users have the skills to use the project client 3) they have a Windows PC (not so good for Mac users this one). If this is important to you, please contact MS support and let them know of your concerns (I did!) (and get friendly with your local project server admin as this is the person who can delete projects!). If you are using Project Server Permissions Mode, then you can enable the global permission “Clean Up Project Server Database” which will allow you to delete your projects; however this blog isn’t reason enough to switch permission modes.