URGENT: Project level authorization

Dear All,
In Solman, Can we assign our users at project level only, so that they can see and change only the project assigned to them. They should not be allowed to view and see any other project.
If yes then how?
and is there any way to implement further filters like uses according to project phase or at task level?
Looking forward for a quick repsponse. of anyone of you has relavent document then please mail it to me [email protected]
Thanks in advance
Hemant K

Hi Hemant,
   Yah..U can do.
In T.code PFCG, under authorization object S_PROJECT, assign your project in "Project name" field.
Then go to t.code SU01, enter the user ID to whom u want to restrict the project. Then select "Personalisation" tab, in this u can find entry "SOLAR_SETTINGS" under personalisation object key, doule click there...new window appears, in this window , in the field.."Initial project" assign your project.
This may help u.
Regadrs
Senthil

Similar Messages

  • Project Specific Authorization

    Hi Everyone,
    My requirement is to implement Project specific Authorization means I want to restrict users to access other projects running in the same plant..Suppose there are four projects A, B, C and D..now there will be four project managers and four teams as well. Now our Client wants that the member of one project could not access the things of other projects...now SAP has given standards only for transaction authorization one can be restricted to access a particular transac but how to restricts at project level.....suppose project manager of project A having a access of CJ2B now he can open any  of the project so we need to configure the users in such a way that he can only able to open his project..the moment he tries to open some other project to which he not assigned the system should give him error message like " you are not authorized to access this project."
    hope I am able to clarify the requirement please give your feedback and solution for this...
    thanks in advance

    same as Restrict project's access on PS
    cheers
    thorsten

  • 0PLANT Level Authorizations

    Hi Guru's,
           I have a query regarding Object level Authorizations i.e i have created one query with variable Plant now i need to rollout to single query to all plants and respective person only can able to view their plant values....so i need to create 0plant as Auth relavent for that i use RSSM t.code but there i am not able to see the 0plant object .....please for Object level authorizations how can i proceed ...
    Regards
    Jagadeesh.M

    Hi Anil,
        I did following steps please go through it once and suggest me
    1. Change 0Plant to Auth Relavent in Object.
    2. RSSM tcode create a Z_plant and select 0plant and infocube and query objects and save it.
    3. then back to rssm and check the infoprovider
    4. create a Auth variable in bex
    5.assign that query to user role and in that role select the Auth object and mention the plant and cube and query name.
    6.generaet the roles.
    then execute using that user but it can executing for all plants but i need to restrict for single.
    Please treat it as urgent and give me if any missing steps...
    thanque anil...
    Reagrds
    Jagadeesh.m

  • S_ALR_87013532 report -plan cost not rolling upto the WBS/Project level

    Dear All,
    Plan cost from production orders is not rolling up to the WBS/Project level in S_ALR_87013532 ( Plan/Actual Variance report).
    Where as plan cost from network is properly rolling up to the WBS/Project level in the above report. 
    Please suggest what could be the reason for this issue. Is any configuration needs to be done for this.
    Thanks & Regards,
    Vishal

    Dear sir,
    Thanks for the reply & sorry for late response from my side.
    OPSV settings are already maintained in our system.
    Some how i realized  later that cost are actaully getting rolled to the WBS level, but we have observed one more discrepancy.
    Example -
    Production order "X" value - 100 (  as seen through co03)
    Production order "X"value- 40 ( as seen through report s_alr_87013532).
    We found that  in report  s_alr_87013532 , although my total  producton order value of 100 is represented at the WBS /Project level, but at the production order level , it is showing value of 40. 
    On further analysis we found that for production order X
    Materail cost- 60
    Labour cost-40
    The material cost of 60  is not getting fetched against production order "X" in report " S_ALR_87013532".
    There are very few cases , where such discrepancy is seen.
    Kindly suggest.
    Regards,
    Vishal

  • Resource Management of Shared Resource Pool at the Project Level

    I am having difficulty figuring out how to implement our resource management process. Currently we have one "Resource Pool" project that has all the shared resources. It is connected to both a "master portfolio" plan that has some task
    detail in it and other individual project plans that have their own WBS (for larger projects).
    The difficulty arises because we want to do resource allocation at a project level, but the resource usage view shows the WBS/task level detail.  I've tried grouping the resources assignments by resource and then project, but since everything is
    in the "Resource Pool" project, they all group under that project.  I've tried adding the "Project" field and it does show as the source project, but it doesn't group on that field, but rather the "Resource Pool" project
    only.
    How can I see resource allocation/usage at just the project level so our managers can do planning, negotiation, and re-allocation on a periodic basis with one simple view?
    My best current idea is to disconnect all the sub-tasks from the sharer, eliminate the WBS below the project level in the master plan and attach resources at that single line project in that master plan.  Then, we would have to manually alter the "Max"
    available time in the individual sub-plans as we altered allocations.  That essentially disconnects individual plans from both the master plan and the shared resource pool.
    Is there a better way?

    Mark,
    Yeah, I think there is a better way. Having a linked structure the contains both a pool file and a dynamic master is tenuous enough (i.e. prone to corruption), but if you start disconnecting from the pool and and messing with the master, you will most certainly
    invite trouble.
    But here is an approach that might work. I tested it on a sample pool file with two sharer files and I think it might give you what you want.
    1. First, either manually copy or use VBA to copy the contents of the Project field to a custom text field in each sharer file
    2. In the pool file display the Resource Usage view
    3. Create a group that first groups on the Resource Name and then on the Text1 field, and select "group assignments, not resource"
    4. Change the Text1 group field to be "assignment"
    Does that give you what you want?
    To help visualize, here is a screenshot of my test file. After grouping I applied a filter to Text1 with the option to also show summary tasks:
    John

  • How to define a unique project level custom field in project server 2010?

    Hi every one;
    is it possible to define a unique project level custom field?
    our client wants to have a unique custom field( project code) which doesn't allow users to save and publish projects with the same value.
    for example if user A define a project and set "project code = 1" if user B define another project and wants to save "project code =1" for it, the server doesn't allow him to save this value and he has to change value for example to 2
    thanks for any help

    First of all you need to have Project server development environment also for coding visual studio hands on is required.
    To start with PSI (Project Server interface)you need to have Development Environment of Project Server 2010.
    you can get the overview from http://msdn.microsoft.com/en-us/library/office/ms457477(v=office.14).asp
    You
    can get the information about SDK: Download SDK.
    http://msdn.microsoft.com/en-us/library/office/ms512767(v=office.14).aspx
    Below mentioned link is having code and reuqired information about :
    Generate Unique ID for Project using a webpart
     http://epmxperts.wordpress.com/2012/05/21/generate-unique-id-for-project-using-a-webpart/

  • Direct database data access without data level authorization check

    Hello,
    My customer raised issue about direct database data access. Due to the customeru2019s strong security policy, it shouldnu2019t be allowed.
    To prevent this kind of illegal data access, customer ask me to list up all the possibilities to display data without data level authorization check.
    The things in my mind are
    SQL Command Editor (for Oracle based system) : ORASPACE, DB02, ST04
    Query Based : SQVI (Quick Viewer), SQ01/SQ02/SQ03 (SAP Query)
    Data Browser : SE11, SE12, SE16, SE16N, SE17
    Table Maintenance : SM30
    Function Module : RFC_READ_TABLE
    Function Module : DB_EXECUTE_SQL (DML)
    Anyone knows anything which is not listed above?
    Thanks

    HI,
        Generally in production user's should not be given all these authorizations.
    Ram.

  • How to find Project Level Text Custom Fields in Project Server 2010 databases?

    Hello,
    We are using Project Server 2010 SP2 in SEM Mode. We are planning to use Project Level Local Custom fields and we want to pull them in reports using SSRS, so I am wondering which table these "Local" (non enterprise) custom fields are stored in
    database.
    Any suggestions?
    Regards,
    Kishore Dodda
    Kishore Dodda

    Hi,
    Please see this
    similar thread about reading local custom fields though the PSI.
    Hope this helps,
    Guillaume Rouyre, MBA, MVP, P-Seller |

  • Task level data at the Project level?

    Hi all,
        I have a custom date field in Project 2010 that if certain text is displayed in the task name, this field is populated by the task finish date.
    Essentially this task is connected within Project Server to an external 'deliverable'.
    I need to grab this date and have it at the Project  Information level - is this possible?
    Even using Enterprise flags, I still could not obtain the task date at a Project level.
    Any thoughts much appreciated.
    -CL

    Rob,
    Maybe my latest post on this need may be of interest. How to show Implementation Milestone Dates in Project Center. #msproject
    http://aboutmsproject.com/how-to-show-implementation-milestone-dates-in-project-center/  I'm able to use formulas to bring task data up to the Project level.
    Treb Gatte, Project MVP |
    http://AboutMSProject.com |
    @tumbleroad

  • Problem with "View project-level information" permission when accessing build definition in Visual Studio Online

    Hi, 
    from some time all our team members are experiancing problems when acsessing list of builds on Visual Studio Online or when trying to edit build definition in Visual Studio. Error message suggests problem with missing View project-level information permission:
    "TF50309: The following account does not have sufficient permissions to complete the operation: XXXXXXXX. The following permissions are needed to perform this operation: View project-level information."
    I've checked permissions of my User account and Group. "View project-level information" is set to Allow on both levels. We didn't make any changes in security configuration recently. Does anyone faced similar problem?
    Short term solution was to add all users, to Project Collection Administrators Group, but it is not what we would like to live with.

    It seems that the problem was fixed and Project Collection Administrators permissions are no longer required. Great :-)

  • Organization level authorization restrictions

    Hello All,
    Please can you let me know
    1) f it is possible to org level authorization restrictions for CLM documents and master data without any development?
    - E.g. while creating suppliers the user should only be able to create for the Company assigned to the user id?
    2) What is the significance of the company and organization unit fields in the user account information page?
    Regards,
    Subramaniam Iyer

    Hi ,
    Could you share about your solution ? I think I have face the same problem as yours.

  • Tab Level Authorization

    One of My application I plan to give the tab level authorization. I used two level tabs.
    for example, the sub tabs are like aa,bb,cc. I need to write the authorization schemes and I need to get the tab name dynamically here to show this tab for only few users. This scheme will be seleted for all the tabs.
    When I try with :app_tab_id, :parent_tab_cells bind variables, it's not working properly. Any one can suggest me how can I refer the tabname or tab label (like for page we are using app_page_id)
    Advance thanks for your help
    Balaji

    Balaji:
    I don't understand why you need to know the current-tab etc.
    Authorizations can be applied at the tab level declaratively (in the tab's defintion).
    So, your authorization should simply be something like 'return true for user1, user2, user3...' and this authorization should be specified as the 'Authorization' for the tab's authorization.
    Varad

  • How we can skip project level schema validation in BPEL

    How we can skip project level schema validation in BPEL................... Because i have a requirement to send email with attachment. to send attachment i have to skip schema validation from EM console. so it will skip schema validation for all deployed application.it creates problem for other project so i want to do that thing at project level ....

    Hi
    It can be done by going opening the composite.xml in jdeveloper and than opening the properties window of the composite.There you will see a property Validate schema.Set that to no to overwrite the property set at the sever level.
    The following property gets added in the composite.xml
    <property name="validateSchema" type="xs:boolean" many="false">false</property>
    Redeploy the composite and check.
    Hope this helps!!!

  • Object level authorization for SLT Configuration schema in HANA DB

    Hi All,
    We have connected SLT with HANA DB (& ECC as source system).
    Now for certain users we wanted to restrict the access for certain tables ( tables owned by SLT Schema, i.e schema created in HANA DB with the configuration name provided in the SLT configuration).
    With the SYSTEM user object level authorization's of another schema is not possible hence , an error is thrown when we are trying to provide/control the access of single table for a user.
    Is it ok that we generate a password for SLT schema and try login with schema owner. Is it the best practice or Is there any other way around.
    Regards,
    Kumar

    Hi Santosh,
    You can find more info about SLT Roles and Authorization from below security guide.
    http://help.sap.com/hana/SAP_HANA_Security_Guide_Trigger_Based_Replication_SLT_en.pdf
    Regards,
    V Srinivasan

  • "Low-level" authorizations for accessing BW reports - add users to role

    Using the advice in Topic "Low-level" authorizations for accessing BW reports, I have been able to publish a query to a role that has 3 test users and each user gets the same query but with different data, as determined in the tables.
    Is there a way to look up the users and e-mail addresses from a table and associate them to the role? We have several hundred e-mail recipients that will not need BW access, but only need an e-mail with a static report that contains data on their own territories.

    Hi!
    i think programatically it might be complex. You got to maintain a seperate variant of report per user and use this variant to send mail. that means you need to maintain a variant and a Broadcast setting per user. once maintained you can use it any number of times the values will be recalculated everytime.
    with regards
    ashwin
    <i>PS n: Assigning point to the helpful answers is the way of saying thanks in SDN.  you can assign points by clicking on the appropriate radio button displayed next to the answers for your question. yellow for 2, green for 6 points(2)and blue for 10 points and to close the question and marked as problem solved. closing the threads which has a solution will help the members to deal with open issues with out wasting time on problems which has a solution and also to the people who encounter the same porblem in future. This is just to give you information as you are a new user.</i>

Maybe you are looking for

  • Why can't i see my midi in the piano roll of logic

    I can create a track in a midi region, yet when I select the midi region the data does not appear in the piano roll! It did uintil I deleted a few tracks and now only 1 midi region appears and I cannot select another. Is this a bug or am I doing some

  • Lost an e-mail I was working on. Where can I find it?

    Tried to save a mail and the mail disappeared. Nowhere to be found in any of the directories of Thunderbird. I definitely didn't delete it!

  • Can't establish a secure connection

    keep getting this when i try to connect to variour sites, including apples own discussion groups. can't access gmail either. any ideas on how to overcome this please. (i've just started to use safari in mountain lion to see if i can get used to it. i

  • 1-2 Second Audio Delay after installing windows 7

    I installed windows 7 on monday but whenever i do anything that has audio it is always delayed by -2 seconds. For example when playing Dragon Age Origins an npc's mouth moves then a second latter the audio finally comes. When listening to music it is

  • Purchase Requestion  for Third Party Sales Order

    Hello Team I want the system to create Purchase Requisition automatically and some times Manually (Possible if both Option are available) for the Sales Order which belongs to Third Party. How to achieve this? Thanks Nick