SAP PS - Access Control List
In SAP Project system, you use access control list to assign authorizations for specific Project system objects. The Access control list function should be activated in project profile or network profile.
Authorization can be assigned for the following PS objects −
- Project
- Work Breakdown structure
- Network
- Activity
- Activity Element
You have the following different authorization types available −
- Single User
- User group
- Organizational Group
In SAP PS system, you can assign different types of authorizations.
| Authorization |
Allowed activity |
Read |
Display PS Object |
Write |
Display PS Object
Change PS Object |
Administration |
Display PS Object
Change PS Object
Create PS Object
Delete PS Object
Create access control lists
Edit access control lists
Delete access control lists |
No Authorization |
No activity allowed |
In SAP system, highest possible authorization always applies to a user. If a higher authorization applies for a user or PS object, the system overwrites the inherited authorization.
Example
Consider user A is assigned to user group 1 that has read authorization for a PS object and the user has change authorization for PS object. The user gets change authorization in this scenario.
Creating Access Control List
To create an access control list, navigate to the PS object for which you want to assign authorizations.
Step 1 − Go to the ACL tab page. Select insert line button to enter the new data.
Step 2 − Click Save to save the entry.
Deleting Access control list for a project or a network
Step 1 − To delete access control list for a project, use T-code: CNACLD
Step 2 − In next screen, you have to select the project/network for which you want to delete the ACL.
Step 3 − To display the access control lists, click the Display button.
Step 4 − To delete the access control lists, click the Delete button.
