FBL3N - G/L account authorization

[former_member200876]

Dear All

     can we add authorization check in G/L account in T.Code FBL3N ?

example : user "X" must only display G/L account "112233" & "445566"

what is the authorization object to control this issue .

[Former Member]

I think you can use a restriction per account group (F_BKPF_KOA)

[Former Member]

HI

     i have seen above issuse regarding fbl3n t-code it  means GL line item display.in this case we can see the reports of entry line items. we cannot give here authorzation check because it is a report display.

[Former Member]

Hi

please goto tcode su24 and make Authorization trace active for object F_BKPF_BES.

Also activate trace using ST01 and execute Tcode fbl3n and check whether F_BKPF_BES is called properly or not.

if it is not called then ask abaper to write authorization check coding in a Enhancement spot.

Ram

[former_member200876]

Dear Ram babu

i think we will ask a baper to write authorization check coding in a Enhancement spot

[former_member222241]

Hi,

Instead of telling ABAPer to write a code do the following steps :

1. Go to table TBRG.

2. Enter object name as F_BKPF_BES.

3. In Authorization enter authorization value.

4. In Description enter description authorization object.

5. Create the new objects you want

6. Remove all the object F_BKPF_BES from the existing roles.

7. Create new roles.

8. Add object F_BKPF_BES manually and in Authorization object enter values created by you in table TBRG.

9. Generate role.

10. Assign to respective users.

This activity can be done without the help of ABAPers.

Regards,

Tejas

[former_member200876]

Dear Tejas Gupte

i follow your steps but where can i specify the G/L account

when the user open FBl3n this issue display " No line item display possible for account 112080 1000 "

[former_member222241]

Hi,

Please go to to transaction code FS00 create on tab Control data enter authorization values in Authorization Group and save.

You are getting this error because Line Item Display tic would not be there for this G/L.

Regards,

Tejas

[former_member200876]

i already add the authorization group to G/L account (FS00)

but i get the same error

[former_member222241]

Hi.

Please check G/L master for Line Item display tick.

Regards,

Tejas

[Former Member]

Hi Mohammed,

You can add authorisation to check GLs.

For this follow the following steps:

1. Create a role with Authorisation object "F_BKPF_BES".

2. Assign acitivity as 03 Display to the authorisation object.

3. Assign the role created to the respective user IDs.

4. Also in GL master Assign the Authorisation Group in "Control Data" tab.

Kindly confirm if it work out.

Regards,

Gunjan

[former_member200876]

i follow these steps but same issue

[Former Member]

Hi,

Check in Fiscal period mapping whether authorisation group is maintained in the last column or not.

That will also regulate the authorisation of the range of GLs.

Regards,

Gunjan

[Former Member]

HI,

Please check in Tcode SU24 Whether authorization check is yes or no.

Ram

[former_member200876]

i check SU24 and change the authorization check from " No " to be " YES "

but still not working