How to make sure Create or Edit configurations is disabled for Test and production system

[Expert]

How to make sure Create or Edit configurations is disabled for Test and production system in S4 HANA public cloud.

We have to make sure that test and production systems are non editable for configurations. Changes will be moved only through transports.

Is there any app to check and set this? Please advice.

[Expert · Accepted solution]

ou will have to check the business user/project team member with the business roles SAP_BR_BPC_EXPERT and either take off this business role or restrict it as per the restrictions available to Write, Read and Help for the desired activity.