However, if you must, you can control posting to accounts (primary cost elements) in FI by assigning authorization groups to the account. There are posting options directly in CO (controlling) but they should be reserved for expert users. You can also use validation rules in CO to control certain kinds of postings.
Dig Deeper on SAP security
Related Q&A from Corwin Slack
A SearchSAP.com reader wants to know how to grant a user access to cost centers, as well as access to one cost element across all cost centers. Continue Reading
Learn how to stop SAP users from displaying HR table contents in an SAP table without restricting access to an SE16N transaction. Continue Reading
A SearchSAP.com reader who stores user email addresses within the SAP SU01 transaction code and wants to know where to locate the data. Continue Reading