Question:
Hi,
I need to implement an authorization solution to exclude all payroll GL accounts from being displayed when a user executes any FI reports or FI balance and line item display.
The standard SAP method is to input an authorization group in each of the affected GL master record and also defining the authorization roles with the relevant authorization object.
As I need to implement this solution for only 1 user, I think the standard SAP method requires too much effort and our SAP system is in production state. I am thinking if I can mod the authorizations (creating a customized authorization) to meet this requirement.
Can someone shed any light on this issue?
Thanks.
Regards,
Grace
Answer:
Use what SAP supplied. It is the cost of doing business.
A Custom object will do little good as you will have to find ALL the code in the system that refereces G/L accounts and modify the code to accept the new object and respond to it. Adding a few auth groups and creating one role is far simpler. THe way the auth groups work you only need to add it the G/L accounts you want to control and leave the rest blank