sapnote_0001259643

27.12.2011 of 3

SAP Note 1259643 - Authorization checks in SD creditmanagement

Note Language: English Version: 7 Validity: Valid Since 09.10.2008

Summary

SymptomYou require more detailed information about the authorization checks in SDcredit management.

Other termsVKM1, VKM2, VKM4, SIZEC, T691H, VM005, VM 005

Reason and Prerequisites*

SolutionThere are two authorization objects in SD credit management. Bothauthorization objects are used only for the release of credit-blockeddocuments, that is, they are used only in VKM* list transactions.

The authorization checks are performed only when the list is set up. Foreach document, the system checks whether the user has the requiredauthorizations. If the user does not have the required authorizations, thesystem does not display the relevant document in the list.

Therefore:

o The system displays different lists for different users, even ifthey use the same selection data.

o Actions in the list do NOT trigger a new authorization check. Onlyif a new selection is performed, the system runs the authorizationcheck again.

Authorization according to document value class (authorizationobject V_VBUK_FRE)

This authorization allows your users to release documents only if a definedrelease value is not exceeded in the document.

1. In Customizing for the SD credit management, you create document valueclasses and assign maximum release values to these classes(transaction OVBC and OVBD). For more information, see Note 677870.

2. You use the authorizations to assign document value classes to yourusers.

3. For the authorization check, the system determines the suitabledocument value class for each document. For this, the credit value orrelease value of the document is relevant.

4. During the authorization check, the system checks whether the document

27.12.2011 of 3


value class of the user is sufficient for the determined documentvalue class of the document.

5. If the document value class of the user is insufficient, the systemdoes not display the document in the list. The user cannot releasethis document as a result.

Example:In Customizing, you have created the following document value classes: CCAr Credit value Crcy Doc. value class 1000 5000 EUR 001 Low 1000 20000 EUR 002 Medium 1000 100000 EUR 003 High 1000 999999999999999 EUR 999 Very highSales order 123 has a credit value of EUR 25,000.00 and was blocked by thecredit check. The authorizations of the responsible person MILLER includedocument value classes 001 and 002. In transaction VKM1 ("Blocked SDDocuments"), document value class 003 is assigned to sales order 123.The responsible person MILLER does not have the required authorization fordocument value class 003 and, therefore, the system does not display salesorder 123 in his list.

Authorization according to credit limit (authorization objectV_KNKK_FRE)

You can use this authorization to allow your users to release documents,only if the credit limit used that is defined in percentage is not exceededby the credit customer.

1. You use the authorizations to define the maximum percentage of thecredit limit used by a credit customer that allows your users torelease documents.

2. For the authorization check, the system determines the credit customernumber for each document.

3. During the authorization check, the system checks for each creditcustomer, the credit limit used in percentage against the credit limitused that can be released by a specific user.

4. If the credit limit used in percentage that is defined for the creditcustomer is higher than the credit limit used that can be released bythe relevant user, the system does not display documents for thiscredit customer. Therefore, the user cannot release these documents.The system issues information message VM 005 ("No authorization formaintaining cred.limit used for cust.: Docs.ignored").

Example:Credit customer ABC has a credit limit of EUR 10,000.00 and open SDdocuments with a total value of EUR 9,000.00. Therefore, the credit limitused by this customer amounts to 90%. The responsible person MILLER has theauthorization to release document for credit customers for which a maximumcredit limit used of 80% is defined.The responsible person MILLER is not allowed to release documents of the

27.12.2011 of 3


credit customer ABC. In transaction VKM1 ("Blocked SD Documents"), theresponsible person MILLER cannot display documents of the customer ABC, andthe system issues information message VM 005 ("No authorization formaintaining cred.limit used for cust.: Docs.ignored").

Technical information:

The credit checks are performed in the following function modules:

o V_VBUK_FRE is checked in the function moduleCREDIT_AUTHORITYCHECK_DOCUMENT.

o V_KNKK_FRE is checked in the function moduleCREDIT_AUTHORITYCHECK_CUSTOMER.

Documentation

For more information, see the online documentation in the sales module(SD), area credit management (SD-BF-CM), topic "Authorizations".

Header Data

Release Status: Released for CustomerReleased on: 09.10.2008 09:53:54Master Language: GermanPriority: Recommendations/additional infoCategory: ConsultingPrimary Component: SD-BF-CM Credit Management

Secondary Components:FI-AR-CR Credit Management

The Note is release-independent

Related Notes

Number Short Text

677870 Sales documents released despite missing authorization