Motivation
SAP delivers in standard roles the split of Company Code Data and Sales/ Purchasing data roles.
| Role | Description |
| FLCU00 | Customer/Vendor Integration: FI Customer |
| FLCU01 | Customer/Vendor Integration: Customer |
| FLVN00 | Customer/Vendor Integration: FI Vendor |
| FLVN01 | Customer/Vendor Integration: Vendor |
That separation ensures that you can create a BP in Finance and in Sales/ Purchasing separately - which kind of works like old way split between FK01/FD01 in Finance and VD01 / MK01 in Sales/ Purchasing.
As you see there is no straightforward BP Role which enables you to create both Finance and Sales/ Purchasing at one go.
In the past the split was due to separation of applications and connection between Vendor and Customer maintained only in form of a Partner number in master data. Nowadays they share much more. You may wonder how to replicate functionality of XK01/ XD01 with proper segregation of duties.This blog will help you understand how you can influence the visibility of BP options using standard customizing.
BP View
In BP Roles customizing:
| IMG Path |
| Cross-Application Components -> SAP Business Partner -> Business Partner -> Basic Settings -> Business Partner Roles -> Define BP Roles |
you can see in settings of each role a BP View is assigned:
BP View in BP Role - FLCU00
BP View is what controls availability of fields that can be configured for visibility for a BP Role.
BP View can be maintained using BUSD Transaction:
BUSD BP View maintanance
There are 3 most important settings made for a BP View.
- Data Sets
- Calling Applications
- Screen sequences
Data Sets are assigned to 'Views' defined in BUS3 transaction - to userstand the naming of BP screen objects have a look at the excellent blog of Andi Mauersberger with introduction to BDT.
Calling Applications are kind of another grouping of Views that help in easy control of active components of BP.
Screen sequences define the buttons which you can see in BP:
BP View Buttons on BP
Having learned about that lets check how standard BP roles are defined:
BP View Data Sets
The CVIC* or CVIV* Sets are assigned - they control the CVI Settings for Customer and Vendor.
The buttons visible above - Company Code/ Sales and Distribution are controlled by Subheaders Id:
BUSD Subheader Ids
Here you can control which buttons are available for each BP Role.
The Screen Sequences control correct processing of the screen buttons:
BUSD Screen Sequence
Create new BP View
BP Views do not need any development and are easy to create. You can assign them to custom roles.
Lets create a new BP View that allows both Company and Sales Area data maintanance.
Start from copying existing view FLCU00 and create your own Z* view:
BUSD - Copy BP View
All related-entries will be copied as well. Now go to the other role FLCU01 and copy the content of:
Data Sets
Calling Applications
Screen Sequence
Subheader ID
Do not copy the Views part.
At the end in your new role you should have:
BUSD New Screen Sequences
BUSD New Screen Subheader
Make sure all data sets are copied from the other role - they controll the visible fields!
Assign new BP View to Role
BP Views are assigned to BP Roles in customizing:
| IMG Activity | Cross-Application Components –> SAP Business Partner –> Business Partner –> Basic Settings–> Business Partner Roles –> Define BP Roles |
| Transaction | Define BP Roles |
Copy the existing role FLCU00 to your custom one and assign newly cleared BP View:
New BP Role with Full View
Create also the BP Role Category with the same name.
Check BP Transaction with new role
Once customizing is done check in BP transaction if your new role is available and you are able to see all buttons:
BP New role with FI SD view
Now you can centrall create customer with all views like in XD01.
Segregation of Duties (SOD)
The separation between Finance and Sales view was not introduced in SAP just becasue it is nice - it also covers an aspect of segregation of duties.
When the views are combined you still need to make sure that user rights are respected. You may want to make sure that Sales Persons do not have view to Finance and the other way around.
Removing the clear BP role separation you need to apply a different way. Fortunatelly the way can be handled via authorizations to Field Groups.
In BP you are able to control authorization by meaning of every field group.
At first define which fields should be contolled via authorizations:
| IMG Activity | Cross-Application Components –> SAP Business Partner –> Business Partner –> Basic Settings–> Authorization Management –> Define Field Groups Relevant to Authorizations |
| Transaction | Define Field Groups Relevant to Authorizations |
Pick up these field groups (defined in BUS2) which are relevant for restiction - for example these are the fields available for customer in company code data:
BP Field Group Authorization
Once entered in customizing, you can controll them in role definition by authorization object B_BUPA_FDG:
PFCG B_BUPA_FDG Customizing
Afterwards system applies the authorization check on each field and secures that only certain data can be edited.
This supports the standard authorization objects for customers/ vendors which anyway allow to restrict if Financial Accounting or Sales or Purchase data can be edited (like object F_KNA1_APP).
Thank you for reading,
Marek Turczyński
First part of Business Partner Blog series: Custom BP Relationship Category and KNVK synchronization
- SAP Managed Tags:
1 Comment
