ProjectWise Administrator Help

Notes on Restricted Administrators and Granular Security

  • No user who is a member of the Administrator group can ever be restricted from having access to any datasource node in ProjectWise Administrator.

  • A Restricted Administrator can never delete or modify the Administrator group, or modify Administrator group membership, even if the Restricted Administrator has full control over the Groups node.

  • A Restricted Administrator cannot modify the user setting, Use access control, for any user, including themselves, even if the Restricted Administrator has full control over the Users node. Only a member of the Administrator group can modify this user setting.

  • You can add the entire Restricted Administrator group to a node’s Granular Security tab if necessary.

  • You can also add one or more users to the Restricted Administrator group, then create a group or user list and add those same users to it, then add the group or user list (rather than the individual users) to the node’s Granular Security tab.

  • When a user and a group (or user list) which happens to include the user are assigned differing granular security permissions to the same node, then whatever permissions are set for the user individually will be applied when they log in, rather than those of the group or user list.

  • When two or more groups (or user lists, or a mix of both) are assigned differing granular security permissions to the same node, and each object shares some users, then the user will inherit the granular security permissions of whichever object has the more restrictive permissions.