on 09-10-2010 4:18 AM
Hi Gurus,
I need to put control checks on conflicting transactions which 4 users are having. Some of the transactions groups assigned to these users are unique and some are different.
Each transaction groups having multiple transaction codes in it. Majorly these transactions are Vendor master, invoicing, payment, F-02, MRBR, FBRA. Customer master, invoicing, payment.
Can you please let me know, on what basis should i see whether one user is having conflicting accesses and how should i put control on it?
I will be waiting for your response. Try to revert back asap.
Thank You
Hi,
It depends upon size of the organization and business requirement.
In large size organizations we can see different teams for master data maintenance and transaction data. Here we can separate roles by master data and transaction data.
In small organization both functions are executed by same people.
We can also segregate responsibilities based on criticality of business transaction or function.
Non critical transactions are performed by accounting clerk and critical transactions like mass document reversal are performed by accounts manager. In this case line of business would be able to tell you which transactions or business functions are critical.
We can also use different authorization group for employees and limit document posting limits.
Thanks!
Raju
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello,
This is a rather complex topic. The general principle is that no one should have authorizations for the complete process, from beginning to the end. Good place to start is [here|http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/f02855c9-2091-2a10-8682-af41abe087ba].
SAP provides report, which can be configured by the customer, namely [RSUSR008_009_NEW|http://help.sap.com/saphelp_nw04s/helpdata/en/f9/558f40f3b19920e10000000a1550b0/content.htm]- Users with critical authorizations.
Regards,
Milen.
Edited by: Milen G on Sep 10, 2010 8:00 AM
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
103 | |
12 | |
11 | |
6 | |
5 | |
4 | |
3 | |
3 | |
3 | |
3 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.