DSWP / SOLUTION_MANAGER - Who Should Have Access?

[Former Member]

Hello,

Our project management staff is asking for change access to DSWP/Solution_Manager. We are very uncomfortable in granting access to those transactions to people outside of the basis team because many of the features within are typically the responsibility of basis - landscapes, monitoring, system administration, updating system info to SAP Marketplace, email transmission, rfc connections, sdccn info, global settings etc.

Our security team has determined that DSWP/Solution_Manager has just 3 ways to be secured: 1) You don't get it, 2) You get read only, 3) You get full update. There apparently is no way to give access to only specific components of DSWP/Solution_Manager (like just Business Process Monitoring for example).

Questions:

1) Who typically should have access to DSWP in your implementations?

2) Do you know of any way to divy up access to DSWP so that it's not "all or nothing"?

Thank you.

[volker_vongloeden]

Hello,

I am not sure if you are aware that with ST400 SP15 an alternative UI available in the SAP Solution Manager - the role-based Workcenters.

There you can assign specific roles for specific functionalities, e.g. SAP_SMWORK_BPM for Business Process Monitoring.

Best Regards

Volker

[Former Member]

I was not aware of that, and that is absolutely great information. Thank you very much for it.

[Former Member]

Hello John,

Project management team generally will have access for

solar01 business blueprint

solar02 configuration

solar_project_admin proj creation

STWB_2 Testing etc

not

dswp basis transaction.

Because in any implementation they mainly have to upload doc or do test planning bus blueprint realization etc which is available with above tcodes.

DSWP is mainly a basis tcode....which should not be given proj mgmt staff.

Secondly for service desk they wil use crm_dno_monitor

You can give access for mentioned tcode which will be useful for them.

Please reward points.