Symptom
How to maintain authorization for accessing the bank accounts in the app "Manage Bank Accounts".
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Create authorization group from the configuration activity (SSCUI ID 103888) "Authorization Group for Bank Account Transactions".
- Assign the authorization group in the house bank account connectivity data of a bank account in the app "Manage Bank Accounts".
- Create a general ledger posting from the app "Post General Journal Entries".
- The journal entry is posted because the he assignment is not taken by accounting App Post General Journal Entries.
Cause
The settings from the configuration activity (SSCUI ID 103888) "Authorization Group for Bank Account Transactions" cannot be used to maintain authorizations for the "Manage Bank Accounts".
Resolution
Restricting User Access to the app Manage Bank Accounts
To limit user access to the Manage Bank Accounts app, the restriction type FCLM_BAM (Bank Account Management) should be used. This allows control over access to bank accounts based on specific attributes such as company code and bank account type.
Key Features of Restriction Type FCLM_BAM:
Attribute-Based Access: Access to bank accounts is restricted using attributes like company code and bank account type.
Defining Bank Account Types:
Bank account types can be configured using SSCUI 102336 - Define Settings for Bank Account Master Data under the account type definition.
It is advisable to define and create custom bank account types tailored to specific business needs.
Once the custom account types are defined, the Maintain Business Roles app can be used to apply the FCLM_BAM restriction type with the appropriate account types. This ensures that users only have access to bank accounts associated with the assigned account types.
Business Catalog:
The relevant business catalog containing the FCLM_BAM restriction type is SAP_FIN_BC_CM_BAM2_BASIC_PC.
Important Notes:
The following fields are not checked by this restriction type:
SEGMENT (Segment for Segmental Reporting)
PRCTR (Profit Center)
It is essential to maintain "Unrestricted" access for any fields that are not configured under restricted access.
See Also
Keywords
authorization, access, SSCUI, 103888, Authorization Group for Bank Account Transactions, FCLM_BAM, bank account management, SAP_FIN_BC_CM_BAM2_BASIC_PC, SEGMENT, PRCTR, company, code, bank, account, type, 102336, Define Settings for Bank Account Master Data, manage, bank, account , KBA , FIN-FSCM-CLM-BAM-2CL , Bank Account Management (Public Cloud) , How To