#COE#DE01 Auth Group Restriction on G/L Master

[Mohamed_Cassim]

Is it possible to restrict posting to a G/L Account in SAP S/4 HANA Cloud (MTE) as follows:

1. to Users belonging to an Auth Group

2. to a specific Document Type

The restriction should not consider posting periods.

[JulianoRomanato]

Hello mohamedcassim.

How are you? I have included the Tag "SAP S/4HANA Cloud for Finance" for this question, as GL Account is an Object of Finance Line of Business.

Regards.

Juliano Romanato.

[OwenLiu]

We helped you to accept the answer, since there were no updates after 7 days.

You can unaccept it anytime if you have further questions.

[Rachel1 · Accepted solution]

Hi Mohamed,

Sorry for late response, for now there is no authorization control for accounts level, there is only restriction based on account type, see

Please consider to raise a feature request. See KBA https://launchpad.support.sap.com/#/notes/2963059

Thanks.

Best regards,
Rachel

[Edna_Garcia]

Hi mohamedcassim

You can use the Authorization Groups for Posting Period Variants functionality

Here the following links to run the set up:

• How to Create an Authorization Group for Posting Period Variants: https://help.sap.com/docs/SAP_S4HANA_CLOUD/0fa84c9d9c634132b7c4abb9ffdd8f06/7d370946715c4626a6056b76...
• How to Use Authorization Groups for Posting Period Variants: https://help.sap.com/docs/SAP_S4HANA_CLOUD/0fa84c9d9c634132b7c4abb9ffdd8f06/49af4ef779714ec5a6512465...
• Example: How to Set Up Authorizations for Posting Periods: https://help.sap.com/docs/SAP_S4HANA_CLOUD/0fa84c9d9c634132b7c4abb9ffdd8f06/41da8ed581bb481ea07a791c...

Best regards

Edna Garcia

[Rachel1]

Hi Mohamed,

Is this request to allow user to post specific accounts only? Currently there is no authorization check on GL account level, Please let me know in case I did not get this issue, Thanks.

Best regards,
Rachel

[Mohamed_Cassim]

Hi Rachel,

The request is to restrict certain accounts to specific user, not users to accounts. Users belonging to an Auth Group should be allowed to post to those accounts with the Auth Group as well as other accounts. This similar to the feature of setting Auth Groups to restrict postings to adjustment periods.

Kind regards,

Mohamed

[Gabriel_Gomez]

Hello mohamedcassim,

The restrictions needed from your end, are based on the catalogs contained in the Business Role.

Can you please kindly check the following documentation, so you can see how the restrictions works within a Business Role Template or create a new one to have the restrictions needed.

https://help.sap.com/docs/SAP_S4HANA_CLOUD/55a7cb346519450cb9e6d21c1ecd6ec1/6a6b17f2d0464487a6c3f8a7...

You can find more information how to restrict roles in this note:

https://launchpad.support.sap.com/#/notes/2598733

I took a quick look at the App: Manage G/L Account Master Data, this App is contained in the Role Template: BR_GL_ACCOUNTANT

In here if you want to maintain the writing restrictions based on the following Authorization Groups:

For the Document Type I only found the Settlement Document Type for this role:

Best regards,

Gabriel

[Mohamed_Cassim]

Hello gabrielgomez_

Thank you for sharing this information, however it seems that that there is no option to restrict users to specific G/L Accounts through the use of Auth Groups. The company specific G/L Master has a field for Auth Groups, hewever it does not seem to be available for editing in SAP S/4 HANA Cloud. Is this something that can be requested?

Kind regards,

Mohamed