Need help in setting up to block a specific user from posting a certain range of GL/acc (2010000 to 2010092) in FB50. Our internal audit requested for this measure to be taken.
As you said only specific user to be blocked for the posting through FB50 (consider even F-02) what you can do is to create the validation rule as per the USER ID of the key user
Thanks for the tips. Need to get more info from you. I managed to create a validation in ggb0 in client 200, but how do i transport to client 300 to test ? it didn't give me any transport number. another thing, what is the relation between ggb0 and ob28 ? your clarification is much appreciated.
Do not think the validation is good solution for long-term. If you filter out authorized user in the validation, please consider when user quit or job rotation happens, you will have to modify the validation! While role assignment is much effective and business dependent.
BTW, since validation or substitution is ABAP workbench change, you should create the change request number manually through menu Validation -> Transport on selecting the validation to be transported
GGB0 is to maintain the independent validation while OB28 is to make it effective to company code.
Tq for the reply. I'm the basis person, but i can't find in the authorisation (pfcg) the setup for this . As for the transaction code obbp and ob52, it seems to me more on the functional side. can u elaborate more on how to do the set-up or refer to me any notes or guide on this.
In Tcode OB52, open & close posting period, make new entry with account interval for your accounts and assign a special authorization group. Then assign the authorization group to the user roles which only authorized to post with these accounts.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.