Restriction on GL posting

Dear experts
I have to restrict GL XXXXXX post for some user.Please suggest me validation and substitution for it.
Thanks and regards
Sachin

Hi
If you want to Restrict G/L Account for a particular Users to Post, then this is possible through Authorizations.
First you need to put the G/L Accounts which you want to restrict under Group 1 and the rest of all G/L Accounts in Group 2. Then for the particular Users , in their Roles we have to assign the Authorization object for Posting of the Group 2 created for rest G/L Accounts & Authorization Object for Display of the the Group 1 created for Restricted G/L Accounts.Then those particular Users will not be able to Post to those one Group
I have explained you the scenario how to do.Kindly tell your Basis Guy to do it.
Regards
Venkat

Similar Messages

MIR7 - USER RESTRICTION IN PARK & POST

Dear Guru,
I have scenario where I would like to place user restriction for parking & post of document in MIR7, further there is any kind of validation check I can place or authorisation check from bases will do or any other way pls advice in detail.
Thanks in advace.
Vishal

Hi vishal sharma,
For this Authorisation is enough .validation is not required .check it out with your basis team.
Regards
Surya

Ability to restrict an account posting

hi ,
Ability to restrict an account posting to a specific cost center or project by user's level
thanks

hi,
i once tried this.
go to GL responsibility\set up\financials\flexfields\key\rules.
click search (torch icon)
select the application as Oracle General Ledger
when back to the 'cross validation rules' form, under the 'cross validation rules' tab, add a new rule.
from here you cam play with the account range.
remember to put an include and an exlude rule for completeness.
i hope this helps.
for restricing a project, some back end coding is required. i will get back you later.

Restrict display and posting for specific document types

Hi,
Is it possible to restrict display and posting for specific document types? I want to restrict authorization to SM document type in FS10N, and KSB1 tcode. Please help
Best Regards,
KIRAN.

Sandipan Choudhury wrote:
FS10N checks for this object ("Check" in Su24) but when user doesnot has this authorization object he gets access to all doc types and when the user is restricted to specific doc types (object present in user's authorization) he will get access to only those doc types. This is how the authorization check for F_BKPF_BLA works, in other words this authorization is Optional.
Sorry, but this is not true and seems to be an invention of how you would like it to work...
The coding works like this (generally):
    if sy-subrc ne 0.
      select single * from t003 where blart = postab-blart.
      check sy-subrc = 0.
      blrtab-blart = t003-blart.
      blrtab-brgru = t003-brgru.
      append blrtab.
    endif.
    if blrtab-brgru ne space.    "<--- important condition!!
      authority-check object 'F_BKPF_BLA'
           id 'BRGRU' field blrtab-brgru
           id 'ACTVT' field actvt.
      if sy-subrc ne 0.
        rcode = 4.
      endif.
    endif.
endif.
The "optional" aspect is whether or not the document type has an auth group on it in T003, failing which the check is suppressed.
If it reaches the check, then it found something and then checks that selected value.
Moral of the story:
--> Do not believe SU53.
--> Do not make assumptions from ST01 traces.
--> Read the documentation carefully.
--> Read the code to see how it really works (you can jump to the coding location from the trace).
Cheers,
Julius

Restrict Open / Close Posting Periods for Users (OB52 / S_ALR_87003642 )

Hello everybody.
I'd like to know if there is a way to restrict that some users open posting periods in OB52 or S_ALR_87003642 and some other different users close posting periods.
Hoping you could help it, as our organization had that policy from our previous system,
Best regards,
Elvis E. Henriquez A.

Hi
Sorry, but I do not think that's possible in SAP Standard.
OB52 / S_ALR_87003642 are build around a maintenance view for table T001B. This mean that the access primarily are controlled by the S_TABU_DIS (and S_TABU_LIN) object, and with these object's you can control access to maintain / display only, you can not control the values of the input data.
I think that you will need to create your own application and authorization object in order to achieve your requirement.
Regards
Morten Nielsen

Document type restriction in GL posting.

Dear All,
How can i restrict a GL account to have only one specific document type documents. I mean only one document type should be posted to that GL.
It should not contain any other document type other than specified one.
I know this is possible through validation. But it is not checking if i write validation in OB28. If possible can any one guide me in writing the validationIs there any other way to restrict
a GL for only one document type.
Please reply...thanks in advance.
sapuser.

Hi,
To make the GL account specific to a particular document type, you can write the validation as below:-
Step 1:-
Create a message ID via transaction code SE91 for message class /EACC/MSG/ACC_COMP as you want to display to user.
Step 2:-
Go to transaction GGB0 and create the validation step at complete document level in Financial Accounting as below:-
Pre Requisits:-
BKPF-BLART = 'KR'. (example KR doument type)
Check:-
BSEG-HKONT <> '1234567890' (the account no. you want to get posted only with the document type given above.)
Message:-
Message created in step 1 as error message.
Step 3:-
Please also check that this validation has active status (Status=1) at line line item level (level 2) for your company code in transaction OB28.
Regards,
Gaurav

How to restrict user to post in GL a/cs thru validation rule ?

Hi Experts,
I want to restrict an user to post transactions for tds related gl accounts.is that possible through Validation rules.
Actually i created a step and under that i configured prequisite,check and message.
In "prerequisite" Company code = xxxx and user name = fffffff
in "check i configured, all restricted GL accounts
In "message" -
GL account restricted to post by user fffffff
But still the problem is not yet solved as the user is able to post transaction in that GL accounts.
Plz guide.
Sumeya offrin

Hi Neeraj,
Thank you for the response.
Xtely.i have done the same.created an authorization groupp and assigned the group in GL account master data(control data tab) and even the group contains the users who are authorized to post into these GL accounts.
But sorry,the problem not yet solved.
Anyother solution?
waiting for the another response.
With Regards,
Sumeya offrin
Edited by: sumeya offrin on Nov 26, 2008 1:47 PM

How to restrict user to post document segment wise/Profit center wise

My client wants to restrict users segment wise to post account document.
we use documnet splitting segment wise.
Thanks
Chinmaya.

Hi
Check with your BASIS guy if authorization object is available for the field SEGMENT... There are some issues yet with this because it is not available in some T codes
If the same is not available, you can ask your ABAPer to create a Z authorization object for this field and write a small ABAP code in the exit RGGBR000 (FI validation)
Sample code is attached below to check auth for Plant in Internal order...ZCO_INTPORD was the Z auth object created...
CHECK i_aufk-bukrs IS NOT INITIAL.
CHECK i_aufk-werks IS NOT INITIAL.
AUTHORITY-CHECK OBJECT 'ZCO_INTORD'
         ID 'BUKRS' FIELD i_aufk-bukrs
         ID 'WERKS' FIELD i_aufk-werks
         ID 'ACTVT' DUMMY.
IF sy-subrc = 4.
MESSAGE e398(00) WITH 'You do not have sufficent Authorization'.
ENDIF.
Regards
Ajay M

Restrict User to post 'RE' doc in Tcodes apart from MIRO

I need to Restrict the use of document type “RE”(Inv.receipt- MIRO) while passing manual accounting entries through T code FB01, F-42, F-47, FBS1, F-04, F-51.
I came across a method where ABAP help was required for Object F_BKPF_BLA but can it be done by FI consultant without ABAPer's help ?
Is there any code which we can use? OBA7 has an option to select Batch Input only which will not allow manual posting for doc type 'RE" but not sure whether that will really work.
Experts...pls guide

Hussein,
FNDOPP log file
9/25/13 10:47:48 AM] [Thread-31] Service thread starting up.
[9/25/13 10:47:48 AM] [EXCEPTION] [OPPServiceThread0] java.sql.SQLException: ORA-24067: exceeded maximum number of subscrib
ers for queue APPLSYS.FND_CP_GSM_OPP_AQ
ORA-06512: at "APPS.FND_CP_OPP_IPC", line 85
ORA-06512: at line 1
at oracle.jdbc.driver.SQLStateMapping.newSQLException(SQLStateMapping.java:70)
at oracle.jdbc.driver.DatabaseError.newSQLException(DatabaseError.java:133)
at oracle.jdbc.driver.DatabaseError.throwSqlException(DatabaseError.java:206)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:455)
at oracle.jdbc.driver.T4CTTIoer.processError(T4CTTIoer.java:413)
at oracle.jdbc.driver.T4C8Oall.receive(T4C8Oall.java:1034)
at oracle.jdbc.driver.T4CCallableStatement.doOall8(T4CCallableStatement.java:191)
at oracle.jdbc.driver.T4CCallableStatement.executeForRows(T4CCallableStatement.java:950)
at oracle.jdbc.driver.OracleStatement.doExecuteWithTimeout(OracleStatement.java:1225)
at oracle.jdbc.driver.OraclePreparedStatement.executeInternal(OraclePreparedStatement.java:3387)
at oracle.jdbc.driver.OraclePreparedStatement.execute(OraclePreparedStatement.java:3488)
at oracle.jdbc.driver.OracleCallableStatement.execute(OracleCallableStatement.java:3857)
at oracle.jdbc.driver.OraclePreparedStatementWrapper.execute(OraclePreparedStatementWrapper.java:1374)
at oracle.apps.fnd.cp.opp.OPPAQMonitor.initAQ(OPPAQMonitor.java:558)
at oracle.apps.fnd.cp.opp.OPPAQMonitor.init(OPPAQMonitor.java:534)
at oracle.apps.fnd.cp.opp.OPPAQMonitor.initialize(OPPAQMonitor.java:89)
at oracle.apps.fnd.cp.opp.OPPServiceThread.init(OPPServiceThread.java:94)
at oracle.apps.fnd.cp.gsf.BaseServiceThread.run(BaseServiceThread.java:135)
[9/25/13 11:04:11 AM] [EXCEPTION] [OPPAQMON:876235] ORA-04021: timeout occurred while waiting to lock object
[GC 20321K->4065K(63360K), 0.0137050 secs]
Thanks,
Vasanth

Restriction of time posting within CATS and PS networks and activities

Hello to you all,
Prior to post this message, I've tried to check if there was any existing topic which could help, so sorry if this was the case...
I'd like to know if there was any possibility within SAP standard functions to restrict possibilities of time posting within CATS on PS networks and activities.
Actually I'd like to know if it could be possible that a user can only post times on Networks / Activites which he has been given authorizations?
Is there anything existing within the customizing or maybe authorization objects which can be managed, or nothing in standard SAP and so a specific development would be required?
Thank you very much in advance for you advices and experiences...
Best Regards.
DT.

Hello,
I am not that expert on PS, but from CATS point of view you can validate the Time sheet with CATS0003 or CATS0006
You could do something like:
CLEAR i_messages.
LOOP AT CHECK_TABLE
IF CHECKTABLE-<Field you want to validate>.
      i_messages-msgty    = 'E'.
      i_messages-msgid    = <>
      i_messages-msgno    = <>
      i_messages-pernr    = check_table-pernr.
      APPEND i_messages.
ENDIF.
ENDLOOP.
For more information you can refer to:
https://wiki.sdn.sap.com/wiki/display/ERPHCM/User-exitsinCATS
Regards,
Bentow.

Document types need restricted to specific posting keys

Hi,
When posting a KR document type with transaction F-43 we are able to post GL posting key (40) and posting key(50) without ever entering a vendor posting key(31).
The question is how do we prevent this situation and make sure that a vendor posting key is used. We can use a validation rule but can this be done with standard configuration.
Thx,
-John

Use a Validation OB28. You can use document type or transaccion code(f-43) in order to make mandatory the posting key 31. Keep in mind that you would need to use the accounting key 40 in order to post the expense.
Regards

Document Posting restriction using posting key,document type combination

Hi
We have a authorization restriction issue using posting key&document type&Accoutn type combination.
Requirement is
User A should be able to post to vendors only for particular posting key&document type.He should be able to post to with any other posting keys and document types to vendors.
We have tried with document type authorization object/vendor authorization objects from user profile but it does,t work.
can any one suggest some way please/
r
regards

Hi
I think you should be able to achieve the same through Validation rule:
Prerequisite
Document Type - XXXX
Check
User name = 123 and Posting Key = XX
You can set a an error messsage which would be bleeped when the check fails
Regards
Sanil Bhandari

Restrict Post entry

How to restrcit Post entry option for Particular trasctions? I have 100 roles with these trasactions.
Do we restrcit Auth object level or We will go for individual role and deactivate iption 10:
Thanks

Hi Venkat,
To restrict post access you need to look into the Authorization objects with description starts with "Accounting Document". To be more specific for transaction FB05 (post with clearance) below object with create activity will provide post access to various option (like customer, vendor, G/L Ac, company code etc).
F_BKPF_BED
F_BKPF_BEK
F_BKPF_BES
F_BKPF_BLA
F_BKPF_BUK
F_BKPF_BUP
F_BKPF_GSB
F_BKPF_KOA
However I would like say one more thing as added information. If your actual requirement is to restrict user from posting but providing access to park then that is not possible from authorization point of view. As providing authorization park is required access to above objects with 01 and 77 activity. So restricting access to 01 activity will automatically restrict access to park. If your requirement does not mix with park then you can go ahead as depicted above. But take of other transactions that may require above objects with 01 activity.
Arpan

Restrictions On Back Dated Posting

Dear All,
I want to restrict back dated posting in t codes mb1b , mb1a , mb1c.
It is possible in case of MIGO.
How to achieve in above T code?
Thanks and regards
Gitesh

Dear Manishkumar,
Please tell me the T code for it.
And Tell me whther I can see the posting date in material document.
Thanks and regards
Gietsh

Authorization to restrict G/L Account

Dear All
I am looking to restirct postings to GL account based on the user in T Code F-02. Can any one highlight which authorization objects can i use to restrict user for posting to GLs and Cost Elements
Your valuable input is required in this aspect.

HI,
On the GL master in FS00 there is authorisation group field in the control data tab, you can use this. It is a free text and the user will need this assigned to him in his role.

Restriction on GL posting

Similar Messages

Maybe you are looking for