In SAP S/4HANA PP/DS, user access to specific resources is controlled through the standard authorization concept. Resources can be organized into a "resource group" in the resource master data. This resource group can then be specified in the authorization object CAPORES (APO-Resource). By creating roles with this authorization object and assigning specific resource group values, you can restrict a production planner's ability to view, change, or execute planning functions to only those resources belonging to their assigned group. This is the standard and intended method for achieving such a requirement.

B. Use a planning group.

A planning group is used to group location products for the production planning run (MRP Live), not for managing user authorizations for resources.

C. Use a propagation range.

A propagation range defines the scope of resources and locations to be considered by the planning engine during a planning run, not to restrict a user's access rights.

D. Use a planning area.

A planning area is a core data structure in Demand Planning or Supply Network Planning, not the mechanism for controlling user access to specific resources in PP/DS.

1. SAP S/4HANA 2023 Help Portal

"Authorizations for Resources": This official documentation details the authorization object CAPORES. It explicitly lists the authorization field APORESGRP (Resource Group)

which allows for authorization checks based on the resource group assigned to a resource. This confirms that using a resource group is the designed method for this type of access control. (Path: SAP Help Portal -> SAP S/4HANA 2023 -> Product Assistance -> Enterprise Business Applications -> Manufacturing -> Production Planning and Detailed Scheduling (PP/DS) -> Security -> Authorization Concept in PP/DS -> Authorizations for Master Data -> Authorizations for Resources).

2. Liebich

M.

et al. (2022). Production Planning with SAP S/4HANA. SAP Press. In Chapter 4

Section 4.2.1

"Resource Master Data

" the concept of a resource group is introduced as a freely definable attribute for grouping resources. In Chapter 16

on system configuration

the use of authorization objects to control user activities is discussed

which leverages master data attributes like the resource group for segregation of duties.