How To Fix CNACL_MSG_CL021 - You do not have ACL authorization for activity &1 &2

SAP Error Message - Details

• Message type: E = Error

• Message class: CNACL_MSG_CL - Message class for ACL FOR PS

• Message number: 021

• Message text: You do not have ACL authorization for activity &1 &2

What causes this issue?

You do not have ADMIN ACL rights over this object.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message CNACL_MSG_CL021 - You do not have ACL authorization for activity &1 &2 ?

  The SAP error message CNACL_MSG_CL021 indicates that a user does not have the necessary Authorization Control List (ACL) authorization for a specific activity in the system. This error typically arises in the context of project management or controlling modules, where certain activities require specific authorizations to be performed.
  Cause:
  The error occurs when:
  
  The user is trying to perform an action (activity) for which they do not have the required authorization.
  The authorization object related to the activity is not assigned to the user's role or profile.
  The activity being attempted is restricted by the system due to security settings.
  
  Solution:
  To resolve this error, you can take the following steps:
  
  
  Check User Authorizations:
  
  Use transaction code SU53 immediately after the error occurs. This will show you the last authorization check and help identify which specific authorization is missing.
  Review the authorization logs to see which authorization object is causing the issue.
  
  
  
  Review Roles and Profiles:
  
  Check the roles assigned to the user in transaction SU01 (User Maintenance).
  Ensure that the necessary roles include the required authorizations for the activity in question.
  
  
  
  Modify Roles:
  
  If the required authorization is missing, you may need to modify the user's roles or create a new role that includes the necessary authorizations.
  Use transaction PFCG (Role Maintenance) to adjust the roles and add the required authorization objects.
  
  
  
  Consult with Security Team:
  
  If you do not have the necessary permissions to change roles or authorizations, contact your SAP security team or administrator to request the required access.
  
  
  
  Testing:
  
  After making changes to the roles or authorizations, have the user log out and log back in to ensure that the changes take effect.
  Test the activity again to confirm that the error has been resolved.
  
  
  
  Related Information:
  
  Authorization Objects: Familiarize yourself with the relevant authorization objects that control access to specific activities in SAP. Common objects include C_TPLP_01 for project management and C_PROJ_01 for project-related activities.
  Documentation: Refer to SAP documentation or your organization's internal guidelines for managing user roles and authorizations.
  Transaction Codes: 
  
  SU01: User Maintenance
  PFCG: Role Maintenance
  SU53: Authorization Check Analysis
  
  
  
  By following these steps, you should be able to identify and resolve the authorization issue related to the CNACL_MSG_CL021 error message.