Sensitive field

Hi,
what is mean by
Add field Vendor category as sensitive fields and add it for dual control(vendors)
Regard
Babu

Hello babu,
Hi Babu,
You can use dual control to provide more security when changes are made to sensitive data in your customer and vendor master records.
Integration:This function can be used for changing customer master records (FI-AR) and vendor master records (FI-AP).
Prerequisites: You must define the required sensitive fields in the customer or vendor master record in Customizing (IMG) for Financial Accounting. To do so, choose Financial Accounting->Accounts Receivable and Accounts Payable-> Customer Accounts->Master Records->Preparations for Creating Customer Master Records->Define Sensitive Fields for Dual Control.
You must be authorized to change master records. You also define authorizations in Customizing (IMG) for Financial Accounting. To do so, choose Financial Accounting->Financial Accounting Global Settings-> Maintain Profiles. The person who makes the changes is never allowed to confirm his or her own changes.
Features:You can define the required master data fields as sensitive in Customizing.
When an authorized accounting clerk changes a sensitive field in the customer or vendor master record (such as Alternative payee), the relevant account is automatically blocked for the payment run.
The account remains blocked until a second authorized person confirms the master data changes. However, it is still possible to make a further change to an account that is already blocked.
The second authorized person is informed of the changes by mail or by other means, and then uses the function Master records->Confirmation of change->Single (or ® List) to edit the changes.
If the second authorized person cannot confirm the change to the master data, the master data object is returned to the clerk. Where this happens, the reply contains an explanatory text requesting that the clerk alters his or her change, or resets the master data.
Hope I had been able to help you. Please assign points.
Rgds
Manish

Similar Messages

Define sensitive fields for vendor master record

Hello,
Wer are on SAP ECC 6.0 Customer wants to define sensitive fields for dual control. I have defined the bankaccount number as a sensitive field but I do not know how I need to define the other settings. Can anybody helpe me with that ? Where f.i do I define the persons who will confirm the changes ? n short which customzing steps do I need to follow to implment the sensitive fields for dual control.
Thanks as ever!!

Hi,
You should not allow any user, whatever may be his or her position in the Organization with SAP_ALL and SAP_NEW profiles. It is totally against the Segregation of Duties and there is every possibility for making financial fradulent activities. Proper security approach is very much necessary in order give them the authorization on "NEED TO KNOW" Basis.
Regarding your question of sending mail, there is no functionality as such in Standard SAP. However, by taking help from ABAPer and schedule in the non-peak hours (night time) to generate mails for the approvals of today.
For your other question, which fields are to be kept Sensitive field, normally you can keep PAYMENT TERMS and PAYMENT METHODS as sensitive fields. You can also select other fields based on your business requirement.
Please let me know if you need further information.
Regards,
Ravi
Edited by: Ravi Sankar Venna on Jan 27, 2009 8:40 PM

Vendor master data-sensitive field search term 1

Hi
Incase of Vendor master data ,i have defined search term 1 AS SENSITIVE FIELD.
When i change the master data i.e search term 1 sometimes it asks for change confirmation and sometime it doesnt.
Can you pls let me know why does this happen..that too for few vendors any logic.

resolved

Vendor master sensitive field change

Dear All..
I have configured vendor master change sensitive field in this i have added some fields. If some body will change this field system will tell the warning message and it will go to confirmation of change will done by other user in FK08 .
My problem is i want to control this only for vendor master changes. but its asking confirmation for vendor master creation also.
Any other configuration required.
Regards
P.Anandhakumar..
Edited by: Anandhakumar Palanisamy on Dec 3, 2008 9:42 AM

hi AK
also check in SPRO > financial accounting new > accnt reciveable and payable> vendor accounts > master data > preparations for changing vendor master data
may be u can controll thuru authorization objects
kaustubh

Vendor account group sensitive field mail trigger

Dear All,
We have configured the sensitive field in vendor master so that whenever someone change the sensitive field mail get trigger to that users.
Here problem is for employee vendors also that mail gets triggerd.
So we want excluse those vendor account groups from this sensitive field.
Is this possible?

thanks for your quick reply.
i have wrongly said in above mail. pls ignore mail triggering..
Whenever we are changing the sensitive field it will go and sit inthe FK08 transaction.
then some one has to confirm or reject then only it will get update that field.
Edited by: madansiva on Sep 29, 2010 10:22 AM

Customer / Vendor Master Dual Control - Sensitive Fields

Dear SAP Experts,
I have configured a business requirement to extend the Senstive Field functionality towards customer master. I have defined the new Customer group and also assigned the fields. Every time a change to the Customer master record (KNA1 and KNB1) fields are changed, the message pops for the confirmation to be done thru FD08/FD09.
The only question I have is the relevance behind this control as even after the changes not yet to be confirmed, the system is allowing me to bill the customer (Sd billing) and pass the entry to FI accounting? On the other hand the Vendor functionality does not allow a billing run unless and until the changes are confirmed. My question is what is the relevance of the customer master. Can anyone who has an idea about this provide some insight about the dual functionality of this sub module.
Rgds,
Abhai

hello, friend.
i wish to understand your situation better. if the sensitive fields restrictions are working for vendor, then there should be similar features for customer. the, my question is "are you -
1. "working in a DEV environment where you have consultant's (unlimited) authorization or
2. "working in a QAS/PROD environment where you have specific authorization?"
perhaps you have already checked this, but please indicate if you the authorization groups and transaction codes authorization have been set for the users.
many thanks.

Vendor Master Sensitive Field Confirmation (Account Number field) - Manual Payments

Hi All,
After reviewing a number of threads on this forum around what happens to payments when a vendor has a 'sensitive field' awaiting confirmation I had a a specific question around having the 'account number' as a sensitive field.
I have an instance when the 'Account Number' has been defined a sensitive field. In an example scenario a user has changed the Vendor Bank Account number and it is awaiting confirmation (through using FK08). Whilst it is awaiting confirmation a manual payment is posted against that Vendor, which Vendor Account number is used, the old one or the new one awaiting confirmation?
It also brings about the wider question of, if a sensitive field is awaiting confirmation and a payment is made against that Vendor what value is used, the old one or the new one that hasn't yet been confirmed?
Any insight would be great, thanks.

Hi Johnny
We had a lenghty debate with SAP very recently and the thing is Automatic Payment (F110) wont happen if a Vendor is awaiting confirmation... But manual payments can be done
So, the system does not stop you for manual payments F-53 or 58... It should pick up the latest Account number
br, Ajay M

Case sensitive field in to_date function

update "Ab_Order" set "OrderDate" = to_date("Order Date String", 'yyyy/mm/dd)
Here the OrderDate column is of type Date
"Order Date String" is varchar2. Iam trying to copy the data from "Order Date String" which contains data in this format '2011/04/24' to OrderDate column to perform some date functions
when I try to run this query it gives a error: ORA-01830: date format picture ends before converting entire input string
So I tried to run this query by creating a test table wit 2 columns : update testtable set column1 = to_date(field1, 'yyyy/mm/dd')
where column1 is date field and field1 is varchar2 and this worked.
So Iam assuming this is the problem with case sensitive fieldnames . As far as i know we should include case sensitive fields in double quotes. Is there anything else to do wit the to_Date function. Can anyone please let me know how to do that.

Hi,
Welcome the the forum!
882431 wrote:
update "Ab_Order" set "OrderDate" = to_date("Order Date String", 'yyyy/mm/dd)It looks like you're missing a single-quote right before the last ')'.
Here the OrderDate column is of type Date
"Order Date String" is varchar2. Iam trying to copy the data from "Order Date String" which contains data in this format '2011/04/24' to OrderDate column to perform some date functions
when I try to run this query it gives a error: ORA-01830: date format picture ends before converting entire input stringThat error occurs when when you have characters in the 1st argument that do not correspond to anything in the 2nd argument. For example:
TO_DATE ( '30-Aug-2011 12:00'
, 'dd-Mon-yyyy'
)In this example, TO_DATE doesn;t know what to do with the ' 12:00' at the end of the 1st argument. According to the 2nd arguemnt, there's only supposed to be 11 characters in the string. So it raises the ORA-01830 error.
So I tried to run this query by creating a test table wit 2 columns : update testtable set column1 = to_date(field1, 'yyyy/mm/dd')
where column1 is date field and field1 is varchar2 and this worked.
So Iam assuming this is the problem with case sensitive fieldnames . As far as i know we should include case sensitive fields in double quotes. Is there anything else to do wit the to_Date function. Can anyone please let me know how to do that.Case sensitive column names are a bad idea because they cause so amny problems, but I don't think this is one of those problems. It's more likely that you need to use SUBSTR (or some other string manipulation function) on "Order Date String" before using it in TO_DATE.
Whenever you have a problem, please post a little sample data (CREATE TABLE and INSERT statements, relevant columns only) from all tables, so people can re-create the problem and test their ideas.
Also post the results you want from that data, and an explanation of how you get those results from that data, with specific examples.
Always say which version of Oracle you're using.

Dual control on sensitive fields change

Dear Expert
i would like to understand the implementation steps for dual control function. is there any complete guidance that able to share?
i have the following questions too:
based on my study, i don't see where is the control on this dual control function? because we still can post invoice and payment except blocking in payment run only.
in the standard functionality, is there any notification can be sent to authorised person whenever there is a change of sensitive field?
if the change is rejected, any notification can be sent to the person in charge, and how to do this?
so when a change is being rejected, but the change is remains effective, meaning that user needs to change back to old value manually?
is there a field named "One Time Account" in vendor master data? this was one of the sensitive fields that highlighted by IT auditor.
thanks in advance for any feedback.
Rgds
Joslyn Tan

Hi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas

SD credit management - credit sensitive fields

Hello,
I understand that there are three credit sensitive fields:
Terms of payment
Fixed value dates
Additional value days
We have created a customized field in the Additional Data B in the sales order header. User made a change in this field and it triggered the automatic credit check and the order is put on credit hold.
In our OVA8, the 'Critical fields' is not checked.
Strange thing is when we tested in the test/QA environment, the change in the customized field did not trigger the credit check. It happened only in production.
To me, only fields like ordered qty, pricing condition should trigger the check because the net value of the order is changed and the order should be subject to a credit revision.
Any idea? Would appreciate your input. Thanks in advance.

Dear Friend
I think the document in which user has made changes was already released for credit using VKM3/VKM1.
As per standard system if the you make any changes in the document after the date of released date then system triggers credit check again.
For Ex. If you release document today 04.05.2011 then you can make any changes in the document till todays date EXCEPT increase of order value than released value(if order value increases than released value then system triggers credit check again even on same day).
But if you release on 04.05.2011 and make any small change in document on 05.05.2011(If you are not maintaining Number of Days in OVA8) then system will trigger credit check again.
This is the reason when you tested in quality system didnt blocked the document cause you were trying to change on same day.
Hope this explains your issue.
Regards
Mayank

Vendor/Customer Sensitive Field

HI all,
Vendor/Customer master some fields already setup for Sensitive field.
Business would like to BLOCK all transactions if Vendor/Customer haven't confirm (t-code : FD08/FK08)
is this possible ? I just know by default it will only block for auto payment.
But we would like even post a doc (vendor/customer invoice) related to this non-confirm vendor/customer.
Any user exit for this ?
Thanks a lot
Murphy

close

Vendor Master : Sensitive Fields confirmation

Hi,
The configured sensitive fileds conformations are triggering for both Creation(FD01) and Change(FD02). The confirmation required only for the Changes, not for the new entries(Creation). Please do the needful.
Refards,
Anusha

Hi,
Configured sensitive filed are used for master data when there are any changes in vendor master data. It is made to have a level of control if any one changes master data intentionally or by mistake.
If you are creating master data for the first time than you can set some approval process offline.
If your question is that if the part of the master data sensitive fields is/are blank while creation and than updated by using change transaction code, in that case SAP will trigger the request for confirmation other wise account is blocked for payment.
Regards,
Anand Raichura
P.S: Please go through the link for the help.. [http://help.sap.com/saphelp_45B/helpdata/en/35/71890d86c2223ae10000009b38f984/frameset.htm];

Dual Control for Sensitive fields Transaction FD08?

Hi all,
When configuring the dual control for sensitive fields, Transaction i have a few questions:
a) Is there a way (work around) by which I can add the sales area data fields to the catalogue of fields.
b) More importantly, system allows to create the sales order even if the changes have not been confirmed by the respective approving authority, this alone beats the logic of configuring the sensitive fields.
Is there some more setting or user exit which needs to be put in to prevent the user from creating the sales order unless the changes to the sensitive fields have been confirmed.
Userfull answers will be rewarded!
Thanks
Kind Regards

Hi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas

Effect of Customer Sensitive Fields

Hi All,
I have read the help from SAP regarding the Sensitive Fields for Customer and Vendor Master. The description says that whenever the sensitive fields have been changed, the Master will be blocked for automatic transactions. For vendor I know that this is the auto payment using F110, but as for customer may I ask what is the effect? What are these auto transactions on the Customer side? Thanks.
Thanks again

In FD08/FD09 you can list the customers that need to be approved before continuing.
Keep in mind that this functionality only works on client level. In some circumstances this can become problematic.

Making Customer Credit Limit (FD32) a sensitive field

I am wondering if it is possible to mark customer credit limit (field KNKK-KLIMK) which you enter by using T-Code FD32 a sensitive field for dual control? If so, I request for detailed steps as I have been trying to do so but could not succeed. Please guide me.
Thanks in advance.
Moazzam

Moazzam,
you can have sensitive field only for Vendor and Customers Master Data (FK09 and FD09). If you want define FD32 fields for another user approbation you must create a User Exit or install a workflow.
regards

Taking away one vendor group from sensitive field

Hi,
In the current system we have 8 vendor groups. we have created reconciliation field as a sensitive field - so has to control the creation and changes of the vendors. Now, the requirement is to take away one of the vendor groups from this senssitive field validation. Can we do this? Please advice.
Regards,
Narin

Hi,
Choose that particular account group and click on company code data- make reconciliation account status to display.
Check once the same in test server.
Regards,
Sankar

Sensitive field

Similar Messages

Maybe you are looking for