Access Control List

PDF download from SAP Help Portal:

http://help.sap.com/erp2005_ehp_04/helpdata/en/6f/2e2eba1d0e483a8737f6802f2891b7/content.htm
Created on September 14, 2014

The documentation may have changed since you downloaded the PDF. You can always find the latest information on SAP Help Portal.

Note
This PDF document contains the selected topic and its subtopics (max. 150) in the selected structure. Subtopics from other structures are not included.

2014 SAP SE or an SAP affiliate company. All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose
without the express permission of SAP SE. The information contained herein may be changed without prior notice. Some software products marketed by SAP SE
and its distributors contain proprietary software components of other software vendors. National product specifications may vary. These materials are provided by
SAP SE and its affiliated companies ("SAP Group") for informational purposes only, without representation or warranty of any kind, and SAP Group shall not be
liable for errors or omissions with respect to the materials. The only warranties for SAP Group products and services are those that are set forth in the express
warranty statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional warranty. SAP and other
SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE in Germany and other
countries. Please see www.sap.com/corporate-en/legal/copyright/index.epx#trademark for additional trademark information and notices.

Table of content

PUBLIC
2014 SAP SE or an SAP affiliate company. All rights reserved.

Page 1 of 4

Table of content
1 Access Control List
1.1 Delete Access Control Lists for a Project or Network

PUBLIC
2014 SAP SE or an SAP affiliate company. All rights reserved.

Page 2 of 4

Access Control List

Use
You can use the access control list to assign authorizations for specific individual PS objects.

Prerequisites
To use this function, you must activate it in the project profile or network profile.
You edit the project profile in the Implementation Guide under
Project System Structures Operative Structures Work Breakdown Structure (WBS) Create Project Profile
You edit the network profile in the Implementation Guide under
Project System Structures Operative Structures Network Settings for Networks Maintain Network Profiles

Features
You can assign authorizations for the following PS objects:

Project
Work breakdown structure (WBS)
Network
Activity
Activity element

There are three authorization types available:

Single user
User group
Organizational group
You can assign the following authorizations:
Authorization

Allowed activity

Read

Display PS object

Write

Display PS object
Change PS object

Administration

Display PS object
Change PS object
Create PS object
Delete PS object
Create access control lists
Edit access control lists
Delete access control lists

No Authorization

No activity allowed

You can specify whether the system should pass on authorization to lower-level objects. The following sequence applies:
PS Object Subobject 1 Subobject 2
Organizational group User group Single user
The highest possible authorization always applies to a user. If a higher authorization applies for a user or PS object, the system overwrites the inherited
authorization.

Inherited and manually assigned authorizations

Example 1
User A is assigned to user group 1. User group 1 has read authorization for a PS object and user A has change authorization for the same object. The user gets
change authorization in this case.

Example 2
User A is assigned to user group 1 and organizational group 1. User group 1 has read authorization and organizational group 1 has change authorization for PS
object A. User A gets change authorization for the PS object A.

Activities
Create access control list
1. Navigate to the PS object for which you want to assign authorizations.

PUBLIC
2014 SAP SE or an SAP affiliate company. All rights reserved.

Page 3 of 4

2. Choose the ACL tab page .

3. Choose the
Insert Line pushbutton and enter the required data.
4. Save your entries.

Delete individual access control list

5. Navigate to the PS object for which you want to delete authorizations.
6. Choose the ACL tab page.
7. Select the relevant line and choose the

Delete Line pushbutton.

Delete all access control lists for a project or network

For more information, see Delete 1 Access Control Lists for a Project or Network.

Delete Access Control Lists for a Project or Network

Use
You can delete all access control lists for a project or network simultaneously.

Prerequisites
You have administration authorization for the relevant project or network.

Activities
1. In the SAP menu under Project System, choose the Delete Access Control List entry (transaction CNACLD).
2. Choose the project or network for which you want to delete the access control lists.
3. To display the access control lists, choose the Display pushbutton.
4. To delete the access control lists, choose the Delete pushbutton.

The system deletes all authorizations and the ACL tab page for a project. If you have deleted the ACL tab page for a project or network, you can no
longer display it for this project and therefore no longer create or edit access control lists. To prevent this, set the Keep Adm.ACL indicator .

PUBLIC
2014 SAP SE or an SAP affiliate company. All rights reserved.

Page 4 of 4