R001 · Create vendor and enter vendor invoice High
Subject: VEND_FALSE (user) · SoD · detected at action level only — permission check clears it (likely false positive)
Why: the conflicting functions
AP01 · Enter Vendor Invoice satisfied
T-codes held (cause): FB60 via Z_AP_CLERK MIR7 via Z_AP_CLERK MIRO via Z_AP_CLERK
Permissions satisfied by roles: Z_AP_CLERK
Rule requires: g1 F_BKPF_BUK.ACTVT = 01
Rule actions: FB01 FB60 MIR7 MIRO
VM01 · Maintain Vendor Master T-code only
T-codes held (cause): XK01 via Z_VENDOR_VIEW
Permissions NOT satisfied:
Rule requires: g1 F_LFA1_APP.ACTVT = 01g1 F_LFA1_APP.ACTVT = 02
Rule actions: FK01 FK02 MK01 MK02 XK01 XK02