Authorization by Project

[Former Member]

Hello Everyone,

Currently we have Solution Manager implemented in our organization.

We are hoping to expand the our usage. We are looking to find out how authorization can be controlled on projects.

Explanation of the request: User 1 is assigned to Project A, when the authorization is given to this user... the authorization for user 1 is extended to all other projects that are setup in Solution Manager system. We would like to control this. We do not want User1 to be able to view other projects, only allow authorization to Project A.

Within Solar_Project_Admin, there is a Project Team Member tab under each project... Can this be used to control the access?

If so please explain...

Any help regarding this would be apprecaited.

Thanks

[Former Member]

Hope this [guide|https://websmp106.sap-ag.de/~sapidb/011000358700000370562009E/SM_SECURITY_SPS23.pdf] helps :

[khalil_serrhini]

Hello Lahari,

By assigning members to your project in TR: SOLAR_PROJECT_ADMIN; that will allow you to see them in matchcodes in other transactions as

- rmmain: roadmaps

- solar01 - solar 02: project bluprint & project configuration !

If you want to restrict usage of transaction solar_project_admin to specific projects for your users you will have to use the authorization objects:

S_PROJ_GEN (general project functions, such as cross-system maintenance (SYST))

S_PROJECT (project work)

S_PROJECTS (project administration)

for s_project u have following activities:

02 Change

03 Display

06 Delete

23 Maintain

71 Analyze

76 Enter

78 Assign

A3 Change status

In each of those authorization objects you have fieldname: PROJECT_ID . THIS IS WHERE YOU LL HAVE TO SET THE RIGHT PROJECT.

Transaction PFCG wiill allow you creating the correct roles now that you know the autorization objects.

You might need an authorization expert helping you though

Regards

Khalil Serrhini