How can I restrict access to the Bank details on Business Partner?

[LaurieWalker]

Our Customer wants to restrict access to the Bank details on Business Partner (in particular, Suppliers), so that only certain people can see the Bank details, but other people can read and edit other data in the Business Partner.

i can see that in the Business Role BR_BUPA_MASTER_SPECIALIST it is possible to restrict Read access to Bank Country Key, so I thought that if all other fields were allowed except that one, it might prevent the Bank details being displayed. However, this seems not to be the case - whether the Bank Country Key is left blank (restricted) or set to an unlikely value, it does not make any difference to the BP display.

Does anyone know if this can be done?

[Amith_Nair · Accepted solution]

Hi laurie.walker

This is a Great Question and an open request for SAP to come up with an action plan.

Currently there is no provision to protect access to Business Partner bank data in any business partner related application except for: Manage Business Partner, Manage Customer Master Data and Manage Supplier Master Data. "Maintain Business Partner" doesn't support restricting access to BP bank data.

Manage Business Partner, Manage Customer Master Data and Manage Supplier Master Data which are new Fiori application provides a workaround to restrict access to Bank data.

To restrict a user's Bank data:

- Ensure that user access to "Manage Business Partner" app but has no access to "Maintain Business Partner".

- Apply restriction on field "Bank Country Key" to assign the user a Country where you don't have any bank account.

This way the user access bank data from any other country.

stephen.ward3

Thank you!

Amith Nair

[4588 · Accepted solution]

Dear Amir

Thank you for your feedback in 2020, however I am still facing a similar issue.

As you explained, it is possible to restrict a users access to either display or maintain bank details via the business partner (we use the BP transaction instead of the FIORI apps). My customer however is looking for a way to a more in-depth solution by restricting the user to either display or maintain, while in maintenance view the user is only allowed to enter bank details of existing banks.

For example, if the user is entering a bank account of a bank that is existing via FI02/FI03, that the input is possible. If the bank is not yet maintained in FI01/FI02, the input should not be possible.

Please advise, if there is a current solution for this issue.

Cheers

Rico

[LaurieWalker]

Thanks Amith - that's very helpful - it didn't occur to me that the Manage apps would behave one way and the Maintain (BP) app another way.

[lambh]

Hi LaurieWalker, Have u solved this problem yet?