Problem: Access rights for portfolios or programs are not designed for inheritance to projects within. "Manage" (for projects) and "Contribute to" do not exist, so it is impossible to give a any user access other than "View" to all projects within.
Recommended solution: Allow for 2 access settings at the program/portfolio level. Example for a program:
- Program Settings > Program Sharing - Sets access rights for the visibility of the program. (allow "Manage" or "View")
- Program Settings > Project Sharing - Sets access rights to be inherited down onto all projects within. (allow "Manage" or "Contribute to" or "View" and allow for custom settings)