3794464 - How to restrict users from viewing unauthorized consolidation groups in set global parameters app

How to restrict users from viewing unauthorized Consolidation Groups in the Set Global Parameters app?

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

SAP S/4HANA Cloud Public Edition

1. Log in to the system.
2. Open the Set Global Parameters app.
3. Open the value help (F4) for Consolidation Group and observe that multiple groups (including unauthorized ones) are displayed.

The value help (F4) for Consolidation Group in the Set Global Parameters app is not controlled by authorization; the Display IAM app shows “Set Global Parameters -> F4 Access: No,” indicating that the value help cannot be restricted. 

1. Note that this is expected behavior: the Consolidation Group value help will list all groups.
2. Rely on the standard authorization checks at usage time: if a user selects a group they are not authorized for in set Global Parameters, an authorization error will be raised and the group cannot be used.
3. Be aware that users may see many groups (for example, in Consolidation Monitor), but they cannot use groups for which they lack authorization.

KBA 3450260 - Group Reporting: Despite authorization restriction all consolidation units are disclosed in Data Monitor app

consolidation group, set global parameters, value help, F4 help, authorization, by design, IAM, display IAM, F4 access no, group reporting, consolidation monitor, restrict value list, viewing unauthorized groups, sap s/4hana cloud public edition , KBA , FIN-CS-COR-2CL , S/4HANA Financial Consolidation, Core Processing (Publ Cld) , How To