How To Fix WS643 - Check authorization objects (cancellation) for Settlement Management

SAP Error Message - Details

• Message type: E = Error

• Message class: WS - Supplier Billing Document

• Message number: 643

• Message text: Check authorization objects (cancellation) for Settlement Management

What causes this issue?

You have activated an additional authorization check, for cancelling
posted documents, for Settlement Management. This may require some
postprocessing of authorization management.

System Response

The system also checks whether you are authorized to cancel settlement
management documents that have already been forwarded to Financial
Accounting. Cancellation cannot take place if an authorization is
missing.

How to fix this error?

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Procedure for System Administrators

Check the authorization objects W_WBRK_FKA and W_WBRK_ORG and adapt them
if necessary to include the 'Cancel (85)' activity in the user profile.
Unless you do this, cancellation is not possible.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message WS643 - Check authorization objects (cancellation) for Settlement Management ?

  Certainly! Here's a detailed explanation regarding the SAP error message WS643 related to Settlement Management:
  
  SAP Error Message: WS643 - Check authorization objects (cancellation)
  
  1. Cause
  The error message WS643 typically occurs when a user attempts to perform a cancellation (reversal) of a settlement document in SAP Settlement Management, but the user does not have the required authorizations to carry out this action.
  
  Settlement Management involves processing and settling costs or revenues between different cost centers, orders, or projects.
  Cancellation of a settlement document is a sensitive operation and requires specific authorization objects to ensure that only authorized personnel can reverse settlements.
  The system checks for certain authorization objects related to settlement cancellation, and if the user lacks these, the system throws the WS643 error.
  
  
  2. Authorization Objects Involved
  The key authorization objects related to settlement cancellation in SAP Settlement Management are:
  
  C_JEST_S: Authorization for settlement processing.
  C_JEST_C: Authorization for settlement cancellation.
  C_JEST_A: Authorization for settlement display.
  Possibly also C_JEST (general settlement authorization object).
  
  The exact authorization object depends on the SAP system version and configuration, but C_JEST_C is commonly checked for cancellation.
  
  3. Solution
  To resolve the WS643 error, follow these steps:
  
  
  Identify the User and Role:
  
  Determine which user is encountering the error.
  Check the roles assigned to this user in transaction SU01 or PFCG.
  
  
  
  Check Authorization Objects:
  
  Use transaction SU53 immediately after the error occurs to see which authorization check failed.
  Look specifically for missing authorizations related to settlement cancellation (e.g., C_JEST_C).
  
  
  
  Update Roles:
  
  Modify the user's role(s) in PFCG to include the necessary authorization objects and values.
  For example, add or adjust the authorization for C_JEST_C with the appropriate activity (e.g., activity 02 for change/cancellation).
  
  
  
  Test the Authorization:
  
  After updating the role, assign it to the user.
  Have the user log off and log back in.
  Retry the cancellation process to confirm the error is resolved.
  
  
  
  Transport Changes:
  
  If changes are made in a development system, transport the updated roles to quality and production systems following your change management process.
  
  
  
  
  4. Additional Related Information
  
  
  Transaction Codes:
  
  Settlement processing is often done via transactions like KO88 (Order Settlement), CJ88 (Project Settlement), or custom settlement transactions.
  Authorization checks happen during these transactions when cancellation is attempted.
  
  
  
  SAP Notes:
  
  Check SAP Notes related to settlement authorization if the problem persists.
  Sometimes, specific SAP patches or notes address authorization inconsistencies.
  
  
  
  Security Best Practices:
  
  Only grant cancellation authorizations to trusted users due to the financial impact of reversing settlements.
  Use role-based access control and segregation of duties principles.
  
  
  
  Debugging:
  
  If authorization checks are unclear, use transaction ST01 (Authorization Trace) to trace the authorization checks during the cancellation attempt.
  
  
  
  
  Summary
  
  
  
  Aspect
  Details
  
  
  
  
  Error Message
  WS643 - Check authorization objects (cancellation) for Settlement Management
  
  
  Cause
  User lacks required authorization objects to cancel a settlement document
  
  
  Key Authorization Object
  C_JEST_C (Settlement cancellation authorization)
  
  
  Solution
  Update user roles to include necessary authorization for settlement cancellation
  
  
  Tools to Diagnose
  SU53 (Authorization check), ST01 (Trace), PFCG (Role maintenance)
  
  
  
  
  If you need help with specific role configuration or further troubleshooting, feel free to ask!