cancel
Showing results for 
Search instead for 
Did you mean: 

Restrict certain user to process F110 for special GL open items

canarendra
Explorer
0 Kudos

Hello,

We have requirement to restrict authorization for processing F110 automatic payment for special GL transactions. Only certain users will be allowed to release payment of special GL open items. How can we restrict users to process F110 normal open items and special GL open items.

Thanks

Narendra

Accepted Solutions (1)

Accepted Solutions (1)

sanilbhandari
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi canarendra

There is an authorization group,F_BKPF_BES which controls authorization for posting to a specific GL using the concept of Authorization groups.

With the help from your security colleague, have this authorization object assigned to the t code F110. This can be done through SU24

Now for the GL Account where the special GL is posted, assign an authorization group.

There after in your security role for processing of Special GL payments, assign the values of authorization group against the authorization object.

This should than work as per your requirements.

Thanks & regards

Sanil Bhandari

canarendra
Explorer
0 Kudos

Hi Sanil,

Thanks for your reply. Will check as suggested by you. Since that was our primary requirement.

Thanks,

Narendra

canarendra
Explorer
0 Kudos

Dear Sunil,

We checked but it will also restrict posting to special GL for passing the journal entry. Our requirement is that user will post entry journal entry in special GL but need to restrict user for release of payment of special GL transaction through F110.

Hence restriction at GL level will not serve the purpose.

Regards,

Narendra

Answers (2)

Answers (2)

sanilbhandari
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hi

You may look at writing a specific logic as per your requirement in BTE 1860.

Regards

Sanil

former_member600777
Participant
0 Kudos

Hi Narendra,

You should restrict the roles by transaction codes / activity .

However if your requirement is not fulfilled by above then you can do the custom development along with your technical team to maintain this additional authorization check using a new custom table or using the standard table TVARVC for check based on user ids and/or special GL indicators