FBL5N - in Rule set - It is a Display customer line items

[Former Member]

Dear All,

We observed that FBL5N - Display customer line items in Standard SoD rule set under function AR07 addressing a risk of S022.

Unless there are t-codes of FD03 or FB02 this t-code does not allow to change the payment terms of the customer.

We are having a challenge from the client that FBL5N is a display t-code and why it is there in rule set.

Has anybody came across this scenario? If yes, what is the underlying risk for this FBL5N independently.

Is there any SAP Note for this t-code like ME23N from SAP.

Thanks and Best Regards,

Srihari.K

[Former Member · Accepted solution]

Did you have a look at the Object-Level?

[Former Member · Accepted solution]

Hi Christian,

We checked the authorization objects as well enabled in GRC rule set as below:

F_BKPF_BUK - Docume t Authorization document for company codes - 01 or 02 - Enable.

Inspite of this access, FBL5N cannot be used to change the document for payment terms and assignments without FB02 t-code

assignment in the role.

Independently FBL5N cannot be used for any change or create activity except Display customer line items.

Please advise

Thanks and Best Regards,

Srihari.K

[Former Member · Accepted solution]

Ok, in this case I would add S_TCODE to FB5LN in this function and include FB02. Do not forget to generate the rules!

Best Regards,

Christian

[Former Member · Accepted solution]

Hi Christian

Adding S_TCODE value FB02 AND to the global ruleset is exactly the right answer! We had no end of trouble convincing the auditors et al that this is an invalid risk without both the change access and the tcode that is called.

Changed ours eventually...