Restrict Users from Posting to GL Account

Updated May 18, 2018

Hello Experts,

Please help me in restricting some users from posting to GL account.

We have done the following activities for restriction of G/L Postings.

(1) We have created the Authorization Group FS00 -In Control Tab >>> Authorization Group ex. 1000

(2) Created the seperate role having F_BKPF_BES one with activity 03, auth. group 1000 and some other roles contains with activity * and auth. group. blank for the same object.

But the system is allowing the postings for G/L Accounts.

Regards

Comments

15 Sep 2008 3:48 am Shalesh Singh Visen

The authorization group created by you should be included int he authorisation object for that particular user profile.
I do not recollect it handily. You need to find it out. It seems as of now that object is having value as * which means allow posting.
This object should have the value (authorisation groups maintained in the GL master).
This will make sure that the user is able to post to only those GLs and not others.