1. When user receive an authorization error such as the below dialog box, request the user to enter /nSU56 or /nSU53 to display more details on the authrization issue.
2. In Su56, expend the menu and you will see the object value and transaction type. In this scenario we know user do not have authorization on object value “0111” and transaction “V”
3. We now know that user is not authorized for object “C_PROJ_TCD”, value “0111” and type “V”.
4. Use T-Code S_BCE_68001425 to search for the authorization object. In this scenario we enter the username and authorization object and it will display the role.
5. Below is the results. Now we have to find the correct role which we need to give authorization too. If you are not sure, consult with your consultant.
6. Open /nPFCG to edit the role.
7. Enter the role name.
8. Click on Authorization tab and click “display authorization data”
9. Expend the menu and locate the object or use the “FIND” button to search for object “C_PROJ_TCD”
10. Below are the authorization you need to provide accordingly.
11. In this case, we select “0111 which is Basic WBS dates”
12. Save
13. Click on generate profile button
14. Now do user comparison
15. Ask user to re-login and try the transaction again.
Addtional Info
If you know the Authorization object and would like to search which transaction is using it, you can open this transaction from SAP menu.
SAP How to Step by Step Guide with Screen Shot 