Sensitive fields for dual control (vendors)
Dear Experts
I want to configure sensitive fields for dual control -Vendors. Iam unable to see the field "SWIFT".
Can any one helps, please
Regards
Ahmed Zain
Dear El Zain,
Unfortunatelly due to the SAP Standard System Design, it is not possible
to define SWIFT as sensitive field for dual control.
Table T055F was not thought to change them.
I'd suggest you to try using a BTE; please check by BERE transaction the
BTE 00001450 (Vendor master record, individual duplicate check).
'Function module SAMPLE_INTERFACE_00001450 must not be changed.
Probably by this BTE you could reach your goal.
I hope this helps.
Mauri
Similar Messages
-
Define Sensitive field for dual control (customers)
Can any body tell me how this functionality configured in SPRO.?
I have assign one fields and after chaning that field in customer master it will normally ask for confirm by diffenet user (account clerk) throught t,cod FD08 but when i am running FD08 it is asking to authorization but i have already get SAP ALL authorization. Still it is not allowing me.
Right answar must be rewarded.
Laxmikanta Das.HI GSL,
I have tried, changes made in different user id and i have tried to confirm the changes in my user id but still it is not happening the message showing as "You are not allowed to confirm general data changes, only to display them" i have checked the authorization check it is perfectly fine. The authorization objected is already assign in my user id.
Anu suggestion please.
Laxmikanta Das. -
Making LFBW Fields Sensitive for dual control
Hello,
I´ve been tasked to make the fields LFBW-WT_WITHCD(Withholding tax code)and LFBW-WITHT(Withholding tax type) sensitive(that is changes to be
made
to these fields need confirmation before being allowed, T-code
FK08/FK09), but when I try to change them for the vendor using IMG(that
is SPRO\ IMG\ Financial Acc.\ acc. receivable..\ vendor\ master\ prep.
for creating..\ DEFINE SENSITIVE FIELDS FOR DUAL CONTROL\), I cant find
these fields from LFBW among the allowed fields.
Is there any way to add these field ti this customizing?
Thanks a lot
RegardsHello Sabrina,
LFBW table fields are NOT defined as Sensitive fields. However there are couple of discussions on Addition of a new field. Check the links below and see if you can achieve your requirement. Else raise a message with SAP.
http://scn.sap.com/thread/1271180
http://scn.sap.com/thread/3246897
BR
Amitash -
Define sensitive fields for vendor master record
Hello,
Wer are on SAP ECC 6.0 Customer wants to define sensitive fields for dual control. I have defined the bankaccount number as a sensitive field but I do not know how I need to define the other settings. Can anybody helpe me with that ? Where f.i do I define the persons who will confirm the changes ? n short which customzing steps do I need to follow to implment the sensitive fields for dual control.
Thanks as ever!!Hi,
You should not allow any user, whatever may be his or her position in the Organization with SAP_ALL and SAP_NEW profiles. It is totally against the Segregation of Duties and there is every possibility for making financial fradulent activities. Proper security approach is very much necessary in order give them the authorization on "NEED TO KNOW" Basis.
Regarding your question of sending mail, there is no functionality as such in Standard SAP. However, by taking help from ABAPer and schedule in the non-peak hours (night time) to generate mails for the approvals of today.
For your other question, which fields are to be kept Sensitive field, normally you can keep PAYMENT TERMS and PAYMENT METHODS as sensitive fields. You can also select other fields based on your business requirement.
Please let me know if you need further information.
Regards,
Ravi
Edited by: Ravi Sankar Venna on Jan 27, 2009 8:40 PM -
Workflow for Dual Control Principle for Posting and Reversing manual postin
Hi Experts,
As per this link http://help.sap.com/saphelp_pserv463/helpdata/EN/ae/01e73a86e99c77e10000000a114084/content.htm
we configured the reaon for posting and reversing and created a custom functiom modules and assigned to events 5500,5502 in instaliation specific function modules but those function modules are not triggered and system is not publishing events APPROVALREQUIRED,REVERSEAPPROVALREQUIRED documents are directedly getting posted.
how to make the system publish these events and send the documents for approval with out directly getting posted
Regards,
vCentric.Hi Suhas,
The rule used in workflow template WS50100021 is a standard one. So try to find out that on what basis it is fetching the agents. It could be the case that the logic specified in the rule does not fulfill your requirement.
The other reason could be that you have not specified the task as general. Please check if the agents tab is activated(green) in the task or not. If it is not you need to set the task as general.
SOLUTION : if you want to get the workitem in your own SAP Inbox for testing purpose, you can set the WFINITIATOR as agent instead of that standard rule. This setting will send the workitem in your own SAP Inbox.
Regards,
Guddan -
Dual Control for Sensitive fields Transaction FD08?
Hi all,
When configuring the dual control for sensitive fields, Transaction i have a few questions:
a) Is there a way (work around) by which I can add the sales area data fields to the catalogue of fields.
b) More importantly, system allows to create the sales order even if the changes have not been confirmed by the respective approving authority, this alone beats the logic of configuring the sensitive fields.
Is there some more setting or user exit which needs to be put in to prevent the user from creating the sales order unless the changes to the sensitive fields have been confirmed.
Userfull answers will be rewarded!
Thanks
Kind RegardsHi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas -
HR Master Record Replication to FI with Dual Control for Sensitive Fields
Dear Experts,
We have an issue on our project whereby employee records are maintained in HR, but replicated to FI on a regular basis via tcode PRAA, creating employee vendors.
We wish to activate the "Dual Control for Sensitive Fields" for the vendor master, however all employee vendors created via PRAA are also blocked and require confirmation.
Have any of you encountered a similar issue, and how do you resolve it?
Many thanks,
MarkHi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas -
Dual control on sensitive fields change
Dear Expert
i would like to understand the implementation steps for dual control function. is there any complete guidance that able to share?
i have the following questions too:
based on my study, i don't see where is the control on this dual control function? because we still can post invoice and payment except blocking in payment run only.
in the standard functionality, is there any notification can be sent to authorised person whenever there is a change of sensitive field?
if the change is rejected, any notification can be sent to the person in charge, and how to do this?
so when a change is being rejected, but the change is remains effective, meaning that user needs to change back to old value manually?
is there a field named "One Time Account" in vendor master data? this was one of the sensitive fields that highlighted by IT auditor.
thanks in advance for any feedback.
Rgds
Joslyn TanHi,
Please go through the following path for configuration :
Point No. 1
1> Customer
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Customer Accounts --> Master Data --> Preparations for Creating Customer Master Data --> Define Sensitive Fields for Dual Control (Customers)
2> Vendor
IMG --> Financial Accounting (New) --> Accounts Receivable and Accounts Payable --> Vendor Accounts --> Master Data --> Preparations for Creating Vendor Master Data --> Define Sensitive Fields for Dual Control (Vendors)
Point No. 2
You can execute transaction code FD08 in background with a periodic job for each User ID who has authorization and tick on Accounts to be confirmed by me and send the output via mail through distribution list or each user can view output by viewing spool by going to transaction code SP01.
Point No. 3
Same as point 2 only need to select option Accounts refused.
Point No. 4
Yes
Point No. 5
Same as point 1
Hope your issue gets resolved.
Regards,
Tejas -
Onetime vendor-will the sensitive field functionality work
In case of Onetime vendor,even though sensitive fields are defined will it not ask for confirmation on changing the bank adress during the invoice.
Define Sensitive Fields for Dual Control (Vendors)
in tcode SPRO:
BSEC-BANKS
BSEC-BANKL
BSEC-BANKN
A. -
Block Sensitive field basd on Company Code
Dear Experts ,
We are blocking sensitive fields using the Customizing Setting in SPRO
SPRO > REF IMG > Financial Accounting > Accounts Receivable and Accounts Payable > Vendors Accounts > Mast*er Data > Preparations for Creating Vendor Master Data > Define Sensitive Fields for Dual Control (Vendors)
Currently its is blokcing for all the Company Codes
Can we include a Check that it will block only a specific Company Code ...
We had cheked all the forums but unable to get the satisfactorily answers for the same.
Regards,
Saurabh GoelHi,
Sensitive fields effects at company code level and cannot be separated.
You have two options; one is to use user-exit ZXF05U01 in order to block some vendors another one is to customize sensitive fields and approve those vendors which you don’t want to be blocked by coding.
Best regards
Melih -
Making Customer Credit Limit (FD32) a sensitive field
I am wondering if it is possible to mark customer credit limit (field KNKK-KLIMK) which you enter by using T-Code FD32 a sensitive field for dual control? If so, I request for detailed steps as I have been trying to do so but could not succeed. Please guide me.
Thanks in advance.
MoazzamMoazzam,
you can have sensitive field only for Vendor and Customers Master Data (FK09 and FD09). If you want define FD32 fields for another user approbation you must create a User Exit or install a workflow.
regards -
Hi,
what is mean by
Add field Vendor category as sensitive fields and add it for dual control(vendors)
Regard
BabuHello babu,
Hi Babu,
You can use dual control to provide more security when changes are made to sensitive data in your customer and vendor master records.
Integration:This function can be used for changing customer master records (FI-AR) and vendor master records (FI-AP).
Prerequisites: You must define the required sensitive fields in the customer or vendor master record in Customizing (IMG) for Financial Accounting. To do so, choose Financial Accounting->Accounts Receivable and Accounts Payable-> Customer Accounts->Master Records->Preparations for Creating Customer Master Records->Define Sensitive Fields for Dual Control.
You must be authorized to change master records. You also define authorizations in Customizing (IMG) for Financial Accounting. To do so, choose Financial Accounting->Financial Accounting Global Settings-> Maintain Profiles. The person who makes the changes is never allowed to confirm his or her own changes.
Features:You can define the required master data fields as sensitive in Customizing.
When an authorized accounting clerk changes a sensitive field in the customer or vendor master record (such as Alternative payee), the relevant account is automatically blocked for the payment run.
The account remains blocked until a second authorized person confirms the master data changes. However, it is still possible to make a further change to an account that is already blocked.
The second authorized person is informed of the changes by mail or by other means, and then uses the function Master records->Confirmation of change->Single (or ® List) to edit the changes.
If the second authorized person cannot confirm the change to the master data, the master data object is returned to the clerk. Where this happens, the reply contains an explanatory text requesting that the clerk alters his or her change, or resets the master data.
Hope I had been able to help you. Please assign points.
Rgds
Manish -
User wise change of sensitive fields
Hi guys,
We are having trouble with fields like payment term, payment block and baseline date. All user can change them as and when they want. Is there any possiblity of restricting of the change of these fields to users. I mean here,some users should be able to do the change and other can not.
Br
Samiti ChakriDear Samiti Chakri ,
You could create a profile by transaction PFCG to link to Your user, where You give them only the option to see the fields but not to change them. Please run SU24 and insert the transaction (fd02/fk02) to check the authorization objects linked to them.
Or:
you can go to SPRO > Financial Accounting(New) > Accounts Receivable and
Accounts payable > Customer Accounts > Master Data > Preparations for
creating Customer Master Data > Define sensitive fields for Dual Control
You can see all the fields that are available for Sensitive Fields here in order to build up a dual cotrol.
I hope this can help.
Mauri -
Dual control one-time vendors possible?
Dear experts,
Does any of you know if it is possible to have dual control on sensitive fields for one-time vendors?
Thanks.
JurriaanDear Aravind
Thank you for your answer.
I have checked this in our system and it works fine if you change the vendor master data.
However, when you enter the one-time vendor data (bank data) during the creation of the vendor invoice, no dual control is executed by the system.
That is the moment where we want to have that check because for every one-time vendor the bank account has to be entered by the user.
Do you know if that is possible?
Thanks.
Jurriaan -
Vendor master-Sensitive fields
Hello Expert/s,
I hope you can help. We have created the above in the IMG. We now need to assign users with the necessary authority to approve any changes made to these fields for existing vendor master records. The instruction point to IMG>Financial Accounting (Global Settings)>Maintain profiles.
However, I don't see this as an option. Can you help or at least point us in the correct direction to assign users for the approval process?
Your help is greatly appreciated. Thanks.
Raymond.Hi,
First you have to define the fields for dual control in the customer/vendor master records in the IMG.
i.e.,IMG->AR/AP->Master Data->preparations for Changing the master data.
If you define a field in the customer/vendor master record as u201Csensitiveu201D, the corresponding customer/vendor is blocked for payment if the entry is changed. The block is removed when a second person with authorization checks the change and confirms or rejects it.
you can also view the report of changes made in RFDABL00.
Thank You,
Sharmila J
Maybe you are looking for
-
How do you copy files from one user to another
How do you copy files from one user to another user on the same machine?
-
ADF 10g: addPartialTarget is not refreshing the complete PanelForm
Hi, I have one table and one panelForm to display the values for the respective table selection. Also there is one delete button in the table to delete record from it.After deleting the record, in my backing bean class I am refreshing the table and t
-
Hungarian characters not printing correctly
Hi All, I am working with scripts and trying to print the value of a variable through a variable which is coming from print program. For example : &gs_text001& variable &gs_text001& has value Kezdési időpont Kezdési is coming as it is but időpont is
-
How to track that, from Where the value is EXPORTing to MY_MEMORY_ID
Hello, Previous programmer is IMPORTing some value into a variable from MY_MEMORY_ID, fine, this is happening in a Customer- Function of Purchase Req. But, I do not know, From where he is EXPORTing that value? pls. let me know, How to track/How to kn
-
Why does my PC not detect my Iphone?
When I connect my iphone, my computer doesnt detect it, I dont know why, i have itunes and quicktime, the last version, i dont know what to do, please help me!!