How to create authorization groups for G/L Accounting

Hi:
I have a problem with authorizations groups in FI, I hope you could help me.
We want to control access to accounting in FI by authorization group so user only can work with some G/L accounts.
I have seen in transaction FS00, in control data tab, a field called Auth. Group, but I really donu2019t know if this is the right field.
Do you know how I can control access to G/L Accounts by Authorization Groups? Perhaps must I to create a new Authorization Group by roles? We have 4.6c.
Please, any help is welcome.
Thanks in advance.

Hi
Update the authorization group field in the GL master with any user defined value and then include the same in the respective user roles against the authorization object - F_BKPF_BES-BRGRU in PFCG
Ensure you have updated 'Authorization group' for the GL accounts in your chart of accounts
Thank You,

Similar Messages

  • How to Create Authorization Group for SAP Standard Tables

    All,
    I have 10 standard tables which are required to maintain by the user in Production environment.
    Is there any way to create a custom auth group for the standard table?
    Is it possible to assign same table in two different auth groups?
    Please advice
    Thanks,
    Kotesh

    Multiple tables can be linked to an auth group, but one table can be linked to only one auth group.
    You cannot link one table to more than one auth group.
    It is always advised to try to find an existing auth group having tables of same functinality and criticality, before creating a new auth group.
    In case you don't have any such auth group, I feel you can create a Z auth group using se16->tbrg.
    You can also create auth group using tcode se54.

  • Creating Authorization groups for material types

    Hi All,
    I have a requirement to create Authorization groups for different material types we have in our company. Basically these are intended to restric the users from accessing the material master. Different material types needs to be assigned to differnt group of users.
    So if we can create couple of Authorization groups, then I am thinking of assigning the material types to these groups.
    I went to SPRO---Logistics general ---Material master -
    Tools --- Maintain authorization and authorization profiles.                 TCODE : PFCG
    Is this the right path?
    Please advise
    Shane

    Hi All,
    I don't think SPRO---Logistics general -Material master- Tools --- Maintain authorization and authorization profiles is the right path to create new authorization groups.
    Can anyone explain how to create new authorization groups for different material types. The purpose is to create a role and assign this auth. group to this role and provide that security role to specific users.
    Regards
    Shane

  • How to create authorization role for just displaying query prefix Q and X.

    Hi Expert,
    I hope someone can help me on how to create authorization role for just displaying and executing  BEX  Queries prefix Q and X. I'm currently using SAP BI 7.1.
    Actually, I already created one role called : Z_FORINDO_ONLYDISPLAY_QX
    where I only put in the Authorization Component (in the Role Maintenance - Tcode 'pfcg'):
    -->Manually Business Information Warehouse
        --> Manually Business Explorer - Components
    Activity : Display, Execute, Enter, Include, Assign
    InfoArea : *
    InfoCube : *
    Name(ID) of a reporting component : *
    Type of a reporting component : Calculated key figure, Restricted key figure, Template structure
        --> Manually Business Explorer - Components
    Activity : Display, Execute
    InfoArea : *
    InfoCube : *
    Name(ID) of a reporting component : Q* , X*
    Type of a reporting component : Query
    But, the problem is I still can make changes on that queries (Q* and X*). Even, I still can run query with prefix Z. I use S_RS_RREPU Tamplete for Query Display and execution.
    Please assist. Very much appreciate your help. Thanks.
    Edited by: nadiyah salleh on Mar 18, 2008 11:22 AM

    Question close. This issue has been resolved.

  • How to create user group for EIS (Executive Information System) KCBA

    Dear Experts,
    How to create user group for EIS (Executive Information System)
    TCode KCBA
    Regards
    Saurabh

    Hi ,
    Check the below link ,hope it will give some inputs for creating groups.
    http://help.sap.com/saphelp_470/helpdata/en/5c/c1c81c445f11d189f00000e81ddfac/content.htm
    Regards
    udayakumar.k

  • How to create authorization group in SE11

    Hello experts,
    I need to create a new authorization group for my custom table so that only users in this group will be allowed to maintain my ztable in SM30(table maintenance).
    Again, thank you guys and have a nice day!

    Re: Standard FM for table maint.
    su21 is used for maintenance of authority objects:
    http://www.sap-img.com/basis/useful-sap-system-administration-transactions.htm
    http://sap.ittoolbox.com/groups/technical-functional/sap-r3-basis/please-how-to-create-an-authorization-object-386391

  • How we create Schema group for every vendor?

    If we have multiple vendors/transporters, how you configure pricing procedure for each vendor what is the process of creating Schema group for every vendor?
    Thanks in advance
    Suresh

    hi suresh,
    you create Pricing procedure, and then you create Vendor schema group; and purchasing schea group.
    for your scenario you will create N number of vendor schema groups.
    follow this menu path:
    spro --> materials management --> purchasing --> conditions --> define price determination process --> Define schema determination --> define caluculation schema for standard purchase orders -->
    in that screen:
    you maintain entries in the combination of
    purchasing org schema group  -- vendor schema group -- pricing procedure.
    for your scenario, you maintain N number of vendor schema groups and assign it to procing procedure.
    hope this may help you,
    Regards
    srinivas

  • Authorization Group for G/L Account

    Hi,
    What?
    - I wish to restrict the 'posting' of a G/L account to be done by certain users only
    How?
    - What I have done was...
    a) From FS00, I have added a free-text (BANK) into the Authorization Group for a G/L account
    b) From PFCG, a new role was created to allow these 2 Authorization Objects, F_BKPF_BES and F_SKA1_BES
    c) 'BANK' was entered for the Authorization Group for both these 2 Authorization Objects
    d) From there, I have assigned this new role to the user that I wish to allow Posting of the G/L account
    Problem?
    - Other users still can do Posting for this G/L account
    - Any steps which I have missed out here or done wrongly?
    Thanks,
    Brandon

    Hi,
    Some other roles of the users may override and cause the users to post against this GL account.
    Check all the roles relevant for the restricted users. 
    Use SUIM t-code to find if the auth object mentioned above is included in any other role.
    If it be, restrict that again.
    Generally if one role as no restriction against this auth and not all, this issue tends to happen.
    Regards,
    Sridevi

  • How to create Logon groups for JAVA Systems

    Hi,
    I am implementing an BI JAVA Landscape. We do have 1 Central Instance(CI) and 2 Dialog Instances (DI) JAVA Standalone. Everything based on NW04s
    I have set up a Web Dispatcher to do a load balancing. The Web Dispatcher is connected to the Message Server (MS) of the JAVA CI to get all the information about the Engines.
    I am now looking to create Logon groups to distibute the load according the application used applications. I am not sure if there is a possibility to set up logon groups (server groups) directly somewhere in the J2EE engine, or if I have to set this up in the WebDispatcher konfiguration files?!
    Thanks in advance and best regards,
    Dominik

    We're trying to do something similar with NetWeaver CE 7.1.
    According to [this documentation|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3dbe11a82b6bf1e10000000a1553f6/frameset.htm] there are 3 steps to doing this for NetWeaver CE 7.1:
    1. Logon Groups
    2. Web Dispatcher profile changes
    3. HTTP Provider property changes
    We've set up a Logon Group in the NetWeaver nwa and associated the two instances (one host) with it.
    "[Configuring Logon Groups Using Configuration Files|http://help.sap.com/saphelp_nwce10/helpdata/en/45/3c3f0cad9f4c2de10000000a1553f6/frameset.htm]" says: "...to create the files using HTTP Provider service."
    There it doesn't say exactly how to generate those 3 text files; it says: "1. Create the icrgroups.txt and urlinfo.txt files that define the logon groups. For more information, see the documentation of SAP Web Dispatcher." ; but, has no link to what it says to see.  So, I manually go to ["SAP Web Dispatcher", "Assigning Logon Groups"|http://help.sap.com/saphelp_nwce10/helpdata/en/b4/9aa8862e714e6db8e74e48e5d3283b/frameset.htm].  But, it all pretty much breaks down there because it's referring to apparently non-NetWeaver CE 7.1 stuff (as near as I can tell); for instance, how do the transactions SMLG and SICF relate to NetWeaver CE 7.1, or am I in the wrong place?
    I tried to press ahead with files similar to the examples here, but I hit this error in the Web Dispatcher:
    [Thr 5132] *** WARNING => ICT: path prefix /Curam/ not allowed in this context. Only prefix / allowed. [ictxxptab.c 764]
    [Thr 5132] *** WARNING => When a file is specified in wdisp/J2EE/url_map_location only URL prefix '/' is supported. See also SAP note 1033470. [icrxx.c 2925]
    The note reference looks hopeful, but I cannot read it; I get:
    Note 1033470  
    The requested SAP Note is either in reworking or is released internally only
    Does anyone have a copy of this Note or knows if it's helpful?
    Has anyone done this with NetWeaver CE 7.1?
    Tahnks,
    William

  • How to create global groups for end users

    Just started deployment of Lync 2013.  We do not host our exchange / mail internally.  It is a hosted solution (not exchange).  We do use outlook though.
    It has been a long time since I set up Lync (Since OCS 2007 / 2007 R2)
    Can someone please tell me how to create groups for all users on the Lync Client and populate them from groups in AD.Right now we are using Spark and we have decided to use Lync.  In Spark it queries AD every day and populates the groups from AD
    groups that we have defined.
    I know that users can create there own groups, but we prefer to have every client have every group (department) and those in department listed below rather than them have to manually add them individually.
    Thanks for your direction.
    John

    Hello john,
    Lync Client can't use AD group or Exchange mail group. You can't create Lync client group with AD GPO. each Lync user can create their own group in Lync client and of course can delete.
    You can not manage Lync client within the
    group as the centeral. There is no such
    feature in Lync. you can examine 3rd party applications. for example ;
    http://www.vytru.com/contacts-manager-for-microsoft-lync.html
    Regards
    Zulfikar CAGLAR
    The statement is incorrect. You CAN use Distribution Groups from Active Directory in Lync Client:
    http://support.sherweb.com/Faqs/Show/how-to-add-contacts-from-distribution-lists-in-lync-2013
    Please “Vote As Helpful” and/or “Mark As Answer” if this post helped you.

  • How to Create a Group for Permissions?

    When I create a new folder, the default owner is my home directory name ("short name") and the default group is also my home directory name ("short name"). Why is this? What is a group? How do I create a group name if I want to pick one myself?
    Are there any good tutorials/books on permsissions/owners/groups that explain how to set up accounts and use permissions at the average user level? "Mac help" is very skimpy in the a how/why to do something with ownership and permissions.

    In Mac OS X, every user account is a member of at least one group, and every file and folder has group permissions assigned. Groups give permissions to sets of users who are able to perform similar functions. Mac OS X does not provide an application to easily create and manage groups. Instead, it uses some preset groups to give users permissions and functionality. If you need to create and manage groups, you will need to use Mac OS X Server, or the built in NetInfo Manager.
    If you need more information, any book dealing with OS X and Unix should suffice.

  • How to create new group for material type

    Hello all experts,
    Im unable to create a new group for materials types, diff groups for FG and raw materials material type??
    Could you pls help ??
    Thanks in advance.

    Hi
    When you create a new material you have to specify the material types like finished goods or raw material like that in the initial screen
    For this new material types can be defined in
    SPRO -> Logistic - General -> Material Master -> Basic Settings -> Material Type ->Define attribute of material Type
    T code OMS2
    After specifying the material type and giving organizational data like plant, storage location,sales org etc we go on to create the material
    In one of the tabs the material groups should be specified and from MM point of view it is a reqd entry
    this can be defined in
    Define Material Group
    SPRO -> Logistic - General -> Material Master -> Setting for Key Field -> Define Material Group
    T .Code: OMSF
    I beleive this is what you are asking about
    Regards
    Raja

  • How to Create a group for text in XML publisher template

    Hi-
    Can i try to group the several text of lines so that I can split to a different page, in case text exceeds the page length
    Regards,
    DMAC

    In Mac OS X, every user account is a member of at least one group, and every file and folder has group permissions assigned. Groups give permissions to sets of users who are able to perform similar functions. Mac OS X does not provide an application to easily create and manage groups. Instead, it uses some preset groups to give users permissions and functionality. If you need to create and manage groups, you will need to use Mac OS X Server, or the built in NetInfo Manager.
    If you need more information, any book dealing with OS X and Unix should suffice.

  • How Create a group for email

    I would like to how to create a group for email.

    You cannot create a group in the built in mail app. You need a third party mail app to do that. I have never used either app, but both of theses will fulfill that function.
    MailShot
    https://itunes.apple.com/us/app/mailshot-pro-group-email-done/id445996226?mt=8
    Group Email!
    https://itunes.apple.com/us/app/group-email!-mail-client-attachments/id380690305 ?mt=8

  • How to create Authrization Group?

    Hi All,
    Can anyone plz tell me how to create Authorization Group in R/3?
    Its quite urgent. Kindly update me asap.
    Thanks and Regards,
    Faisal

    Hi,
    Can you pl give the info on how to add/delete a table to an authorization group(pl give brief description).
    Thank in advance.
    Chinna.

Maybe you are looking for

  • How to open and use mac outlook email file on pc

    I recently moved from mac to widnows platform. I have my emails exported from mac in a file and now when I try opening the file on windows pc, it simply does not recognize it as a valid file. what shall be done to get emails back?

  • Can I down load the music on my iPOD Classic to iTunes as my PC died and I no longer have many of my CDs?

    My PC recently died. I have purchased an ACER Aspire TC ATC-605-UW2U with 8 Gb Ram and an Intel I5 3.2 GHz processor. I would like to know if i can sync my ITunes to my iPod Classic (Transfer the music on  my iPod back to iTunes)?

  • Dual Boot,XP Pro Ok but Win 98SE cannot boot

    I have a dual boot system, with 2 primary partitions, and bootmagic installed.  My boot disk is on raid 0 on the raptor drives. Installed Win 98SE first, than created second primary partition, installed win xp pro.  Installed bootmagic on 1st primary

  • Where is the online CHAT support area?

    Historically, the couple times I had problems I would simply do online chat support. Is that area located somewhere special? I cannot find it anymore. Is it only available for the first 90 days or something, and then even the icon dissappears?

  • Windows Service Monitoring

    Hello All,  I have implemented a Windows Service Monitoring to look after some custom windows services on a Windows Server with a 3rd party piece of software installed. The monitor has been working as expected and has kept an eye on the services and