Hi Nick, One option is to use a Layout Template to restrict what they immediately have access to see. If a user doesn't have a layout template and they are looking at the Projects area, they have the ability to access the Portfolios tab. This is where users will get into trouble because it contains the "+ New Portfolio" button in both the Portfolios I Own and the All Portfolios tabs. However, they will not see that button if you remove their ability to see the Portfolios tab in the Global Projects Area using a custom Layout Template. I would create a new layout (or modify an existing one) where you hide the Portfolios tab in the Projects area. If your users still need to see the portfolios or the programs, you can create a portfolios or programs report and attach it to a dashboard, then add it to the Projects area in the new or modified layout template. In order for the user to add a new program, they'd have to go to one of the shared portfolios, and the portfolios report does not provide the ability to add a new portfolio. Here is an image of how it looks to the user:
Dan Perkins Rego Consulting