Dual control on sensitive fields change

Question

Dear Expert
i would like to understand the implementation steps for dual control function. is there any complete guidance that able to share?
i have the following questions too:
based on my study, i don't see where is the control on this dual control function? because we still can post invoice and payment except blocking in payment run only.
in the standard functionality, is there any notification can be sent to authorised person whenever there is a change of sensitive field?
if the change is rejected, any notification can be sent to the person in charge, and how to do this?
so when a change is being rejected, but the change is remains effective, meaning that user needs to change back to old value manually?
is there a field named "One Time Account" in vendor master data? this was one of the sensitive fields that highlighted by IT auditor.
thanks in advance for any feedback.
Rgds
Joslyn Tan

Answer 1

Hi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas