Authorization Object M_BEST_BSA conflict in ME22N & VL32N.

Hi,

My requirement is that a particular user should not be allowed to us TCODE ME22N, but he can change inbound delivery from VL32N. I removed whole TCode : -  ME22N from his ID, now he is getting Authorization Error related to Auth. Object M_BEST_BSA, which is common for both the Tcodes.

Please suggest the way to resolve this.