KB21N, KB11N:how to restrict by cost centers users can post to

Hello Gurus,
SAP is not restricting  Cost centers  which can used for internal activity allocation KB21N  and re-posting of primary cost KB11N.
Users should only be able to post to the authorized cost centers with the standard hierarchy.
Unfortunately KBXXN transactions are not checking K_CCA authorization object , which other-wise could have been used to restrict user based on responsiblity area ( cost center group)
Any one came across this scenario, i check all relevant OSS notes related to KB21N . Let me know if i missed any OSS notes
regards
SAPfreek

Hi,
If you start the transaction KB**N (including KB11N)  you can only use restrictions on the controlling area by using the authority
object "K_VRGNG". (Please review T-cd:SU24 for the transaction)
The authority objects "K_CCA" and "K_ORDER" allows to use restrictions on single cost centers and orders but these two authority objects are not checked if you use one of the transactions KB**N It's not possible to use any other restriction than the controlling area for one of the above transactions.
There are two possibilities to extend the authorization checks in KB**N:
a) using the validation tool:
   An validation is nothing more than a check whether some customized   conditions are fullfilled or not. If not, the system will send a   self defined message ( Error, Warning, Information ).
   You can find some explanation about validations in our documenation   and in the reference - IMG under:
   Controlling - Controlling General -  Account Assignment Logic.
b) using the user-exit (Enhancement COCCA002 and COCCA001)
   See note 375725 for additional information
The enhancement is called up by function module K_ORGUNIT_AUTHORITY_CHECK. Because the standard authorization object
K_ORGUNIT does not at that point have any fields, this enhancement is the only one executed.
Please also review  note 370082 for information on the concept of the responsibility area in authorization.
regards
Waman

Similar Messages

  • How to restrict the Cost Center Search ?

    Hi everybody,
    Im a little bit worried... In my Org Model, I defined in the CNT user's attribute some Cost Centers. 
    I was thinking that this action would restrict the Cost Centers that the end-user can use. 
    Obviously not.. it seems that it is just a default value, but the user can search and put any cost center.  The same concept applies for the GL account.  =(
    Somebody knows how to really restrict the cost centers that an user can use ?
    I appreciate your help a lot !!!
    Regards,
    Diego

    Hi Diego,
    For cost centers search help in SRM, there are 2 options:
    1 - You use the backend search help, then backend search help is called directly, and the attributes are not taken into account.
    2 - You do not use the backend search help, then a HTML select option (dropdown list) of codes is shown to the user with all the values entered (one by one) in the user attributes (or herited values, but ranges are not supported).
    The first option is used as soon as the user has the authorization object (authorization object SRM 3.0: M_BBP_SHLP; authorization object SRM 4.0: BBP_FUNCT/value: BE_F4_HELP)
    What I understand, is that you want to use the backend search help, with a limitation upon the user attributes: this can be done using the search help BADI.
    Regards.
    Vadim

  • HOW TO RESTRICT display COST CENTER LIST IN IT0001

    Hi All,
    I want to restrict view of cost centers in HR module (IT0001, IT0027, PP01).
    User shouldn't view other company code cost centers.
    Can anybody know Authorization Object OR any other solution ?.
    Thanks.
    KK.

    Hi.
    Please follow this link:
    Personnel Management
    Personnel Administration
    Basic Settings
    Customizing User Interfaces
    Change Screen Modifications
    And find the P0001 P0027 and HIDE the field: Cost Centre.
    Regards!
    Woody.

  • How much does CLAD cost? When can I sit for such an examination?

    I am interested in obtaining a CLAD certificate. I live in Beirut. I have found some test centers from http://www7.pearsonvue.com/Dispatcher?application=VTCLocator&action=actStartApp&v=W2L&cid=383 but I didnt get a reply when I asked them about cost/time.
    Can you help me by answering the questions?
    How much does CLAD cost? When can I sit for such an examination?
    P.S. I've been using LabVIEW for 5 month already.

    Hi A.A.A.,
    I'm glad to hear you are interested in pursuing your Associate Developer Certification. With regards to pricing and scheduling your exam, I recommend you contact the Certification specialists at your local National Instruments office. I believe that is National Instruments Arabia. You can send an email with your questions to [email protected] or phone # +961-1-33 28 28, and they will work with you to purchase and schedule your CLAD exam.
    Five months is a great start at familiarizing yourself with the LabVIEW environment. However, I definitely recommend taking a look at the exam preparation materials to ensure you are familiar with all the topics and terminology you could be tested on. If you go to the Certification Preparation Page (the link I included below) and select the Associate Developer exam and your timeframe, the page will return all the official preparation resources the Certification Development team has made available online. We also have some other posts on this forum with regards to exam preparation.
    http://www.ni.com/training/certification_prep/
    Best of luck!
    Mallori M
    Mallori M
    National Instruments
    Global Customer Education Program Mananger
    Calculate the time you will save with NI Training

  • How to add a role so user can do Export, Copy & paste Master Data?

    How to add a role so user can do Export, Copy & paste Master Data? Thanks!

    Add S_GUI to the user role.

  • How do I make it so users can log in and sign up on my adobe muse website

    How do I make it so users can log in and sign up on my adobe muse website?

    If you would read through the Muse forum, this subject has come up multiple times.
    Muse does not currently support CMS, passwords, logins or bespoke client areas.

  • Reporting Restrictions by Cost centers

    Hi
    I have a cost center reporting role which has an object  K_CSKS where we maintain cost center values. Now we have a many CCs maintained for this object. SO manager of CC 100 can also see reports for CC 200 which we want to restrict. How can we restrict CC access for a user. I want to avoid creation of 100s of roles by each CC.

    Hello Vishwas,
    I suggest you to do  the following :
    each cost center belong to a cost center group. you can see the connections with transaction KS13.
    Anyway , to make the creation of this roles easier, you need that the fields KOSTKL (cost center) and the field RESPAREA (CO-OM Responsibility Area) will be in the ORGLEVEL area.
    when this fields are there , you create a master role with all the transaction that are needed to manager of CC.
    you create the first derive role with a specific cc or a cost center group which contain his cost centers .
    the second derive role is a copy of the first one and all you need to do is to update the new cc and the cost center group at the orglevel area.
    Regards,
    Haim Brauner

  • How to  handle blocked cost centers from Payroll to FI (RPCIPE00)

    We have the need to do retro payroll adjustments - the problem is that many times the original cost centers are blocked.  This causes errors in the feed to finance via program (RPCIPE00).  How can we avoid this error?  We have considered using payroll substitution - but we understand that this will not send just the adjustment amount to the substituted cost center - but in effect create a transaction reversing all of the original transaction and then repost.
    Has anyone tried an enhancement point in RPCIPE00 to try to address this problem?  Any other suggestions?
    Any ideas would be appreciated.

    Hi
    The salary is sent to GL and charge payroll account XXXXX
    When you import the employee time to Projects, you will distribute the expenditures. Verify you set up the auto accounting rules so the project labor costs will debit the project cost account on GL and credit the payroll account XXXXX.
    At the end of each period you will see that the employee salary was allocated to the projects.
    If the labor rate you use are not accurate, you will see that payroll account XXXXX is not totally offset. Remaining balance of account XXXXX has not been absorbed in project costs. Depending on the significance of the residuals, you may consider updating the labor rate and recosting.
    Dina

  • How to Mass change cost centers for assets

    Dear All,
    I have change the cost centers for about 1500 assets. I am not sure if there is an easy way to do it. Is there any way to get this list in excel and upload?
    I am using ECC 6.0 (I think CATS could not be used.. but I might be wrong). Thanks in adv for your help.
    SD

    Hi
    I hope the above given suggestions will not fullfill your requirement,
    Do follow the below steps for carrying out mass change of cost centers in asset master data.
    Enter t.code-AR01 - Generate
    Enter your Co.code and the assets numbers for which the cost centers have to be changed and execute.
    In the next screen select Create worklist (CntrlShiftF8)
    Give the worlist a Name and select-Change asset w/o dialog (bulk change) and press enter,from the next pop up select create Substitution,where you will be taken to creation of Substitution rule.
    Write a Substitution as per requirement and assisn the same to your company code.
    Where  you will be prompted with a message "Work queue XXXXXXXX added".
    Now enter into AR31 - Edit and release the woklist and see that your mass change of cost centers is carried out.
    hope this might help you in doing mass change of cost centers in asset master record.
    Good Luck
    Hari

  • How to use multiple cost centers with internal order for PO

    Dear Gurus,
    I have one issue.
    For indirct purchase with posting over internal order, my client wants to book good reciepts over different cost centers.
    Thanks In advance
    Regards,
    Sameer

    Hi Sameer,
    For the scenario you have mentioned, you need to check the account assignement at the PR/PO wherein
    you can take Cost center as actual object & internal order (statistical) as assignments.
    At the time of Goods receipt the system will the automatically post to Cost center with a statistical posting to Internal order.
    You have the second option of maintaining account assignment at time of PR/PO as Inetrnal order only (Actual) & then at the month End you can settle the cost to multiple Cost centers by defining the settlement Rule. For Eg. At the time of settlement you can post 20% to Cost center "A", 50% to Cost center "B" & 30% to Cost center "C".
    Assign points...if useful.
    Regards,
    Amol

  • How to restrict changing password for user ?

    Hi All experts ,
    We have created users . Users should not change their password without permission of Administrator . How to restrict them by setting Permissions / Authorizations ? 
    Thanks.
    KISHORE SATPUTE

    Hi,
    In "USER MAINTENANCE- SU01" --> in the "logon tab" there are 5 different "user type"
    1. dialog
    2. system
    3. communication
    4. service
    5. reference
    Kindly mention the function and role of all the above mentioned user types specifically and hows is one user type different from another.
    These are as follows:-
    1. Dialogue:-
    For this kind of users:-
    GUI login is possible.
    Initial password and expiration of passowrd are checked.
    Multi GUI logins are checked.
    Usage:- These are used for GUI logins.
    2. System
    For this kind of users:-
    GUI login is not possible.
    Initial password and expiration of passowrd are not checked.
    Usage:- These are used for internal use in system like background jobs.
    3. Communication
    For this kind of users:-
    GUI login is not possible.
    Users are allowed to change password through some software in middle tier.
    Usage:- These are used for login to system through external systems like web application
    4. Service
    For this kind of users:-
    GUI login is possible.
    Initial password and expiration of passowrd are not checked.
    Multiple logins are allowed.
    Users are not allowed to change the password. Only admin can change the password
    Usage:- These are used for anonymous users. This type of users should be given minimum authorization.
    5. Reference
    For this kind of users:-
    GUI login is not ible.
    Initial password and expiration of passowrd are not checked.
    Usage:- These are special kind of users which are used to give authorization to other users.
    Rewads point if helpful
    Thanks
    Pankaj Kumar

  • How to restrict manual setting of User Status?

    Hi,
    I have created an User Profile where a particular User Status is "set" based on the Business Transaction "Release".
    However, we are also allowed to set this User Status manually without carrying out the Business Transaction "Release".
    How do I restrict manual setting of those User Statuses that are "set" based on a Business Transaction?
    Raj

    Pete,
    I did read that post. But it is about providing authorisation to set a Status for an User.
    The case I am referring is, an User Status is auto set by a Bus. Trans Release. But I am also permitted to set the status transition manually. This way, Users tend to skip Releasing the Service Order. This is affecting upstream processes.
    Is there a way where we can restrict manual setting of User Statuses that have to be normally auto set by Bus. Transactions?
    Raj

  • Hi, my Iphone 6 dropped in water, and couldn't save it back although I tried with rice bag. So,how much would be cost if I can exchange with new one? Please kindly drop message about how to deal with it. Thank you.

    Hi, My Iphone 6 " iOS 8.1"  is dropped in water, and couldn't save it back although I tried with dryer and also put it in rice bag for 3 days. The flash light was still on even though the screen shows up nothing at all when i try to switch on after 3 days I put in the rice bag. So,how much it would be cost if I can exchange with new one? Please kindly drop message about how to deal with it. Thank you.

    Out of Warranty replacement on iPhone 6 is $299 US, adjust for your location.
    It is highly suggested that you make a Genius Bar appointment to avoid delay
    if going to an Apple store.
    Make a Genius Bar Reservation
    http://www.apple.com/retail/geniusbar/

  • Correcting Cost Centers on a posted vendor invoice

    Hi,
      If I posted a vendor invoice with an expense account posted to wrong Cost Center, is it possible to correct it FROM FI and not within CO. I know we can allocate the costs within CO but I want the correction to be made within FI as well.
    A workaround I was thinking is re-posting the following in FB60:
    Debit Expense 1000  old Cost Cntr
      Cr Expense  1000    new Cost Cntr
    but this won't let me post an invoice with 0 in the "Amount" field in header.
    Any other options?

    If you can reverse the transaction i would suggest doing that using FB08 and re-key to the correct cost center. If you cannot do that, then you can post journal entry you mentioned using transaction FB50 or FB01 and NOT FB60. Since it is a transaction between two GL Accounts you cannot use FB60.
    Hope this helps.
    Shail

  • How to restrict the EBS end users to run only two same reports at a time?

    Hi,
    We are using EBS 12.0.6 and database 10.2.0.3.
    Is it possible to restrict the end business users to run only two reports at a time?
    OR
    Is it possible to restrict the end business users to run only two same reports at a time?
    Thanks.

    Is it possible to restrict the end business users to run only two same reports at a time?It is not possible.
    You can either make the report "incompatible" to itself (this means only one user in your company can run it at a time)
    Or not make it incompatible. (That means any user can run it any number of times)
    Incompatibility is a way of specifying which requests cannot be run under which circumstances.
    See http://download.oracle.com/docs/cd/A60725_05/html/comnls/us/fnd/incomp.htm
    You can use Hussain's suggestion to use Concurrent: Active Request Limit profile. You can set this profile value at each user level. But if you decide to set it at global level, remember to keep it a higher value for sysadmin kind of users that run scheduled jobs.
    Hope this helps,
    Sandeep Gandhi

Maybe you are looking for

  • Hooking Up LCD TV Using mini DP to HDMI adapter ?

    I am wondeirng if the Mini DP to HDMI adapters will work for my application as I have searched a few MFG. websites for the details but it seem all will only work fully (audio + video) with a LCD TV with a HDMI chip V1.3 or above. A LCD TV with a HDMI

  • Trading partner updation in the accounting document

    Dear All, We have updated the trading partner in the vendor master. While MIRO I find the same is getting updated in the vendot line items but it is not getting updated in the other line itmes of the accounting document. Please suggest hot to populat

  • Volume too low on download from itunes store how to fix

    My download from itunes store won't play on my ipad at a decent volume.  How do I fix it?  Actually, I suspect the download itself is too low and fuzzy.  How do I reload?

  • Some websites load small banner insted of full window

    Some windows are loading in a window at the top about 1/4 the size of the size it should be. my browser screen is fully expanded, most websites work but some still load this way and i have no idea why. Any help on this issue would be really appreciat

  • Getting error on Portal : Access via 'NULL' object reference not possible

    hi friends, While executing a bapi,I am getting this error : Access via 'NULL' object reference not possible., error key: RFC_ERROR_SYSTEM_FAILURE I am calling a bapi with only one required parameter from Portal as per the design of the bapi and the