How to restrict authorization for accounting document reversal (FB08) and reset cleared item (FBRA)

[Sungwhan]

Dear Experts,

We are writing to request detailed guidance on how to control authorization for accounting document reversal (FB08) and reset cleared item (FBRA) in our SAP Public Cloud environment.

Currently, we have to restrict these authorizations to only 1-2 members of our Customer accounting team. In SAP on-premise version, we controlled these authorizations through T-code (FB08, FBRA) access. However, we have not been able to locate the corresponding apps in the Public Cloud environment.

We would appreciate it if you could provide us with detailed instructions on how to achieve this restriction in the Public Clou

[George_Yu]

Hi @Sungwhan,

I am not a FIN guy and cannot give you a direct answer.

On the other hand, I suggest you thinking differently: you want to limit the viewing access to the accounting document.  How do you view them in the Public Cloud? Find out the apps or actions doing that, and put a restriction on them. 

On-premise and Cloud solutions are designed differently, and you need to take a different approach to tackle the same problem sometimes.

Regards,

George

[SaiKadoo]

Hi @Sungwhan,

To locate the app, give the T-code in SAP Fiori library:

SAP Fiori Apps Reference Library

T-code	App
FB08	Reverse Journal Entries
FBRA	Reset Cleared Items

There is a solution for this requirement which seems to be feasible.

A latest feature addition is done in 2502 release:

Kindly refer below blog by @christian_hochwarth for details of this new feature:

SAP S/4HANA Cloud Public Edition 2502: Flexible Business Role Design with App Authorization Variants

For in-depth discussion on this feature kindly refer below blog by @George_Yu :

Precise Control of Fiori App Access with the App A... - SAP Community

Please note that this feature is only available for business catalogs that support IAM apps.

With a basic check, we could see FBRA, FB08 can be Deactivated.

FBRA

FB08

Solution for the scenario:

Finance User	App1. (FB08)	App2. (FBRA)	App3.	App4.	App5.	App6.	…....	App20.	Solution
A,B	Access	Access	Access	Access	Access	Access	Access	Access	Create a custom role copying a standard role and assign it to user A,B so that they have access to all the apps. As it is a recommended practice to copy the standard role and then assign it to the users.
C,D,E….. Z	No	No	Access	Access	Access	Access	Access	Access	Create a custom role copying a standard role and deactivate FB08, FBRA apps as per the steps explained the blog SAP S/4HANA Cloud Public Edition 2502: Flexible Bu... - SAP Community Assign this role to users C,D,E….Z.

Thanks,

Sai Kadoo