Expand my Community achievements bar.

Got questions about Workfront Governance? Join our upcoming Ask Me Anything session on February 12th!
SOLVED

Adding external company standard users access to projects, but locking them down to only certain projects

Avatar

Level 1

Is it possible to add some Standard licence users from an external company (example PR firm) access to only specific projects? If posssibel, how could that be done?

1 Accepted Solution

Avatar

Correct answer by
Level 6

Hi @JakeYL26 

The reason a standard user can see everything is when they are in the same group and/or company as the projects. 

Like I said, I would create a group just for these external people. Then share those few projects only with that group. 

 

View solution in original post

10 Replies

Avatar

Level 6

Hi @JakeYL26 

I would look at using groups first. E.g. create a group for this user, and share with this group what the user can access.

Avatar

Level 1

We also found this:

 

To set up users in Adobe Workfront so they can only see specific projects, follow these steps:

  1. Create Custom Access Levels:
    • Go to the Setup area by clicking the Main Menu icon.
    • Navigate to Access Levels and either create a new access level or modify an existing one.
    • Click the gear icon next to Projects and fine-tune the settings to restrict access as needed[1].
  2. Set Project Sharing Rules:
    • For each project you want to share, go to the project’s settings.
    • Click on Sharing and add the users or groups you want to have access.
    • Specify the level of access (e.g., View, Contribute, Manage) for each user or group[2].
  3. Use Portfolios and Programs:
    • Organize projects into portfolios or programs.
    • Share the portfolio or program with the specific users, ensuring they only see the projects within those portfolios or programs[2].
  4. Remove Inherited Permissions:
    • Check for any inherited permissions that might be giving users broader access than intended.
    • Adjust these settings at the project or portfolio level to ensure only the desired users have access[2].
  5. Test User Access:
    • Log in as the user or use an admin view to verify that the user can only see the intended projects.
    • Make any necessary adjustments based on what you observe[1].

Avatar

Level 6

Yup. 

I suggest a group because then you can add/remove users from that group without having to remember the person(s) that should get the access. 

 

AccessLevels is a good call to dial in what exactly the person should be able to do - once the can access an object.

 

Finally, you may want to use a layout template to hide certain menus etc. 

Avatar

Level 1

I need this external company to have visibility on only specific internal projects. Is there a way to lock down a company to only specific "granted" projects?

Avatar

Level 6

Only by way of sharing those specific projects with that company.

Avatar

Level 1

Thanks Sven-iX. That sounds obvious, and exactly what i want to do. Where in the UI do i share a project, and how do i select the company name?

Avatar

Level 1

Thanks for all the helpful advise. I'm almost there. The unwanted portfolios and programs are no longer showing up for my test account. So that's good. However, when I go to the projects section I have visibility to 3944 projects (that i shouldn't see). I'm not sure why these are showing up. I checked a handful and they should only be visible to those who were invited. Logged in as a test user, I'm able to open these projects and browse timelines, documents, etc.

 

Maybe there's some sort of inherited permission that's making them populate? Or maybe I need to create a custom access level for these users?

Avatar

Correct answer by
Level 6

Hi @JakeYL26 

The reason a standard user can see everything is when they are in the same group and/or company as the projects. 

Like I said, I would create a group just for these external people. Then share those few projects only with that group. 

 

Avatar

Level 1

Thanks for the excellent support. I had granted that user access to a group i shouldn't have granted them access to.