I want to restrict access to certain SAP accounts/documents.
I've created an authorization group and assigned this to the user authorization profiles
*GL - i've assigned this authorization group to the GL master.
When the user post/change/display documents the authorization is checked. When the user does not have the authorization group in the user role/profile, he cannot display line items for this account via transaction FBL3N.
* I've also assigned this authorization group to the vendor master and reconciliation account
When the user post/change/display documents the authorizatiuon is checked but the user can display line items via transaction FBL1N/FBL5N even when he does not have authorization to do so. Only when he double click on a document no, does the error message display to notify him that he does not have the required authorization to display items.
Free Guide: Managing storage for virtual environments
Complete a brief survey to get a complimentary 70-page whitepaper featuring the best methods and solutions for your virtual environment, as well as hypervisor-specific management advice from TechTarget experts. Don’t miss out on this exclusive content!