Authorization in ob52

Hi,
We created a authorization group called P002 and assinged in OB52.(Peroid Maintenance for Fi).
in that we opened April and May 2009. but one is user is able to post in 2008 also.
How can it possible.
please guide me
sateesh

> This is not possible with stock t code OB52.
That is why you typically close the sub-ledgers first and have a period end close schedule.
Only special users (balance sheet accountants) should be able post after that time.
If your warehouse RFID scanners can still post, then this is either a procedural or config error in the sub-ledger module.
> Only possbility is there if you go for custom transaction code with help of ABAP coding.
That coding can post a lot of rubbish as well...
Cheers,
Julius

Similar Messages

Authorization in OB52-urgent

Hi gurus
plz help me in the following issue-
Client wants to give authorisation to a particular user say 'A' for posting period 9 and 10 and for all other users 10 that is current posting period. I think in OB52 there is a column for authorization-there we need to give user id for theat perticular user. But how to create that user id plz suggest me for that. If there is any other way to solve this issue then also plz suggest me..
I will asign good points and thanks in advance.
Regards
Roomi

There is a specific authorization object, this can be found in OB52.
You then need to use t code SUIM to check what values all users have, you may find they have a "*"
In OB52 you then need to add a value say "1", add this to the second date range.
Then create a profile that has the value of "1".
If all users have a "*" you will need to remove that.

Use of Authorization Group in OB52

Dear Experts,
I have updated Authorization Group as "OB52" in the last column of OB52 T-Code against each posting period variant with account type + , A,D,K,S,M etc with normal period 1 to 12 and special period 13 to 16.
The same Authorization Group "OB52" is updated in one of FI users say Mr X Role profile under authorization object F_BKPF_BUP.
Now as per the SAP standard practice the special period 13-16 should open for the user Mr X and block for all other users. But system is allowing to do transaction with special period 13-16 for other users also.
Please advise where I am wrong.
Regards,
Alok

Dear,
I will explain you the step involved for auth Mr.X to post for the particular period.
Let take an example that Mr.X has to be allowed to post between the period 1 to 11 and other user only for the period 11(Apr - March as fiscal year).
Now,for valuation variant with account ' +' for the first period, you enter from period as '1' and to period as '10' and in second period, you enter from period '11' and to period '11', provide the auth group (eg KU - key user) in the last column.
For other accounts (A,D,M,K,S) change the first period from '1' to '12' and dont assign any auth group.
Now you goto se16n and check in TBRG table whether your auth group KU is available for the object F_BKPF_BUP,if not maintain it.
The last step is to assign "KU" to Mr.X profile or role against the object F_BKPF_BUP.
Once you made the change"generate" and save it.
Now the system will permit Mr.X to post for the periods between 1 to 11 and other user only for 11 period.
Hope that i am ab;le to clear your boubt.
Do revert for any further assistance.
Take care
God Bless
Regards

Authorization check for Open and Close Periods ( OB52)

Dear Experts,
We have created ZOB52 for Opening and closing periods. This is replica of Tcode: OB52 with some other developments that we required. Here for resticting user I had tried authorization Object: F_BKPF_BUP for particular company code wise posting. This was however not working. Kindly suggest.

Hi,
The last column in OB52 - AuGr (Authorization Group) helps you in restricitng certain users to use a posting period. This field is freely definable.
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
In OB52, in the row with the account type '+', enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
For company code wise restrictions, you should have a seperate posting period variant for each company code.
Edited by: Michael Gerard Leo on Jan 12, 2010 2:55 PM
Edited by: Michael Gerard Leo on Jan 12, 2010 3:01 PM

Authorization for opening & Closing posting periods - OB52

Hi,
Is there any way to set authorization for opening & closing of posting periods in OB52?
My scenario:
I have 2 company codes - A & B assigned to 2 different posting period variant - say PPA & PPB.
The user belonging to CoCd A should not be able to open/close posting period of CoCd B and vice versa.
Is this possible through any authorization settings?
Request your help on this.
Regards,
Sridevi

Hi Sridevi
Please go through the following:
You can assign authorization groups for permitted posting periods. This means that, for example, some posting periods can only be opened for particular users within monthly or annual closing. You can only assign the authorization group at document header level and it only affects period 1. The authorization object is called F_BKPF_BUP (Accounting document: Authorizations for posting periods). Read the corresponding chapter on "User maintenance" in the "Assigning authorizations" topic.
"User maintenance"
Due to the modular authorization concept of the system, you can define authorization profiles which are tailored to the workplace of your employees. You can, for example, assign authorization to a workplace in the Accounts Receivable, Accounts Payable or General Ledger Accounting areas.
By assigning authorizations you define which business-related objects your employees are allowed to process and which editing functions are allowed.
In the following activities for authorization management, you must carry out the following for employees who are to work with the system:
Assign authorizations
The authorizations are assigned by specifying permitted values for the pre-defined objects.
Define profiles
In the SAP system, authorizations are grouped together in workplace profiles. Therefore one or more profiles must be allocated to the individual employee in the master record.
I hope this helps.
Regards
Kavitha

Authorization check in OB52

Hi,
We have a following client requirement.
u2022     In OB52, once user logged In then only the respective company code ( to whom he belongs) should be available for editing i.e. opening / closing of periods and Other company codes should be in grayed out status.
Can we built a check like that?
Regards
Anuj

Hi
If you have several company codes and want your users only to be able to open and close periods
(transaction OB52) belonging to their posting period variant (=company code).
First you configure the Posting Variant :-
1) FI- FI Global Settings - Document - Posting Periods - Define Variants for Posting Periods
2) FI- FI Global Settings - Document - Posting Periods - Assign Variants to Company Code
Second Step:-
Goto SE11 copy the view V_T001B to ZV_T001B_000X (000X indicate the Posting Variant)
In Change mode, tabstrips Selection Conditions Insert line 2 with
Table     Field Name   Operator   Comparative Value    AND/OR
T001B   BUKRS           EQ            '000X'                          AND
Save your entries
Third Step :-
Goto SE54, Options Generated Objects -> Create
Authorizations Group FC31
Function Group          Z00F0
Maintenance Type     One Type
Overview Screen       65
Single Screen             0
Final Step :-
Goto SE93, Create a new transaction code ZOB52_000X
Start object - Transaction with parameters (parameter transaction)
Transaction SM30, Tick Skip initial screen
Regards
Sanil Bhandari

Multiple Authorization groups to be used in OB52 for a single company code

Hello All,
I need help in creating and assigning authorization groups in Transaction Code: OB52 to control the postings of few users in one authorization group. That is i want some users to post in 2 back period and others in only 1 back period.I have tried from my side and it is still not working.
I followed the following step:
I have created 2 groups and assigned the users accordingly but the thing is i am only able to find 1 feild for entering authorization group
If there is any thing i am missing or if i have done some thing wrong in this process please help me.
Please Provide me the logic of how to use two authorization groups with one feild.
Best Regards,
Ravi
Edited by: Ravi Eddhula Reddy Kumar on Apr 3, 2011 1:01 PM

Hi,
Try with this possibility
In ob52 create two rows.
Assign the required periods for Group A in Row 1
Assign the required periods for Groub b in Row 2
Regards
Prasad

Authorization Group in T-Code: OB52

Hi,
I need to maintain 2 Auth. Group in T-Code: OB52, my requirment is below:
for some users (nearly 25) needs to post the transaction in June Month and for some users (nearly 10)should have to post for selected GL in the month of June.
So we decide to create two roles and assign the Auth Group in F_BKPF_BUP Auth. group. But i need to know whether the system will allow to assign two Auth. Group for one Company code (ie., 2 Auth. Group and all common users)
Please revert ASAP.
Regards
JS

The help on AuGr field in OB52 is good. Here it is
Authorization Group
The authorization group allows extended authorization protection for particular objects. The authorization groups are freely definable. The authorization groups usually occur in authorization objects together with an activity.
Use
A posting period can be made available to only a limited set of users using the authorization group.
Procedure
If only a limited set of users is to be able to post in a particular posting period, proceed as follows:
Add the posting period authorization (authorization object F_BKPF_BUP) to the authorizations of the selected users. Assign an authorization group (e.g. '0001').
Enter the account type '+' for the posting period variant to which the restriction is to apply. Enter the period(s) whose use is to be restricted in the first period, those which are available to all users in the second period, and the authorization group (e.g. '0001') in the last column.
Examples
A posting period can be successively restricted. If, e.g. 10 users have the posting period authorization with authorization group '0001', and 3 of these 10 users also with authorization group '0002'.
If the period is only to be accessible to the 10 selected users the authorization group '0001' is entered in the posting period variant. Access can later be restricted to the remaining 3 users by entering '0002'.
I guess your requirement can very well be met, as explained in the example above. Also implement the following SAP Note to be able to assign the authorization group at document header level (account type '+') and at line item level in Transaction OB52.
https://service.sap.com/sap/support/notes/891505
Srikanth
PS: I have seen in a reply above that AuGr controls only special periods, which is not a correct statement. AuGr controls postings in the period specified in From per.1/Year To period/Year in OB52.

Authorization group in OB52

Hi,
We want to give April 2009 authorization for one user and rest of the users should be post in this monthly.
for that we have created 1 authorization groups in OB52 we entered like this:
0001 + 1 2009 1 2009 3 2009 3 2009 3333 (Aut. group)
we assigned 3333 in user profile also.
guide me
sateesh

Hi Sateesh,
It should be the other way around. The first section of the periods is controlled by the authorisation group. I understand that the user profile with the authorisation 3333 should be able to post in April ie 04/2009. Others should not be allowed to post, right?
Maintain as follows in OB52 -
0001 + <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
0001 D <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
0001 K <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
0001 M <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
0001 S <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
0001 A <GL Accounts> 04 2009 04 2009 06 2009 06 2009 3333
Regards,
Mike

USER AUTHORIZATION FOR T-CODE OB52 & OKP1

Hi Experts,
I would like to know if there is a t-code that assigns USER to open another t-code.
OB52 & OKP1?
I want to restrict this t-code for only few users....
Is it possible?
Need advice plese
Rey

Hi Rey,
As per my knowledge the authorizations will be done by BASIS consultants.
R.K

OB52 - Authorization for specific population

Hello,
Here is the context:
At this moment in our client there are 2 group of populations: normal population and specific population (which has to be able to post some days during the month M).
We are managing posting periods through OB52 where normal population is managed through the interval 2 of OB52 and the specific population is managed through the interval 1 and has assigned authorization group (AG1).
Also we have created different variants assigned to different company codes as each company code has different users as specific population.
The issue is that we need a 3rd group of population (for migration purposes only) to be able to post when the two other periods are already closed.
Do you have any idea how to deal with a 3rd group of population in OB52?
Thank you
Cristina

Hi Cristina,
I believe you will have to assign the authorization object F_BKPF_BUP to the authorization group for the 3rd population in user roles in order to perform postings in a closed period.
Check with your basis team for this.
Thanks,
Sagar

OB52 Authorization in Production System?

Hi,
How can OB52 Transaction code will be open in Production System? Because every month we are doing this by moving the transport from Development to Production. We are not comfortable to do this.
Kindly suggest me some points how can OB52 will be in editable mode in Production System?
Thanks

Hi,
see also OSS note 1433051 - "Open and Close Posting Periods" as current setting

Open and close posting periods urgent! (ob52)

Hi SAP gurus,
i am trying to post open and close balances (it is spesific to my country) however i do not want users to post to 2007 except me.
how can i achieve this with not blocking all users.
in other words, i need authorization to post last year although it is closed for all users.
note: can you pls explain the difference btw "from period 1" and "from period 2" in OB52. and also there is an authorization group at the last column what does this mean?
thx in advance.

Hi,
If you stand on the field "authorization group" and use "F1" you can find the help on that field, you will find that it is very helpful.
You should define period 2 for all users and period 1 to the restricted users,
Next, you should assigned a free symbol in the field "authorization group" (which refer to period 1), then ask the person that responsible in your organization of the authorization to assign the authorization object F_BKPF_BUP with that specific symbol to the restricted users,
That should do the job.
If that helps, feel free to assign points
Kind regards,
Yoav

OB52 Unable to see Open and Closing Posting Periods in V_T001B table

HI Guru's,
Iam trying to see open and closing periods in OB52 buts its not shwoing any entries.. if i check in table T001B showing all entries.. how to solve it anyone can help me...
regards
Janardhan

Most likely you don't have an authorization - check SU53 transaction.

OB52 based on Company Code

Dear All,
As we are having several company codes and want users only to be able to open and close periods from transaction code OB52 belonging to their posting period with respect to company codes how can I restrict and allow them open & close periods based on company code repectively. Is there any process this be done.
I tried with the notes I got from one sap-img link. But it did not work & there something is missing. Kindly if anyone have done this before send be step by step process. Awaiting for you reply...
regards,
Raj B...

How about trying it this way?
1. Remove access to OB52
2. Create a maintenance view similar to V_T001B specific for each company.
3. Create a TCODE for each of these views.
4. Use this TCODE for authorization assignment.
This should be simple but your number of views would be increasing with respect to the number of companies.
~Eswar

Authorization in ob52

Similar Messages

Maybe you are looking for