R001 · Create vendor and enter vendor invoice High
Subject: AP_FALSE2 (user) · SoD · detected at action level only — permission check clears it (likely false positive)
Why: the conflicting functions
AP01 · Enter Vendor Invoice T-code only
T-codes held (cause): FB60 via Z_AP_DISPLAY MIRO via Z_AP_DISPLAY
Permissions NOT satisfied:
Rule requires: g1 F_BKPF_BUK.ACTVT = 01
Rule actions: FB01 FB60 MIR7 MIRO
VM01 · Maintain Vendor Master satisfied
T-codes held (cause): FK01 via Z_VENDOR_MASTER MK01 via Z_VENDOR_MASTER XK01 via Z_VENDOR_MASTER XK02 via Z_VENDOR_MASTER
Permissions satisfied by roles: Z_VENDOR_MASTER
Rule requires: g1 F_LFA1_APP.ACTVT = 01g1 F_LFA1_APP.ACTVT = 02
Rule actions: FK01 FK02 MK01 MK02 XK01 XK02