How to Control Authorization in SAP PS

Updated May 18, 2018

Pre-requisite: Level 1 WBS Element = Project Controller Level 2 WBS Element = Plant/Unit Controller Client need that After released and approved the date for Plant/units from plant controller & Project controller, plant controller should be restricted from updating/changing any approved information like the date of plant/units level and only project controller should have this authority.

Thanks in Advance.

You can view more tutorials about SAP PS

Comments

26 Mar 2014 9:10 am amit butola Best Answer

Dear All for better understand,

Is there any standard way or enhancement available to control authorization
for users with certain status for WBS Element i.e. for example

Pre-requisite:

There is only 2 level of project i.e.

Lev_ WBSE_______Description

1___ 7-14.E_______summary outage controller

2___ 7-14.E.2310__ Plant/unit # 2310

2___ 7-14.E.2310__ Plant/unit # 2220

Project Controller (authorization role assigned "Z_PS_OP7_OTGCON_C") have
all project level authorization

Plant/Unit Controller (authorization role assigned
"Z_PS_OP7_PLNTOTG_C_2310") have only level 2 authorization with enhancement
that we did in system by Z table.

User ID_ Plant #

123345_ 2310

122455_ 2220

Issue:

After System Status released and User Status approved the WBS basic date
for Plant/Units should be restricted from updating/changing by Plant/Unit
Controller level and only project controller should have this authority.

Solution required:

Can anyone tell how to control this scenario either by standard or
enhancement available to control authorization?

26 Mar 2014 9:10 am Romil Tripathi

Dear all

In ECC 6.4 version , Access control list (ACL) will help you WBS &
Network wise authorization control based on specific user SAP ID wise or
user group wise...in project builder itself (Cj20n) ,

26 Mar 2014 9:11 am Chandan Singh Parihar

Hello,

If I understand your requirement right - The requirement is to have access
control on level two WBS after a certain status is set. By Standard SAP
does not have statuses as authorisation objects so you cannot control
access by Statuses. But you can use an User exit to develop a code which
will check which user can have change rights based on statuses and throw
an error message while saving which will prevent the unauthorised user to
change. You can create a User set, where in you create the list of
authorised users (for future proofing), which the program can use as a
check for the list of authorised persons to make change.