Skip to Content
author's profile photo Former Member
Former Member

FI-Segragation of Duties, Controls on Conflicting Transactions

Hi Gurus,

I need to put control checks on conflicting transactions which 4 users are having. Some of the transactions groups assigned to these users are unique and some are different.

Each transaction groups having multiple transaction codes in it. Majorly these transactions are Vendor master, invoicing, payment, F-02, MRBR, FBRA. Customer master, invoicing, payment.

Can you please let me know, on what basis should i see whether one user is having conflicting accesses and how should i put control on it?

I will be waiting for your response. Try to revert back asap.

Thank You

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Sep 10, 2010 at 04:55 AM

    Hi,

    It depends upon size of the organization and business requirement.

    In large size organizations we can see different teams for master data maintenance and transaction data. Here we can separate roles by master data and transaction data.

    In small organization both functions are executed by same people.

    We can also segregate responsibilities based on criticality of business transaction or function.

    Non critical transactions are performed by accounting clerk and critical transactions like mass document reversal are performed by accounts manager. In this case line of business would be able to tell you which transactions or business functions are critical.

    We can also use different authorization group for employees and limit document posting limits.

    Thanks!

    Raju

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Sep 10, 2010 at 04:59 AM

    Hello,

    This is a rather complex topic. The general principle is that no one should have authorizations for the complete process, from beginning to the end. Good place to start is [here|http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f02855c9-2091-2a10-8682-af41abe087ba].

    SAP provides report, which can be configured by the customer, namely [RSUSR008_009_NEW|http://help.sap.com/saphelp_nw04s/helpdata/en/f9/558f40f3b19920e10000000a1550b0/content.htm]- Users with critical authorizations.

    Regards,

    Milen.

    Edited by: Milen G on Sep 10, 2010 8:00 AM

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.