Symptom
In the 'Verify General Journal Entries' app, the company code restriction is not working correctly. Users can see entries from other company codes, even though access should be limited to specific ones.
Environment
SAP S/4HANA Cloud Public Edition
Cause
The 'Read, Value Help' and 'Value Help' access categories for 'Company Code Hierarchies' are set to 'Unrestricted', allowing access to all company codes.
Resolution
To resolve this, Maintain the 'Company Code Hierarchies' restrictions, which can be found after maintaining the 'Read, Value Help', and 'Value Help' as Restricted
Steps to follow:
- Open the Maintain Business Role app.
- Search for the user role (BR_XX_XX)
- Click on Edit.
- Navigate to Maintain Restriction.
- Set the 'Read, Value Help', and 'Value Help' access categories to Restricted.
- Search for Company Code Hierarchies restriction.
- Maintain restrictions for Company Code Hierarchy and Company Code Hierarchy Node.
- Click on Save role.
See Also
Keywords
Verify General Journal Entries, restriction, company code, business role, SAP_FIN_BC_OH_MD_CCA_PC, Identity and Access Management, Unrestricted, Restricted, Company Code Hierarchies, KBA 2733842. , KBA , BC-SRV-APS-IAM , Identity and Access Management , FI-FIO-GL-TRA-2CL , Transaction Apps (Public Cloud) , Problem