Symptom
Users can still perform journal entry reversals even after “reverse” relevant IAM apps are deactivated in Maintain Business Roles → IAM Apps.
Environment
SAP S/4HANA Cloud Public Edition
Reproducing the Issue
- Open the Maintain Business Roles app.
- Open the affected business roles
- Navigate to the Business Catalogs / IAM Apps tab.
- Deactivate all "Reverse" related IAM apps, the system is still allowing users to reverse journal entries
Resolution
The Reverse function is available in other IAM apps as well, such as F8214_TRAN, where it is integrated with the CREATE function. Therefore, it is not possible to restrict only the "Reverse" function.
Keywords
journal entry reversal, reverse journal entry, manage journal entries deprecated, verify general journal entries, iam apps, business role restrictions, authorization variant, F8214_TRAN, F0717_03_TRAN, F_BKPF_BUK, company code write, app deactivation, navigation link, restriction not working, s/4hana cloud public edition , KBA , FI-FIO-GL-TRA-2CL , Transaction Apps (Public Cloud) , Problem
SAP Knowledge Base Article - Public