Financial Master Data Governance
Master Data Governanceintermediate

Validation and Derivation Rules for Financial Master Data Change Requests

Learn how validation and derivation rules are configured and executed within MDG-F change requests to enforce financial data quality and automatically populate dependent fields.

Explanation

Once a governance process for a financial object like a GL account or cost center is set up in MDG, raw data entry alone is not enough to guarantee usable master data. Validation rules and derivation rules are the two mechanisms that turn a data entry workflow into a governed, quality-controlled process. Validations block or warn against incorrect combinations of field values before a change request can be submitted for approval; derivations automatically calculate or default field values based on other entered data, reducing manual effort and human error. In SAP MDG, these rules are typically implemented using a rules engine (commonly BRFplus in on-premise/private cloud scenarios, or the cloud-equivalent business rules capability in newer releases) that is called from defined checkpoints in the change request processing flow. A checkpoint is a technical hook in the governance framework where custom or standard logic can be triggered — for example, after a user saves a step, before a workflow step is completed, or before the change request is submitted for approval. For financial master data, typical validation examples include: ensuring a GL account's account group is consistent with its chart of accounts assignment, ensuring a cost center's controlling area matches its assigned company code, or preventing a profit center from being created without a valid segment assignment when segment reporting is mandatory in that group. Typical derivation examples include: automatically setting a GL account's field status group based on account group, deriving a cost center category default from the cost center's assigned hierarchy node, or populating a functional area based on cost element category. Functionally, the configuration work is usually a combination of: (1) identifying which entity type and business context the rule applies to (GL account, cost center, profit center, or a company-code-dependent view of these), (2) building the rule logic itself in the rules engine using decision tables, expressions, or formulas rather than hard-coded ABAP wherever possible, so that business users or data stewards can maintain the logic without a full development cycle, and (3) binding the rule to the correct checkpoint so it fires at the right point in the single or multi-step workflow. Getting the checkpoint wrong is a common source of confusion: a rule bound too early may not yet have access to fields entered in a later governance step, while a rule bound too late may allow a requester to proceed further than intended before being blocked. A key architectural decision is whether to implement logic as a hard validation (blocking, preventing submission) or a soft validation (warning, allowing override with justification). For financial data feeding downstream postings and consolidation, blocking validations are usually preferred for control-relevant fields — for example, incorrect controlling area or company code assignments that would cause postings to fail or misstate financial results. Soft warnings are more appropriate for data quality nudges, such as recommending a naming convention for cost center descriptions. Derivations must also be designed with idempotency and re-derivation in mind: if a user changes an upstream field after a derived field was already calculated, the process needs to either automatically re-trigger derivation or clearly indicate that the derived value may now be stale. In multi-step workflows with different agents at each step (e.g., a regional data steward followed by a central finance approver), it is common to re-run validations at each step transition to catch inconsistencies introduced between steps, not just at initial submission. On S/4HANA on-premise and private cloud, teams typically have flexibility to build custom rule tables and formulas within the delivered rules framework, and to combine BRFplus-based rules with limited custom code in enhancement spots where a more complex algorithm is required, subject to standard extensibility guidance. In S/4HANA Cloud public edition, the extensibility surface for custom validation/derivation logic is narrower and centered on released, supported extension techniques; teams should expect more reliance on standard configuration and pre-delivered rule types, and should verify current extensibility scope before designing custom logic, since capabilities evolve by release. Regardless of deployment, rules should be tested against representative negative cases (data that should be blocked) and positive cases (valid data that must not be incorrectly blocked), because overly strict validations are a frequent cause of governance process abandonment by business users.

Code example

ABAP Code
* Conceptual example of a BRFplus-style decision table used for GL account validation* (illustrative structure only, not a literal transaction or API) Decision Table: VALIDATE_GLACCOUNT_ACCTGROUPInput columns: CHART_OF_ACCOUNTS, ACCOUNT_GROUP, GL_ACCOUNT_TYPEOutput columns: RESULT, MESSAGE_TEXT Row 1: CHART_OF_ACCOUNTS = 'INT1', ACCOUNT_GROUP = 'CASH', GL_ACCOUNT_TYPE <> 'BS'  -> RESULT = 'ERROR', MESSAGE_TEXT = 'Cash accounts must be balance sheet accounts' Row 2: CHART_OF_ACCOUNTS = 'INT1', ACCOUNT_GROUP = 'REVN', GL_ACCOUNT_TYPE <> 'PL'  -> RESULT = 'ERROR', MESSAGE_TEXT = 'Revenue accounts must be P&L accounts' Row 3: (default) -> RESULT = 'OK' * Conceptual derivation rule for functional area on a cost elementDerivation: DERIVE_FUNCTIONAL_AREAInput: COST_ELEMENT_CATEGORY, CONTROLLING_AREALogic:  IF COST_ELEMENT_CATEGORY = '1' (primary cost element)     THEN FUNCTIONAL_AREA = lookup(CONTROLLING_AREA -> default mapping table)  ELSE FUNCTIONAL_AREA = leave blank for manual entry * These rules are bound to checkpoints such as:*  - after data entry step (run validations)*  - before workflow step completion (re-run validations + derivations)*  - before final approval (final blocking validation pass)

Real project scenario

A multinational manufacturer implementing centralized cost center governance across 12 controlling areas found that regional analysts were frequently creating cost centers with mismatched profit center and controlling area combinations, causing downstream allocation cycle failures during month-end close. The MDG team worked with FI/CO process owners to define a decision-table-based validation that blocked submission whenever the requested profit center's controlling area did not match the cost center's controlling area, and added a derivation to auto-populate the cost center's standard hierarchy node based on the requesting region and cost center category. After rollout, allocation cycle errors attributable to master data mismatches dropped significantly, and the central finance approval step could focus on business justification rather than technical field consistency, shortening average approval time.

Common mistakes

• Binding validation rules to the wrong checkpoint so they fire too early (missing data) or too late (after the user has already moved past the relevant step) • Using only blocking (hard) validations everywhere, which frustrates business users and increases process abandonment for minor data quality issues that could be warnings instead • Hard-coding business logic in custom code instead of using maintainable decision tables, making future rule changes require a development cycle • Failing to re-run validations and derivations after a value changes in a later workflow step, leaving stale or inconsistent derived fields • Not testing rules against realistic negative test cases, resulting in invalid data slipping through to replication • Assuming the same extensibility approach used on-premise will be available unchanged in S/4HANA Cloud public edition without checking current release capabilities

Best practices

• Prefer decision tables and configurable rule structures over hard-coded custom logic so business users or data stewards can maintain rules over time • Use blocking validations only for genuinely control-relevant fields that would break downstream processes if wrong; use warnings for softer data quality guidance • Bind rules to the checkpoint that guarantees all required input fields are already available, and re-run rules at subsequent workflow steps if data can still change • Maintain a documented test case set covering both valid and invalid data combinations for every validation rule • Coordinate rule design with FI/CO process owners so validations reflect actual downstream posting and consolidation requirements, not just data model constraints • Verify current extensibility options for validations and derivations against the specific SAP MDG deployment (on-premise, private cloud, or public cloud) before committing to a design

Interview angle

Interviewers assess whether a candidate understands that MDG data quality control is implemented through validation and derivation rules tied to specific checkpoints in the change request lifecycle, rather than through ad hoc field checks. Strong answers distinguish hard vs. soft validations, explain why decision tables are preferred over hard-coded logic for maintainability, describe how re-derivation is handled across multi-step workflows, and correctly note that cloud extensibility for custom rules is more constrained than on-premise, without overstating specific capabilities.