SAP Knowledge Base Article - Public

3753666 - MRKON Display-Only Restriction Not Available; Need To List Withdrawals Without Posting In S/4HANA Cloud Public Edition

Symptom

  • In the Logistic Consignment and Pipeline Settlement app (transaction MRKON) in public cloud, the requirement is to allow users to list unposted withdrawals/invoices without permitting posting (settlement).
  • Purchasers need to run MRKON to view “withdrawals not settled” but must not have authorization to run “settle.”

Environment

  • SAP S/4HANA Cloud Public Edition
  • Fiori UI for Invoice Verification (Public Cloud)

Reproducing the Issue

Steps to reproduce are not available.

Cause

There is no specific authorization object or IAM restriction in the public cloud standard to differentiate MRKON “display” (Withdrawals Not Settled) from “post” (Settle); the public cloud uses IAM with business roles/catalogs and does not expose granular ABAP objects for this toggle.

Resolution

  1. Acknowledge that, in the current standard of SAP S/4HANA Cloud Public Edition, a dedicated display-only restriction for MRKON (separating “Withdrawals Not Settled” from “Settle”) is not available.
  2. To prevent unwanted postings, do not assign the MRKON app/business catalog to purchaser roles; restrict access to appropriate finance roles only.
  3. If a display-only capability for MRKON is required, consider submitting an improvement request via the Customer Influence program (refer to the links below).

See Also

Keywords

MRKON, consignment settlement, pipeline settlement, display only, read-only, settle restriction, withdrawals not settled, authorization, IAM, business role, business catalog, restriction type, S/4HANA Cloud Public Edition, invoice verification, posting control , KBA , MM-FIO-IV-2CL , Fiori UI for Invoice Verification (Public Cloud) , Problem

Product

SAP S/4HANA Cloud Public Edition all versions