Control user access to FBL3N by cost center

Hi Expert,
Need your advice.
Our user wish to control the staffs access to FBL3N by cost center.
This is due to the FBL3N contains salaries posting for different department.
However the FBL3N GL listing report also contain documents without cost center.
Any ideas how can we perform the control ? If the FBL3N can amend with include cost center as checking, for the rest of GL without cost center, is it accessible by all users ?
thanks.
rgds,
tee

Hi Experts,
Sorry for misleading. Initiate the request was to retrict the access with cost center object, since it is not possible. So we will advice the user to restrict the GL access.
Just need to confirm, can we modify the FBL3N object F_BKFP_BES : Account authorization for G/L accounts from Check to Check/Maintain ? So that we can assign certain GL only accessible by normal users.
And any impact on this once the changes is make ?
thanks.
rgds,
tee

Similar Messages

Exam 1Z0-007 and questions from Controlling User Access

Hi,
I am preparing for exam 1Z0-007 and going to give this exam in two weeks. I like to confirm if "Controlling User Access" topic is part of this exam 1Z0-007? I have checked on Oracle website and this topic is not a part if this exam anymore unless they add it later.
Has anyone recently given this exam and were there any questions related to "Controlling User Access" or user Privileges?
Thanks

user10878991 wrote:
Hi,
I am preparing for exam 1Z0-007 and going to give this exam in two weeks. I like to confirm if "Controlling User Access" topic is part of this exam 1Z0-007? I have checked on Oracle website and this topic is not a part if this exam anymore unless they add it later.
Has anyone recently given this exam and were there any questions related to "Controlling User Access" or user Privileges?
ThanksI recommend people are very very very careful in answering this question as it could be very easy to breach one's certification candidate agreement.
Rgds - bigdelboy.
Edited by: bigdelboy on 27-Dec-2009 04:26
It is certainly true the topic you mentioned is in ISBN: 007-219537-1 printed in 2001.
It is also apparent, unless bigdelboy's eyeball is deceiving him, the topic does not appear in [http://education.oracle.com/pls/web_prod-plq-dad/db_pages.getpage?page_id=41&p_org_id=28&lang=US&p_exam_id=1Z0_007] which is authorative.
I have not followed these things that closely until recently, however this will not be the only example of an OraclePress/Sybex book being left behind because of errata/topic updates etc. These often occur when the exams are update for new releases, eg from 10gR1 to 10gR2; or for when the exam moves from beta to production (sometimes these books are prepared and even pulbished while exam is in beta). In your case I suspect the change quite probably have occured when the exam moved from 9gR1 to 9gR2 or to better accomodate the WDP programme. The exam may also be influenced by the content of Oracle training courses that are being taught and from time to time these will be chaged for a variety of reasons.
How you handle it is up to you ..... you may:
- ignore these topics. IMHO you are always entitled to complain if questions asked did not sigificantly match the published topics and you feel this caused you to fail. (I assume the remedy would be a retake voucher). You can hit a comment button on the question and also a comment button the the end of the exam. This is a sort of negative approproach.
- Go over these topics. If your're serious about Oracle you really need to understand this anyway. See it as an opportunity. A few hours revision ought tosee you able to answer 50% of he topics. This is a positive approach. And this if how certification study ought to be .... sometimes it good to investigate a non examined topic that is interesting.

Controll user access with internal attribute date

I all.
i've created an internal attribute called Date-of-validity of type Date.
the objective is to controll user access based on the date configured in this attribute and permit acces only when the date as not been reached.
who do i control-it, putt the acs looking to the date in an autommated way.
thanks in adv
Antero Vasconcelos

It is possible to define an internal user whose password is taken from an external store.
In internal user definition select "Password Type" to be the LDAP database and then define the rest of the user definition, including identity groups, as desired

User exit to mask a cost center

Hello, i need a specific cost center not to appear while creation of SC + if user manually inserts the cc, he should get an error message 'cost center is going to be blocked.choose another one'. can we use BBP_DOC_CHECK_BADI for this or is it another one?
by the way the cost center will not be blocked so as to permit existing POs to process goods receipt, etc.

Hello,
You can use BADI BBP_UI_CONTROL_BADI to hide specific field on screen using control parameters.
Regards,
Marcin Gajewski

App-V 5 SP2 and Office 2013 - How to control user access?

What is the best way to control access to the Office 2013 application shortcuts?
Because it must be published globally, how can we only allow certain users to access Office 2013 on RDS servers when the default action would mean all users can access it?
Can removing the shortcuts using the DeploymentConfig file (see
here) followed by setting up something using the UserConfig file linked to an AD group work?
If so how would this be done?

See these threads:
http://social.technet.microsoft.com/Forums/en-US/a455d7e2-e0e6-4843-b07b-42afc18623e2/office-365-proplus-appv-50-package-installs-lync-outlook-infopath-and-onenote-even-though-they?forum=mdopappv#6fbcf59b-351c-48d1-8e63-539550a88b56
http://social.technet.microsoft.com/Forums/en-US/f4b47f1e-e494-4477-97e9-6942c4f8ec2d/office-2013-vl-appv-5-packages?forum=mdopappv#7f63bea4-57c3-40a7-bdf4-6f25320e5b68
Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
answer your question). This can be beneficial to other community members reading the thread.
This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
Twitter:
@stealthpuppy | Blog:
stealthpuppy.com |
The Definitive Guide to Delivering Microsoft Office with App-V

Control user access in SOA Suite 11.1.1.2 Console

Hi All,
We recently migrated our application from SOA Suite 11.1.1.1 to 11.1.1.2 . In 1.1 we had an end user account assigned to the Monitor group which could access the middleware console and view composite flows but could not deploy/undeploy or retire/activate processes. However the same user in 1.2 can log in to the console but cannot view a composite flow.
In the dashboard we get the following error:
Unable to retrieve composite details.
Error retrieving Composite CompositeName (1.0) details from soa-infra runtime. This could happen due to the errors in soa-infra initialization. Please view the log files for details.
EJB Exception: ; nested exception is:
java.lang.RuntimeException: Caller doesn't have enough permission to call this method.
My question is... how do we create a user in weblogic which will allow a user to view process flows but wont not deploy/undeploy or retire/activate privileges?
Thanks in advance,
Shaf
Edited by: soa_adf on Jul 15, 2010 11:44 AM

So the reason is, you need to add users/groups to the SOAMonitor Application Role for them to be able to view instance data. Below are the instructions.
Here are the instructions on how to create Monitoring Roles:
Instruction to add SOA application role SOA Monitor to user "monitoruser":
1. log in em as weblogic user
2. right click on SOA/soa-infra(soa_server1) on the left panel and select Security => Application Roles.
3. click on the "play button" to select "Role Name". A list will appear and you select SOAMonitor. The page "Application Roles > Edit Application Role" appears.
4. Click Users/Add Users, a "Add User" popup appears. Click on the "play button", select user "monitoruser" from left column and move it to the right column. And click on "ok"
If you have your WebLogic environment set up per EDG Guidelines (where your admin servers and managed servers are on different hosts or same host, different directories) you may not be able to see the list of Application Roles in the above instructions. First you would need to copy your JAZN Policies to the Admin Server or move to LDAP. The SOA Application Roles and policies will likely be stored in your mserver configuration (if you deployed SOA there). A restart is not required afterwards.
As per the docs EDG deployment requires OID for policy store because there are two copies of policy store file, system-jazn-data.xml:
$ORACLE_BASE/admin/soaedg_domain/mserver/soaedg_domain/config/fmwconfig/system-jazn-data.xml
and
$ORACLE_BASE/admin/soaedg_domain/aserver/soaedg_domain/config/fmwconfig/system-jazn-data.xml
EDG states in section 11.1.1
http://download.oracle.com/docs/cd/E14571_01/core.1111/e12036/oam.htm#CACJADGI
"...The Oracle Fusion Middleware SOA Suite EDG topology uses different domain homes for the Administration Server and the Managed Server, thus Oracle requires the use of an LDAP store as policy and credential store for integrity and consistency..."

Control User Access in Desktop/Admin

Hi,
I have two versions of Discoverer Desktop/Admin software - one is 10.1.2.45.48 and another is 10.1.2.54.25. Since both are 10g versions there is no change in EUL. Both versions of discoverer are configured for same set of databases.(database versions are 9i and 10gR2)
There is a chance that I open a workbook in 54.25 version of discoverer, make some changes and save it. Obviously Oracle doesnt support backward compatibility. So I want to know can we restrict such things. I mean an alert or prevent making any changes in EUL/Workbook.
Cherrish

Hi Cherrish
I guess the question I would have to ask is why do you want to keep both versions of Discoverer Admin / Desktop on your machine? Because you have upgraded to 10.1.2.54.25 why don't you delete the older 10.1.2.45.48?
There is no need for you to keep it any longer and it will only cause problems if you leave it there.
As to your question, I'm afraid there is no way to prevent any changes in an EUL / Workbook.
Best wishes
Michael

Control G/L account and Cost Center for movement type 251

Dear Friends,
I would like to use mov. type 251 for GI for sale and like to control over G/L account and Cost center.
The G/L account is by default from the valuation class of the the material and if the user will enter wrong G/L
we had done the customising in OMJJ movement type 251 - Account grouping - Unchecked the check box of column
"Check account assignment" - Impact is " the system always uses the G/L accounts or account assignments determined automatically"
I also made default cost center for G/L account and plant wise through OKB9.
Now I would like to suppress/dispaly the G/L account and cost center - for same I had done Setting in Entry control menu of OMJJ for 251 of field Account control - Value - "-" field is suppressed. But it is not working.
Please advise to solve this situation.
Thanks & Regards
Rajan

Dear Rajan
Yes, I have checked in MB1A earlier. We have separate node for Field seletion layout for Enjoy transaction MIGO for mvt type in which the G/L account (KONTO) an Cost center (KOSTL) have only optional or required entry selection.
warm regards
Ramakrishna.

How to control the cost center of different company canu2019t be used across

Hi Experts,
There are 3 compamy codes in our system,and the 3 company code in one control area.Each company uses itself cost cent. When I assign cost center to an organization or a position, the cost centers of other company code can be used. We hope that cost center in different company canu2019t be used across. Anybody could help me?
Best Regards,
QC

Hi,
we can use cost centre of company A to the employee of company b.
cost centre means expense will be distributed as per cost centre. it may be a situation where an employee of company a works some time in company B as adeputaion we can assign cost centre of company B still he belongs to company A.
generaly we assign cost centre to position through A011 relation. here you assign the cost centre of original company say A( as he belongs to company A). in IT 1018 you assign different cost centre say company B.cost will be booked to company b as 1018 will supercede a011 relation ship.

Cost center in FB01 - User exit or BADI

Hi,
I would like to change the cost center field data in transaction FB01 with some other data based upon some conditions.
Please suggest with user exits or badi.
thanks.

Thanks for reply.
In the user exits mentioned, checking for cost center value in the import parameter DOC_ITEM_TAB and based on some validations i have changed the it to other value. But this new value is not considered by the program still it is creating with the old value.
The changed value has to be exported from the user exit right? this is not happening as we know dont have cost center field in export or changing parameters
Please suggest

Hide Controlling Area from Cost center in report

Hi Experts,
I have Costcenter as reporting field in BW report. Controlling Area is compunding char for Cost center.
In the report, it shows both values (cost center and controlling area) when i use cost center in query. foreg. KO01/C123456 as key.
(KO01 is controlling area and C123456 is Cost center)
Is there any way to ONLY display Costcenter value in report??
Thanks in advance.
-Abhijit

You can add controlling area IO in the line and hide it (in properties set never display) or you can also insert it in filter with fix value KO01.
Hope it helps.
Regards

Cost Center 1 is locked by user

Hi,
Thank you very much, Im cussessful.
But, now I have an other problem, Im creating cost centers but it says that: " Cost Center 1 is locked by user "
Help me.
Thanks,
Hangvt

hi,
I think the cost center u are creating is already created in the system and is being processed by some user.
Check whether the cost center is already there in the system or not by the tcode KS02 or KS03.
Regards

Individual COst center restriction in BI

My company is also looking for restricting access to cost center specific & we have implemented a solution using Listcube tcode, let me explain the steps.
1. The Analysis auth obj (AA) contains ZCC_AUTH info object which is given aggregated values.
2. this AA is inserted into the role & then assigned to the user.
3. The User assigned to a specific Cost center is inserted into the ODS table.
4. Then the Listcube tcode is run for the infoprovider, which assigns the costcenter to the user Id.
5. When User runs the BI query the assigned cost center values only is retrieved from the database.
But i feel this is has disadvantages
1. Every time a new user is created, the ODS table as to be updated with this info & list cube as to be generated or if a user changes the Cost center then we once again have to update the ODS table & regenerate using the List cube.
Now i would like to know the solution w.r.t user customer Exit with variables
1. when is the customer exit is trigerred -
a. when the query executed by the user is run or when the auth check is done for cost center in the AA object?
2. How to determine inside a query which info object are being checked, i know in RSECADMIN the trace shows which auth objects have been checked - but seeing a query i need to know which auth obejcts have been used for retreiving data.
your suggestions are really helpfull for me to debug this issue we are facing.
Thanks a lot in advance.
regards
Naveen Murthy

1. when is the customer exit is trigerred -
a. when the query executed by the user is run or when the auth check is done for cost center in the AA object?
Ok here's the thing. You are looking at two things that are in sequence. You opted for the System to check for InfoObject (here CC). In order to get that info the system triggers the Customer Exit. So to your question, the Cus Exit is triggered when the query is excuted. And based on the info in the Customer Exit the system check for the Cost Center Access.
2. How to determine inside a query which info object are being checked, i know in RSECADMIN the trace shows which auth objects have been checked - but seeing a query i need to know which auth obejcts have been used for retreiving data.
I doubt if that info is available in the query, since queries are build based on InfoObjects and not auth objects.
AB

Block default cost center in OKB9

Dear Experts,
- If I would like to block one cost center which setting in OKB9 as defaul cost center, then change it to other cost center, what is the affect?
- If cost element in OKB9 is having no cost center as default , then how the transaction from FI flow to Controlling?
Kindly advice.
Thank you.

Hi Puri,
When you give any Cost Center as default object in OKB9 for any Cost Element, that means, whenever there is a posting in FI in that GL, the system will prompt the default Cost Center in that line item. User will still have facility to change that cost center and can enter new cost center.
If you want to replace a new Cost Center with a old Cost Center in OKB9, you can do that at any point of time. No implications.
If you do no mention any Cost Center as default object in OKB9 for GL, nothing will happen but the User has to select the Cost Center manually at the time of FI postings.
Srikanth Munnaluri

Cost Center Date format Issue.

Hi,
All Experts.
I am facing one problem for Cost Center creation date.
I am working for US and Canada company code. controlling area is having 30 Group Currency. CO area is completely configured and working fine.
At the time of cost center creation when I am giving period interval 09.10.1900 to 12.31.9999 MM - DD - YYYY format.
But it is giving error as
Invalid date Message no. 00064
All Company Codes are perfect and having country US so, as I understand date format is taken from countries defined in SAP General Settings & countries for CRM and etc..
Where my configuration went wrong ?
I am wondering in Controlling Area for any settings for Date format but fail...
Does any one having idea for this ?
Expert guidance will be really really great on this.
I questioned that has SAP given a US date format for controlling or not ?
Like for Cost Center & Cost Element ... etc.
Regards,
Sharvari.
Don't cross-post: especially, not under different users

Hi
Please check the settings in OY01.
As per it, you must either use MM/DD/YYYY or MM-DD-YYYY and not MM.DD.YYYY.
Also check the "Defaults" in the user settings (T.code SU3).
Regards

Control user access to FBL3N by cost center

Similar Messages

Maybe you are looking for