need to block inter company vendor invoice posting for some users..eg- FB60

[Former Member]

Hi All,

Requirement is to block intercompany vendor invoice posting for certain users.

During intercompany vendor invoice posting. These invoice postings need to be restricted for some users and some need to be given authorisation.

However, checked the possibility of creating role or profile for authorisation in SU02, PFCG etc. But it will block other users posting FB60 permanently. is there any other way to block for some and unblock for some users ?

[João_FI_FIN-CS]

Pramod,

Now I can't understand the question. Please, be more clear. Remember that USNAM is the name of technical field for the user.

JPA

[Former Member]

Joao,

I need to create a set (GS01) that shows table, Field name & from Value.

this set will be defined in GGB0 under check..

now, in this set, I need to define a table and field name ( eg-BKPF & USNAM) and in value field - User ID .   These USer id will be given authorisation for intercompany posting..

now which table & fieldname need to be given for user authorisation. BKPF & USNAM, BKPF-SNAM & SYST-uname is not helping..

[João_FI_FIN-CS]

Hi Pramod,

Yes, you can. You can create a validation rule by GGB0 tcode, including these users in data set that can post the invoice.

JPA

[Former Member]

Hi Joao,

yes..that is a possible answer..

while creating set..for authorised users, I am trying to create a data set (T.code - GS01), so those user name mentioned in the set can be given authorisation. But I tried giving table BKPF and field name as USNAM.

However, its not accepting. can u pls mention the appropriate table and the field name that need to be mentioned in the set. So these set can be linked to GGB0.

Pls note- I have created other set that map company code-Vendor etc..

[João_FI_FIN-CS]

Hi Pramod,

What step is not accepting? Dataset creation or insert dataset in validation rule?

Please, could you send a screen shot error?

JPA

[Former Member]

Hi JPA, Thanks for the reply..

data set already been created  and no errors while inserting validation rule..

in pre-requisite, I have linked inter company with vendors and in 'check' linked the authorised users

by giving their user name..now it is working fine- like authorised users are able to post intercompany invoice using fb60 and all others are restricted by using this intercompany posting.

Now the issue is, I wanted to create a set . In that set, all those users who can be given  authorisation

need to be added in the set. and that set name, need to be inserted in the validation rule under 'check'. ALthough, I have created a set and inserted in the validation rule, but still the users mentioned in the set are not given authorisation.

That is mainly because, I am unable to find the appropriate table and field name given in the set.

as of now I have given BKPF & USNAM in the set. and mentioned one user name (for authorisation)however, that user is not able to post. because table is not mapped properly in set..

Therefore, pleas let me know the appropriate table name & field name for providing it in the set.

Pls note- these set in future will help to include N number of users to provide authorisation and even block them by deleting their user name..else, giving user name in check would be enough to provide autho:..

[cgilberg]

Hello Pramod,

I believe that

1. using authorisation object F_LFA1_BEK in the vendor master,
2. updating/creating a new role with the same value,
3. and making sure that no other role has an asterisk in it

is indeed the best solution.

Best Regards,

Christoph