In the use of our version of SOD Rule P003, we are encountering SOD violations caused by access to F-44 from the AP01-AP Payment Processing functional group and various AP02-Process Vendor Invoice functional group transactions (such as F-42, FB60, FBVO and MR8M).
Can someone explain the risk of having F-44 as well as Process Vendor Invoice transactions?
We also need to mitigate this risk. Is there a standard SAP report which lists vendor invoices/items entered and cleared by the same person? Or can someone suggest an alternate monitoring report?
Thanks.