Restricting T-code Solution_Manager

[Former Member]

Hi Gurus,

We recently upgraded our solution manager from 3.2 to 4.0, and this

system is connected to many oher tSAP Systems.

We would like know the below

1. Can we restrict users from creating/displaying solutions for the

systems which they are not authorized to?

For Eg: we are having systems A,B,C, D and would like give access for

user "X" to create and display solutions for only to the system "A",

which means when user "X" run the T-code SOLUTION_MANAGER, he will be

able to create and display solutions for only to the system "A".

how we can achieve this?

Thanks in advance!

Kind Regards

Praveen Kumar

[Former Member]

Hi Gurus,

I have got the solution,

The authorization object is D_SOL_VSBL, mention the activity and DSWP general object ID in this auth object, which will enable to control the access to solutions.

Thanks

Kind Regards

Praveen Kumar

[Former Member]

Praveen,

This is possible.

Goto tcode

DSWP transaction and from the menu

GOTO->Technical information

There is a SOLUTION ID for each solution

You can assign this to ur user X for the specific solution.

Pls assign pts and close the thread.

[Former Member]

Hi Prakhar,

Apologize this is not clear enough to me,

I ran the T-code DSWP but I canu2019t assign any user though the technical information tab. could you please advise me.

And more over is there any option from Role level?

Thanks

Kind Regards

Praveen Kumar

[Former Member]

Dear Praveen,

DSWP is for solutions

All the solution which you have created will appear here so choose the

SOLUTION ID for your ...solution and then goto su01 and choose ur user.

Now you can create a new role with this solution ID having change and display authorization.

Take the help of BASIS person.

Pls assign pts and close the thread.

[Former Member]

Praveen,

Every Solution specified within TA DSWP has a unique identifier number.

This number can be used to create a new authorization role in TA PFCG with an authorization object which is called S_PROJECT (or similar).

Once this new role is created it can be assigned to an user.

A security and/or basis person should be able to help you further on this.

Let me know if you have more questions.

Best regards,

Roel

[Former Member]

Not sure if it's possible to create an authorization role on system level.

You can check if there is an authorization object which checks the IBASE component.

What is possible is that you create authorization roles for each different solution in TA SOLUTION_MANAGER. Of course the solution needs to be defined upfront.

Roel