Background: After SAP implementation, one of the very common issues from the business is about storage location authorization. When business having multiple storage location for same material, business expect to consume the stock from defined storage location but in SAP, system allows the user to post the stock from any storage location even though storage location value maintained in Object M_MSEG_LGO of the user role as below.
Will test this scenario to confirm whether system have control or not by just maintaining the storage location in user role.
- Creating the process order
- Confirm the process order with auto GI & GR
Here I am trying to post the stock from storage locations 0032 & 0092. These both are not maintained in my role but still system will allow me to post as below.
As said, the system allowed me to post the stock to storage locations which are not part of my role.
The reason behind this is, there is configuration which functional consultant need to in “Inventory Management and Physical Inventory.”. Without this configuration, even basis consultant/ GRC consultant/ Security consultant that maintains the storage location in user role system won’t check the storage location which maintained in user role.
The path that functional consultants need to follow to do configuration for authorization check for storage location mentioned below.
SPRO—–> Materials Management—–> Inventory Management and Physical Inventory —>
Authorization Management —–> Authorization Check for Storage Locations.
In this configuration, we need to make check marks for the storage locations that are in that plant so that system will check the user role for storage location. If still not working, reach out to basis team to check the roles if they maintain * Value for LGORT field.
