#ProjectServer 2010 Manage Site Services group level permission issue #PS2010 #MSProject #EPM #SP2010

November 22, 2011 at 1:35 pm | Posted in Administration, Fixes, Issue | Leave a comment
Tags: , ,

Removed Manage Site Services permission from the Administrators security group? If you have done this and no other Project Server Security Groups have this permission enabled you will see the following error when trying to enable this permission:

The group could not be saved due to the following reason(s):

  • You do not have the required permission to modify this group’s ‘Manage Site Services’ permission.

image

This issue is related to a post Brian Smith created regarding the same permission but at the Project Web App Permissions global level: http://blogs.technet.com/b/projectadministration/archive/2011/05/18/project-server-2010-removed-the-manager-site-services-permission-and-can-t-get-it-back.aspx

The fix is different to the one documented for the global permission in the link above but again this is an update to the Published database directly via T-SQL which is not recommended.

The fix can be found below, please run this against the Published database. I would recommend testing this on a test PWA instance first and taking full database backups beforehand.

 

declare @Count int

select @Count = COUNT(*) from MSP_WEB_SECURITY_SP_CAT_PERMISSIONS where WSEC_REL_UID = ’13FD872B-1DB8-4651-86B3-8F484C9B825D’ and WSEC_FEA_ACT_UID = ’55FE20B7-73D6-421A-A0A8-41B8A482AE8B’

if(@Count = 0)

BEGIN

PRINT ‘Relationship does not exist  Manage Site Services permission row will be created now to associate Administrators group with permission’

insert into MSP_WEB_SECURITY_SP_CAT_PERMISSIONS(WSEC_REL_UID, WSEC_FEA_ACT_UID, WSEC_ALLOW, WSEC_DENY, WSEC_ACCESS)

values

(’13FD872B-1DB8-4651-86B3-8F484C9B825D’,’55FE20B7-73D6-421A-A0A8-41B8A482AE8B’, 1,0,1)

END

else

BEGIN

PRINT ‘Relationship already exists  Manage Site Services permission already associated with Administrators group’

END

 

Please note, you may need to update the apostrophes if you copy and paste this SQL query.

This SQL above will check if the relationship exists, if not it will then insert the row in the table to associate the Manage Site Services permission with the Administrators group.

Many thanks to my colleague Frank Merla for sharing this fix.

Advertisements

Leave a Comment »

RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Blog at WordPress.com.
Entries and comments feeds.

%d bloggers like this: