Symptom
-
You maintained a restriction on the service organization for the business role Project Manager - Professional Services (SAP_BR_PROJECT_MANAGER_PROF) in S4HC. However, you've noticed that this restriction isn't effective in the RM apps.
-
You tried to apply the restriction on the business role Resource Manager - Projects (SAP_BR_RESOURCE_MANAGER_PRJ) in S4HC, but found that there is no 'Restricted' option available for the Write and Read access categories.
Environment
SAP Project and Resource Management
Cause
The S4HC business roles are designed solely to provide resource management application tiles in the Fiori launchpad of S4HC. They do not offer the capability to directly implement restrictions for RM.
Resolution
To apply restrictions in RM, you'll need to utilize attributes such as ProcessingResourceOrganization or RequestedResourceOrganization within BTP for the Requester/ResourceManager Role.
Note: The Resource Organization ID in RM differs from the Service Organization ID in S4HC, which can be derived from the "Manage Resource Organization" app in RM.
Refer to KBA 3646539 for how to create a new role with attributes for Resource Management.
Keywords
RM, restriction, S4hc, Business role, manage resource requests, sap s/4hana public cloud, sprm, business role restrictions, business role, service organization, cost center, btp cockpit, resource organization id, authorization configuration, access control, sap hana cloud, service org, resource org, BTP, role collection , KBA , PPM-CLD-RES , Resource Management , Bug Filed
SAP Knowledge Base Article - Public