Understanding Project Server/Project Online Add-in Permissions

If you are familiar with SharePoint Add-ins, then  you may also know about different Add-In permission request scopes available in SharePoint Server 2013/2016/Online. Here is the TechNet article that explains Add-ins permissions in SharePoint.

In this article, I am going to explain different permission request scopes that are available to develop Project Server 2013/2016/Online Add-Ins. The permission request scopes are the permissions that the Add-In requests on behalf of the user. In general, actions that add-in tasks are performed on behalf of the user who runs the add-in; you do not explicitly use impersonation or specify who can run the add-in. If the user does not have those permissions in Project Web App, the app will not run.

Scope Permission
Enterprise Resources Read, Write
Multiple Projects Read, Write
Project Server Manage
Reporting Read
Single Project Read, Write
Statusing SubmitStatus
Workflow Elevate

Enterprise Resources

  • This permission request scope requires the Add-in user to have Resource Manager permissions.
  • This permission request scope is used to read or write information about Project Web App users.

Multiple Projects

  • This permission request scope requires the Add-in user to have Project Manager permissions for some operations and project Team Member permissions for basic read operations, such as task assignments.
  • This permission request scope is used to read or write data from/to more than one project.

Project Server

  • This permission request scope requires the Add-in user to have Administrator permission for Project Web App.

Reporting

  • This permission request scope requires the Add-in user to have log on permission for Project Web App.
  • This permission request scope is used to read the Reporting data using Project¬†OData service for Project Web App.

Single Project

  • This permission request scope requires the Add-in user to have at least project Team Member permission.
  • This permission request scope is used to read or write data from/to a project where the user has the permissions requested.

Statusing

  • This permission request scope requires the Add-In user to have permission to submit status updates for projects.
  • This permission request scope is used to submit updates for status of assignments, such as times worked, percent complete, and new assignments.

Workflow

  • This permission request scope requires the Add-In user to have permission to run Project Server workflows.
  • This permission request scope is used to run the add-in with elevated permissions, to enable transitions from one stage to another stage in a workflow. Business logic in the add-in controls stage transitions.

An Add-in can have multiple permission request scopes, including those for other SharePoint permissions, but should have only the minimum necessary for the Add-In functionality. Here are few use case scenarios.

User Case 1: You have a requirement to develop an Add-in that can be used by a Project Web App user to change his/her assignments percent complete and submit the updates on multiple projects, then you should assign/configure the following permission request scopes in your Add-in.

Scope Permission
Multiple Projects Read
Statusing SubmitStatus

User Case 2: You have a requirement to develop a Timesheet Status Report Add-in that can be used by Project Managers/Status Managers/Timesheet Managers as one place to view Resource Timesheet Actuals as well as to review Task Updates/Timesheet Updates, then you should assign/configure the following permission request scope in your Add-in.

Scope Permission
Reporting Read

Looking for a custom Timesheet Status Report Add-In that can offer you great features? We have readily available solution for you, learn more about it here.

User Case 3: You have a requirement to develop a Project Status Report Add-in that can be configured as Project Detail Page to show overall Project Status details, then you should assign/configure the following permission request scope in your Add-in.

Scope Permission
Reporting Read

Looking for a custom Project Status Report Add-In that can offer you great features? We have readily available solution for you, learn more about it here.