How to configure roles to ensure segregation of duties for managing payments?

[AFinch]

I understand specific administration roles will be able to set up approval paths for payments with S/4 HANA Cloud Public. However, what controls are there to ensure the same role is unable to change bank account details of payees?

[Jeremy_Deo]

Hello dear user,

And thank you for asking your question in the SAP Community blog.

When it comes to managing payments, it's important that no single person has control over the entire process. This reduces the risk of fraud and mistakes. So, you want to split responsibilities between different people that’s what segregation of duties is all about.

How to Set This Up in SAP

In S/4HANA Cloud, people get access through business roles, and each role is made up of business catalogs (which control access to apps and actions). You’ll need to create roles that match the tasks above.

1. Accounts Payable Clerk

• Can enter and edit supplier invoices
• Catalog needed: SAP_FIN_BC_AP_PROC_PC
• What they can’t do: No access to payments

2. Payment Specialist

• Can create payment proposals (suggest who to pay)
• Catalog needed: SAP_FIN_BC_AP_PAY_PC
• What they can’t do: No approvals, no payment execution

3. Payment Approver

• Can review and approve payment proposals
• Catalog needed: SAP_FIN_BC_AP_PAY_APV_PC
• What they can’t do: Can’t create or execute payments

4. Treasurer or Finance Officer

• Can execute payments (e.g. send to bank)
• Catalog needed: SAP_FIN_BC_AP_PAY_PROC_PC
• What they can’t do: Can’t approve or prepare proposals

How to Do It in the System

1. Go to the “Maintain Business Roles” app.

2. Create separate roles for each of the four profiles above.

3. Add the correct business catalogs.

4. Assign each role to the right users.

I hope those elements will answer your question.

Best regards,

Jeremy