8.4 Example: Digital Airlines Users

Each project typically has one manager. In this example, the Digital Airlines organization has multiple projects. They want three users to share the project manager role across all of their projects. You want to manage their role assignments in a group instead of individually. The group will receive access rights at the Organization level so that its members can manage any of the organization’s projects.

As a System Administrator user (a member of the Administrators group), you perform the following tasks, as shown in Figure 8-2:

  1. Create an organization account for Digital Airlines.

  2. Create system user accounts for workers Alice, Ben, and Jacob.

  3. Create a system group DigAir PM.

  4. Assign the three system users to this group.

  5. Assign the DigAir PM group to the role of Project Manager for the Digital Airlines organization at the Organization level.

  6. Create projects for Digital Airlines.

  7. Each project for the organization automatically inherits the group in the Project Manager role.

    With this configuration, any member of the DigAir PM group can manage any project for the Digital Airlines organization.

Figure 8-2 Assigning a Group to the Project Manager Role

You can assign user permissions directly, or indirectly through group membership. If you assign a user to multiple roles, the user’s permissions in the Web Interface are cumulative.

For example, Alice is a system user who is currently assigned to the DigAir PM group. You also want her to perform the System Administrator role for the Web Interface. You can add Alice as a member of the Administrators group to grant her the associated permissions for the System Administrator role. See the Administrators group membership in Figure 8-2.

The Project Manager role provides a user the ability to create, modify, and delete users and groups, without granting the additional authority for tasks associated with the System Administrator role. For example, you can assign Alice the Project Manager role. After Alice creates users and groups, the project managers for the Digital Airlines projects (that is, member in the DigAir PM group) can assign subordinate project roles to them.