If you want to assign specific permissions based on a user's role in a project team, you can create a new permission group. Permission groups contain a set of permissions that allow the user to perform specific actions or give access to specific reports and project data. Some built-in group permissions contain specific user roles. You must assign users to default groups prior to assigning them to project-related groups. Default groups—through the range of their permissions—indicate users' roles.

For details about group hierarchy see Organizing Permission Groups.

1. Choose Groups> Add New.
2. Enter a name and information about the group in the appropriate fields.
   
   If DTP is configured to allow group synchronization, then the Synchronize automatically option will be available. Enable this option during group creation to synchronize this group immediately after creation. See Membership Search Configuration, for additional information.
3. Click Save to create the group and enable the Permissions & Hierarchy and Users tabs.
4. Add permissions to the group (see Configuring Permission Groups and set the hierarchy (see Organizing Permission Groups).
5. Click Save to finish configuring the group.

Automatic Synchronization

You can set groups that have been created manually to automatically synchronize with an equivalent LDAP group if the Use Member Attribute option is enabled (see Membership Search Configuration). During automatic synchronization, DTP will:

• Periodically update the list of users assigned to this group based on the members of the equivalent LDAP group.
• Automatically create users if they do not already exist.
• Immediately synchronize groups after changes are saved if the group is new or if automatic synchronization was disabled.

If DTP is configured to use multiple LDAP servers, group synchronization will be based on the first matching LDAP group available.