F_LFA1_BEK - access to specific vendor

Hello,

my first posting....hope someone has an answer...

We need to give 2 users transaction FBL1N (vendor line items) with only access to 2 specific vendors.

As far as we know there is no authority object for the vendor account number itself.

So we thought we can use object F_LFA1_BEK. We entered an authorization group (LFA1-BEGRU) to this 2 vendors and added this group to F_LFA1_BEK. So far so good.

Problem is now that it is still possible to access all vendors where no authorization group is maintained in the vendors master record. (No authorization group is the default case and it is not possible to add another one the other vendors)

Is it possible to achieve this with F_LFA1_BEK or is there any other solution?

Thanks a lot!

Christian