SAP Solution Manager - authorizations

[former_member212731]

Hello!

Is there any functionality in Solution Manager for

1. Adjust user rights per project

- example:

• User1 has access in Project1 but no access to Project2 in same Solution Manager client

2. Adjust user rights per part of project structure

- example:

• User1 has access in Business scenario1 of Project1 but no access to Business scenario2 of Project1

3. Adjust user rights per document belonging into project

- example:

• User1 has access in Document1 of Process step1 of Project1 but no access to Document2 of Process step1 of Project1

[Former Member · Accepted solution]

Hello Kuki,

Please go through the following link to know about Authorizations for Change Request Management of Solution Manager.

http://help.sap.com/saphelp_sm32/helpdata/en/35/613542e454b104e10000000a1550b0/frameset.htm

Hope it is helpful.

Cheers,

Satish.

[former_member212731 · Accepted solution]

Thanks for the tip!

What I was searching for was not in Change Request Management but more like Project Administration. It was found from the Solution Manager library help in Assign Authorization for Documents:

"You can control the access rights to documents in the project by assigning authorizations for groups of documents, e.g. you can specify that only the project management can change documentation templates. The system saves Solution Manager project documents in Knowledge Warehouse folders. Access to Knowledge Warehouse folders is controlled by the authorization object S_IWB, which is in the roles SAP_SOL_KW_ALL and SAP_SOL_KW_DIS, and in the Solution Manager Composite Rolles.

You have role (transaction PFCG) and user maintenance authorization..."

So, thanks for the guidance .

[Former Member]

1. yes it's possible. Your Security person should be able to easily do this. Your best bet is to make a small security role that just pertains to the authorization by project name. That way it is easy to assign to whomever. If you are the security person, just do a quick trace of the task opening a project in SOLAR01, the field is easy to spot.

2. from what I know you can't limit the read ability, but you can limit the ability of people to adjust the structure by checking the box "restrict changes to nodes in project to assigned team memebers" in the project administration. Then only people assigned on the Administration tab can modify the node. Other team members can only open the tab in display mode. You need change authorization for the tab (authorization object AI_SA_TAB), for the assigned team members to be able to work in the tab.

regards,

Jason