Authorization object for Park/post

[Former Member]

Hi Experts,

Please share me to how can I restrict user to park the document not for post.

Regards,

Kundan Sharma

[Former Member]

In any authorizations in your roles where financial documents are created - for example F_BKPF_BUK, F_BKPK_KOA, etc. - park uses activity '01' - Create. Change this to activity '77' - Pre-Enter. This will allow users to park journals but without '01' they won't be able to post them.

Steve.

[Former Member]

Hi ,

can you please send me the all financial object name?

How to restrict user can post only document?

Regards

Ashwani

[Former Member]

Look at the roles in PFCG and the relevant ones will be in the "Financial Accounting" category.

As I said above, post is activity '01'.

Steve.

[Former Member]

I think it is better to find it correctly by running the trace for that user using ST01 Tcode.

It will give you the exact authorization object as well as value that needs to be changed.

Then revoke the access which is available in that role assigned to that user.

[Former Member]

Dear Sir,

I want to give the parking authorization to user, so that i have remove the Create(01) rights remove from the object (F_BKPF_BUK, F_BKPK_KOA). but i have apply the 77 access on these object, now user not able to anything, please suggest how to give parking authorization of user and how to give posting authorization to user.

Regards

Ashwani

[Former Member]

If you aren't sure which authorization objects are the correct ones, then you should do as suggested and run ST01 to check which objects your transaction is using, and then work on changing those in the user's roles. This is especially easy when the user is prevented form doing something - just look for the authorization failures in the ST01 security trace.

The activities you want, though, are 01 for post and 77 for park. You just need to find the right objects...

Steve.

[Former Member]

Dear Sir,

I have given the 77 of Park access to user on role but user not access the FBV0 t-code. if i given the access the 01 and 77 , he is able to park and post both, but i want to segregate of user work. (one user can only park and his manager can only post), so I request to you please suggest the solution accordingly.

Regards

Ashwani

[Former Member]

FBV0 is for posting parked documents, isn't it, rather than for creatign parked documents? Try FV50 for creating parked documents, just with activity 77 and not 01.

Steve.

[Former Member]

Dear Sir,

What is the object name of FBV0 and FV50.

Regards

Ashwani

[Former Member]

I don't understand the question. Those are transaction codes.

[Former Member]

Hi,

If you are sure about the role which have access to park the document. Modify that role.

If not, try to run a ST01 trace for the user whom you want to restrict. Check in which authorization object is called when he tries to park the document.

Check through which role he has access to that authorization object and try to restrict it.

It is pretty simple and straight forward one.

Please check and provide your feedback.

Thanks and Regards,

Vimal