SAP R/3 ooffers various ways to restrict user access to sensitive and critical transactions. One such way is to restrict restrict users in SAP using "tolerance groups" Tolerance groups in SPA help in restricting user access to say a GL general ledger account and open items posting to predefined amounts. To take a simple example, if a company has a predefined delegation of authority for say approving amount of transactions which users can post in SAP, the same can be configured by defining amounts upto which users can post transactions.

The transaction T-Code T043T which is FI tolerance groups for employees an SAP R/3 auditor can check whether tolerance groups have been defined in SAP for financial accounting or not. The table T043T is shown in the screenshot below. Here one can see that based on company codes in SAP, the a predefined limit can be placed on amount per document and the amount per C/V item.

Defining tolerance groups for financial accounting is an easy way to control risks because it does not rely on the authorization concept of roles and profiles in SAP. The tolerance groups defined in the table T043T are employee oriented and hence do not require defining roles and profiles.

Related Posts

Functional Area in SAP
Configuring Sourcelists in SAP MM
SAP PP - Bill of Material BOM
SAP SD - Basics of Sales Documents