Authorization Group for G/L Account

Hi,
What?
- I wish to restrict the 'posting' of a G/L account to be done by certain users only
How?
- What I have done was...
a) From FS00, I have added a free-text (BANK) into the Authorization Group for a G/L account
b) From PFCG, a new role was created to allow these 2 Authorization Objects, F_BKPF_BES and F_SKA1_BES
c) 'BANK' was entered for the Authorization Group for both these 2 Authorization Objects
d) From there, I have assigned this new role to the user that I wish to allow Posting of the G/L account
Problem?
- Other users still can do Posting for this G/L account
- Any steps which I have missed out here or done wrongly?
Thanks,
Brandon

Hi,
Some other roles of the users may override and cause the users to post against this GL account.
Check all the roles relevant for the restricted users.
Use SUIM t-code to find if the auth object mentioned above is included in any other role.
If it be, restrict that again.
Generally if one role as no restriction against this auth and not all, this issue tends to happen.
Regards,
Sridevi

Similar Messages

How to create authorization groups for G/L Accounting

Hi:
I have a problem with authorizations groups in FI, I hope you could help me.
We want to control access to accounting in FI by authorization group so user only can work with some G/L accounts.
I have seen in transaction FS00, in control data tab, a field called Auth. Group, but I really donu2019t know if this is the right field.
Do you know how I can control access to G/L Accounts by Authorization Groups? Perhaps must I to create a new Authorization Group by roles? We have 4.6c.
Please, any help is welcome.
Thanks in advance.

Hi
Update the authorization group field in the GL master with any user defined value and then include the same in the respective user roles against the authorization object - F_BKPF_BES-BRGRU in PFCG
Ensure you have updated 'Authorization group' for the GL accounts in your chart of accounts
Thank You,

Set Up Authorization Check for G/L Accounts into PO creation

Dear friends !
How could I activate check to the access to certain accounts into PO creation ?
I know that is possible to activate this into Purchasing customizing under path
SPRO > Materials management > Purchasing > Purchase order > Set Up Authorization Check for G/L Accounts
But could I use it to give access only to certain GL Accounts by user ? Is this the purpose of this customizing ?
If yes what´s the object should I use to link with user account !?
best regards,
Ale

Hi ,
After you setup the configuration in transaction OMRP, please setup up
the authorisation group in the account code (FS02, the field is on the
"Control", technical name is BEGRU).
When a account assigned purchase order is created, the system checks for
object F_BKPF_BES with values from the BEGRU and activity 01.

Tolerance Group for G/L Accounts

Hello,
In the spro Financial Accounting>General Ledger Accounting>Business Transactions>Open Item Clearing>Clearing Differences-->Define Tolerance Groups for G/L Accounts, according to SAP documentation it is possible: "For G/L account clearing, tolerance groups define the limits within which differences are accepted and automatically posted to predefined
accounts. The groups defined here can be assigned in the general ledger account master record".
I put these setting:
Company Code: XXXX
Tolerance group: XXX
Name: XXXXX
Debit Posting: 0,01 Percentage: 1,0
Credit Posting: 0,01 Percentage: 1,0
Also I populate in the account master data the field Tolerance group with XXX.
Then I used the transaction for automatic clearing F.13 and when I run this transaction I have two document with amount 100,01 and -100 and there is a difference of 0,01.
I'd like to avoid to have this difference and apply a rounding. How it is possible? The spro transaction seems to be used to accept this rounding and not to delete it during the clearing.
Thanks a lot,
Emanuela

Hi,
SAP is not "deleting" the difference during clearing (as you wrote in your last sentence).
Using the function you've mentioned you can define tolerance limits for minor differences to trigger an automatic posting to predefined GL accounts during clearing.
The difference is real, it can't disappear / rounded off.
Best regards, Christian

Tolerance group for G/L accounts (OBA0)

Hi All,
If i not maintained company code in Tolerance group for G/L accounts (OBA0), what are the transaction codes will not get executed?
as per i know, can not execute f.13, f-03, f-07 and f-06. other then these which are the tcodes will not work?
And please expalin the importance of OBA0 configuration or forward any links.
Regards,
Swetha

hi
i think you understand this
___path for tolerance groups___
define tolerance group for GlTC-obao
MG® Financial Accounting ® Account Receivable and Accounts Payable ® Business Transactions ® Incoming payments®Manual Incoming Payments®define tolerance group for Gl
Tolerance Groups for G/L Accounts
For G/L account clearing, tolerance groups define the limits within
which differences are accepted and automatically posted to predefined
accounts. The groups defined here can be assigned in the general ledger
account master record.
Define tolerance group for employees.TC-oba4
IMG® Financial Accounting ® Account Receivable and Accounts Payable ® Business Transactions ® Incoming payments®Manual Incoming Payments ®Define Tolerance Groups for Employees.
Purpose:
To define:
The maximum document amount to the employee is authorized to post.
The maximum amount the employee can entered as a line item in a vendor account.
The maximum cash discount percentage the employee can grant in a line item.
The maximum acceptable tolerance for payment differences for the employee.
Define tolerance Group for customersTC-oba3
IMG ® Financial accounting ®Account receivables/payables ®Business transaction ® Open item clearing ®clearing difference ® Define tolerances for customers/vendors
regards
sai
Edited by: SAIKUMAR REDDY.BIJJULA on Oct 14, 2008 2:46 PM

Tolerance Groups for G/L Accounts - How to configure

Hi all,
I've got a few basic questions on this topic, hope you can help!
1.
I have created an entry in the transaction "Define tolerance groups for G/L accounts". For this entry I have filled in the company code and tolerance values, but I haven't filled in the tolerance group. Will this tolerance then be applied to all G/L accounts?
2.
What happens if I do allow differences for G/L clearing (through tolerance group) but don't create any accounts for clearing differences?
Kind regards,
SV

1.I have created an entry in the transaction "Define tolerance groups for G/L accounts". For this entry I have filled in the company code and tolerance values, but I haven't filled in the tolerance group. Will this tolerance then be applied to all G/L accounts?
If for a specific company code if you keep this as empty - that group apply to all
in case if you define a group and if you give that in the GL Master then talerance limits applicable to that gl.
2.
What happens if I do allow differences for G/L clearing (through tolerance group) but don't create any accounts for clearing differences?
If any difference you are trying to post for clearing particular gl system not finds any gl and gives you the error to do assigne the gl in that
VVR

I want to create a authorization group for cic0 tcode.

i want to create a authorization group for cic0 tcode.
in detail...
in cic0 tcode i will enter business partner name
and press enter it gives me list of same names..
i want to restrict as per the region..there...
for exapmle....
if i enter name as raja
it gives me a list of raja in all region
but i want for a particular region....
how to create a authori object.....................
Regards
Anbu

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a92195a9-0b01-0010-909c-f330ea4a585c
If you start SU21, find the authorization object and double click on it you should be able to see who the author is.
Or you can findout through SUIM

Define new tolerance group for G/L accounts

Hi,
Where do define new tolerance group for G/L accounts?
Thank in advance.
Swetha

Hi Swatha,
Debit Account
Maximum Revenue Difference on Clearing
     Clearing differences in your favour are permitted up to the amount specified here. The amount always refers to the local currency. Differences up to amount specified are automatically posted by the system as increasing profits. To do this, the system creates new line items.
     In addition to the amount, enter a percentage rate in the Percentage field. The lower of the two limits applies. If you only want to use absolute amounts or percentage rates, you have to enter maximum value in other fields. Ensure that you define these limits for your G/L accounts and your employees. The lower of the two limits applies.
Credit Account
Maximum Expense Difference on Clearing
     Differences to your disadvantage are permitted up to the amount specified here. The amount always refers to the local currency. Differences up to amount are automatically posted by the system as reducing profits.
     In addition to the amount, enter a percentage rate in the field
     Percentage. The lower limit applies. If you only want to use absol amounts or percentage specifications, you have to enter maximum value in other fields. Ensure that you define these limits for your G/L account and your employees. The lower value applies.
May be this information is useful to you
Edited by: surya naveen on Jul 28, 2008 2:11 PM

Creating Authorization groups for material types

Hi All,
I have a requirement to create Authorization groups for different material types we have in our company. Basically these are intended to restric the users from accessing the material master. Different material types needs to be assigned to differnt group of users.
So if we can create couple of Authorization groups, then I am thinking of assigning the material types to these groups.
I went to SPRO---Logistics general ---Material master -
Tools --- Maintain authorization and authorization profiles. TCODE : PFCG
Is this the right path?
Please advise
Shane

Hi All,
I don't think SPRO---Logistics general -Material master- Tools --- Maintain authorization and authorization profiles is the right path to create new authorization groups.
Can anyone explain how to create new authorization groups for different material types. The purpose is to create a role and assign this auth. group to this role and provide that security role to specific users.
Regards
Shane

Limit Security by Excluding Authorization Groups for S_TABU_DIS

Is it possible to assign security for object S_TABU_DIS by excluding authorization groups in lieu of including all authorization groups for which security is to be assigned.
Thanks,
Barbara

Yes, some fields have cross-object relationships. For org. levels it is much the same.
There are limits to these fields - you can over-ride them or bypass the checks, but it is no guarantee that it will work.
There are many "tools" ouside of PFCG which do this... without respecting the limits.
Do not be surprised if it does not work, or you have perforamce problems, or strange user experiences....
Cheers,
Julius
Edited by: Julius Bussche on Oct 5, 2009 10:53 PM

OBA4 FI tolerance groups for users - GL account

Dear All,
May I know where is the gl account defined for the permitted payment differences? If in FBKP, then which group to define?
Thanks

Hi
Please use the below mentioned path to define tolerance groups for users and also refer to follow the below link
For normal price difference clearing use the Tcode:OBXL
http://www.scribd.com/doc/51496069/17/Assign-User-Tolerance-Groups
for details please go through the below mentioned points
SPRO>Financial Accounting>General Ledger Accounting>Business Transactions>Open Item Clearing>Clearing Differences>Define Tolerance Groups for G/L Accounts/Define Tolerance Groups for Employees
Upper limit for posting procedure
Maximum Amount Posted per Document
Maximum permitted posting amount per document for this user group.
The posting amount is the total of all debit items or, similarly, the total of all credit items.
Maximum Posting Amount per Line Item
Maximum posting amount permitted per customer or vendor item for this user group.
Maximum Cash Discount Percentage Rate
Maximum cash discount percentage rate which may be assigned by an employee of the user group.
Use
The percentage rate is checked during the entry, change and clearing of open items.
Note
The restriction does not apply to automatically created line items, for example, during payment settlements.
Permitted payment difference
Maximum Payment Difference for Revenue
Payment differences to our advantage are allowed up to the amount entered here.
The amount always refers to the local currency. Payment differences up to the amount entered here are posted automatically by the system as increasing the profit. The system creates line items to show this.
Note
In addition to the amount, you also enter a percentage rate in the Percent field. The lower limit is valid. If you only want to use absolute amounts or percentage specifications, then you must enter the maximum value in every other field.
Note that you define these limits for your customers/vendors and your employees. The lower limit is valid.
Example
The local currency is USD. You have entered 30 USD in the Revenue field and 1 in the Percent field. For incoming payments up to 3000 USD, you accept an overpayment of a maximum of 1 percent. That means, amounts of 0 to a maximum of 30 USD are tolerated, depending on the incoming payment amount. For incoming payments over 3000 USD, you accept an overpayment of up to a maximum of 30 USD.
Maximum Allowable Revenues from Payment Differences
Differences when settling payments are accepted and posted automatically by the system up to the percentage rate entered here. The percentage rate is only valid if the difference is posted as a gain.
The percentage rate is used for the maximum of the debit and credit totals of the items to be cleared.
Note
In addition to the percentage rate, you also enter an amount in the Revenue field. The lower limit is valid. If you only want to use absolute amounts or percentage specifications, you must enter the maximum value in every other field.
Note: You define these limits for your customer/vendor and your employees. The lower limit is valid.
Example
The local currency is USD. You have entered 30 USD in the Revenue field and 1 in the Percent field. For incoming payments of up to 3000 USD, you accept an overpayment of a maximum of 1 percent. That means, amounts of 0 to a maximum of 30 USD are tolerated, depending on the incoming payment amount. For incoming payments over 3000 USD, you accept an overpayment of up to a maximum of 30 USD.
Maximum Discount Adjust. for Gain from Payment Differences
When clearing payments, any payment differences up to the amount specified here are corrected with the cash discount posting as long as the cash discount amount is large enough for the adjustment. The value you specify here is used for differences that represent a gain.
Regards
Praveen PC
Edited by: Praveen Chirakkel on Apr 12, 2011 6:46 AM

Material/Material Type in Material Authorization group for QM

Hi All,
I am unable to find out the Material or the Material Type that is linked with a material authorization group (QMATAUTH).
Do we have a table where I can find the Material Types or the Materials contained in each material Authorization Group (Q_MATERIAL -> QMATAUTH).
Thanks!

> I am unable to find out the Material or the Material Type that is linked with a material authorization group (QMATAUTH).
>
> Do we have a table where I can find the Material Types or the Materials contained in each material Authorization Group (Q_MATERIAL -> QMATAUTH).
You can get teh details on QM authorization group through table TQ01D. YOu can go through the following post for list of QM tables and tcodes.
QM Tables and T codes
Thanks.
Anjan

Authorization group for table maintenance view

I need to create table maintenence view for a custom table, client provide name for auth. group, but no clue how to create auth. group.
can someone provide the steps to do this?

Hi,
Follow below steps to create table maintenance for a table and to assign authorization group to a table:
step1: Go to SE11 enter the table name
step2: In the standard toolbar you will find UTILITIES
Go to UTILITIES -> TABLE MAINTENANCE GENERATOR
You will go to first screen of Table maint. gen.
Here you will find to enter authorization group.
Thanks and Regards,
Shravan G.

Field Authorization Groups for partners and texts

Hello,
We would like to use the Field Authorization Groups in the customer master to restrict update of specific fields. One problem we face is that we can't seem to find a way to restrict the authorization on the partners and texts. Has anyone come across this issue and found a solution? If so, could you please share it with us?
Thanks,
Christine

Hi,
For the text this is clearly not possible.
Text is an additional component above of the transaction. It is not fully integrated. So there are some limitations
For the partners. I guess you mean partner functions of a customer.
I'm a bit surprise. The fields below should be customizable
KNVP-DEFPA
KNVP-KNREF
KNVP-KUNN2
KNVP-LIFNR
KNVP-PARNR
KNVP-PARVW
KNVP-PERNR
Hope this helps
Alain

Authorization Group for /KJRTAX01/A03

Hi Sap Gurus,
A user in our project has requested access to tcode /KJRTAX01/A03.
This tcode pulls in the object S_TABU_DIS to the role when added with the DICBERLS(Auth. Group) as &NC&.
Now giving access to this value will give access to lot of unwanted tables and hence we wanted to restrict the access.
When I tried to find out the tables which this tcodes affect I am unable to find out. Can anyone suggest which tables will get affected because of this tcode /KJRTAX01/A03
Thanks,
Arjun

Arjun,
First thing I would do is to ask the user for list of the tables he want to update or display.
Once you have the list of tables, you can confirm what authorization group they belong to.
Maintain the transaction code in SU24 as not to pull &NC& or maintain the field values in PFCG itself (it may give you issues every time you open the role in expert mode or every time you enter the transaction code in new role.)
If the list of tables asked belongs to &NC&, then you can explore the possibility of creating a new authorization group and reassign all the tables to this new authorization group.
If the user can not provide you the list, then as Martin mentioned, ask the user to check all tables while trace is on.
Regards,
Shivraj

Authorization Group for G/L Account

Similar Messages

Maybe you are looking for