How To Fix FS684 - Additional authorization check is deactivated in Check Management

SAP Error Message - Details

• Message type: E = Error

• Message class: FS - Messages from Tax Routines / Prenumbered Checks

• Message number: 684

• Message text: Additional authorization check is deactivated in Check Management

INCLUDE FS683 OBJECT DOKU ID NA

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message FS684 - Additional authorization check is deactivated in Check Management ?

  The SAP error message FS684, which states "Additional authorization check is deactivated in Check Management," typically occurs in the context of the Check Management module within SAP. This error indicates that there is a missing authorization for a specific action related to check processing, and the additional authorization checks that could have provided access are currently deactivated.
  Cause:
  
  Authorization Issues: The user attempting to perform the action does not have the necessary authorizations assigned in their user profile.
  Deactivated Checks: The additional authorization checks that could have provided access to the user are turned off in the system configuration.
  Role Configuration: The roles assigned to the user may not include the necessary permissions for the specific transaction or action they are trying to execute.
  
  Solution:
  
  
  Check User Authorizations:
  
  Use transaction code SU53 immediately after the error occurs to analyze the authorization check failure. This will show you which specific authorizations are missing.
  Review the user’s roles and authorizations in transaction SU01 or PFCG to ensure that the necessary permissions for Check Management are included.
  
  
  
  Activate Additional Authorization Checks:
  
  If the additional authorization checks are deactivated and you want to enable them, you can do this in the configuration settings. This typically involves accessing the relevant customizing settings in the SAP system (transaction SPRO).
  Navigate to the Check Management settings and look for options related to authorization checks. Ensure that the necessary checks are activated.
  
  
  
  Role Adjustment:
  
  If the user lacks the necessary roles, you may need to assign additional roles that include the required authorizations for Check Management.
  Work with your SAP security team to ensure that the roles are properly configured and assigned.
  
  
  
  Consult Documentation:
  
  Review SAP documentation or notes related to Check Management and authorization checks for any specific guidance or updates that may be relevant to your version of SAP.
  
  
  
  Related Information:
  
  
  Transaction Codes: 
  
  SU53: Display Authorization Check
  SU01: User Maintenance
  PFCG: Role Maintenance
  SPRO: Customizing Implementation Guide
  
  
  
  SAP Notes: Check for any relevant SAP Notes that may address this specific error or provide additional context on authorization checks in Check Management.
  
  
  User Training: Ensure that users are trained on the necessary processes and understand the importance of having the correct authorizations for their roles.
  
  
  By following these steps, you should be able to resolve the FS684 error and ensure that users have the appropriate access to perform their tasks in Check Management.