CRM 7.0 - Restrict Available BP Roles in Account Maintenance

Dear Experts,
During BP Maintenance in CRM 7.0 Web UI, how can we restrict the BP role values that are available in the BP Role assignment block i.e. we want to limit only to "Sold-To Party" and "Contact Person."
UI Component: BP_ROLES
View: BP_ROLES/RolesList
Can we achieve this through Security (which object) or Standard Config.
There is a config setting in SPRO for BP role exclusion groups. Is this relevant here?
Thanks!!!
FK
p.s. We attempted a config change to a BP Role Security profile but this only limited SAP GUI not Web UI. Is there a different object to limit the values in the Web UI Assignment Block

Hi Fakhan,
There are two ways to solve your requirement :
1. via authorization
explore authorization object B_BUPA_RLT and CRM_BPROLE. Those authorization objects define which BP roles can be edited.
OR
2. via enhancement
Enhance component BP_Roles/AccountRolesEL. In the context node BUILROLES enhance method GET_V_PARTNERROLE
Do the same in component BP_roles/RolesList context node ROLES method GET_V_PARTNERROLE
Hope it's solve your problem
Cheers,
Lina

Similar Messages

Set default role for Account in SAP CRM 7.0

We are using SAP CRM 7.0
When an end user creates a new account there is a section called
"Role" sub assignment block with entries like "Competitor", "Account", Contact Person, etc.
I want by default when you create an account that the role Account is specified in there.
I want it done automatically and do not want to rely on the end user to seelct this.
I was able to do this with contacts by using an SAP note to set this for cotnact person.
But does anyone know how to do it for an Account ?
All I want to do is that when an account is created the system automatically sets the role as "Account".
Thanks,
Jon

Hi Jon,
For any code changes in bsp components we need it's z-instance and that we get after enhancing the respective entity for eg views, context nodes etc..
In case you are not familiar with the enhancement, please refer to some thread which explain about the component enhancement concept.
Coming to this requirement..
You need to enhance bp_roles component, then enhance rolelist view and roles context node.. redefine the GET_V_PARTNERROLE method.. copy the parent class code and do the necessary changes to manipulate the entries in gt_ddlb_add
Check the statement at line no 107..
gr_ddlb_roles->set_selection_table( it_selection_table = gt_ddlb_add ).
Just before above statment call, manipulate gt_ddlb_add to keep the required role value at index 1..
Another thing in my test system i can't see any role as "Account" under SPRO customizing "Business Partner Roles" instead "Business Partner (Gen.)" is available, don't know if you are able to see Account Role in the Roles DDLB..
i would suggest debug the get_v_partnerrole method once at line no 107 see the entries in gt table you will get an idea what you need to change.
Hope this helps..
Cheers,
Sumit Mittal

OBI 11.1.1.6-Restrict visible application roles while sharing customization

Hi,
I am trying to test the security around share customizations functionality accessed through (any)Dashboard -> Page Options -> Save Current Customization -> Save for Others -> Set Permissions -> (+)Add Roles/groups -> Search Application Roles
While searching for the Application roles, user gets to see all Application Roles and can assign the customization to any role. The search should have shown only the Application roles assigned to the user else irrelevant customization can be assigned to other application roles which cannot see the data for the selected filters in the customization
Is there some configuration setting somewhere to restrict the application roles seen in the search option while saving customizations for others?

896267 wrote:
Nope. Manage Privileges -> Save Customization feature just provides access to save the customization for the defined role(s).
The question is related to Saving customization for others through the Set Permission dialog box.There is no such setting as the list of application roles and catalog groups are directly sourced from system-jazn-data.xml file and the catalog. In the user trianing, you could probably let the users know to prefix the application role name for that set of filters.
Thanks,
-Amith.

Need to restrict HR payroll Roles on Payroll area

Hi,
Can anybody pls guide me how can i restrict HR payroll roles on Payroll area Level.As of now system is not checking the payroll area value as authorization relevant.
if the solution is through org key, pls explain the detail process of using org key.
if it is through custom object, pls clarify the implication on the system once we run the standard program.
Secondly i also want to restrict the roles on Personal Sub area level and OM roles on Org.ID level.
appericiate your early response.
Regards,
Ramakrishna

Hi Ramakrishna,
According to the documentation it seems to be possible to check authorizations for the payroll area with the authorization field VDSK1 of the authorization Object P_ORGIN if the feature VDSK1 is mapped to the payroll area. (However, I'm not sure about this because I never have worked with this option myself.)
Online help
[VDSK1 (Organizational Key)|http://help.sap.com/saphelp_470/helpdata/en/17/4bba3b3bf00152e10000000a114084/frameset.htm]
If you use this authorization field VDSK1 this way I suggest to turn it into an "Org. Level" field using report PFCG_ORGFIELD_CREATE, too. This enables you to work with derived roles instead of normal roles. See note [323817 |https://service.sap.com/sap/support/notes/323817] "Creating org.level fields for the Profile Generator" .
Kind regards
Frank Buchholz

Restrict available languages in portal

Hello forum,
We operate EP 60_SP14 and want to restrict the available languages in the portal.
In the logon screen, the language is detected based on the client browser setting; we can do without this 'automatic' detection and prefer to have a localized logon page that is displayed in the default locale/language.
Is there a possibility to restrict available languages/locales by a method such as to set the default locale (Re: Change default English Locale)
Additionally, if we could provide our users with the possibility to choose which language they want to log on with this would be a plus. We have set ume.logon.locale=TRUE (in UME properties) so that a language selection box is displayed on the logon screen, but this box contains all the languages.
Is there a possibility to restrict this list (in the logon screen) such as you can do within the portal (http://help.sap.com/saphelp_nw04/helpdata/en/49/e607426338da6fe10000000a1550b0/frameset.htm)?
Thanks for your hints!
Kind regards,
Walter

Hello Detlev,
We need to provide access to the portal in two languages only; our default language is dutch (nl) and we want to provide users with the possibility to switch to english.
Therefor, I would like to switch off the automatic language detection and don't use any setting the browser sends, but rather just use 'nl' as the language in which the logon screen is displayed. (we can and will accept the fact that the logon screen is only in dutch).
Instead of translating the logon-screen however, I think that forcing the language to 'nl' is a more neat solution. For example, is there a possibility to set the portalapp.xml property <property name="ForcedRequestLanguage" value="nl"/> for the logon screen somewhere?
Would we not be able to force the language into dutch then removing the language bundles could be a solution. Can you direct me to instructions on how to do this neatly? I guess that just removing the language bundles will still leave me with all the languages selectable in the combobox at the logon screen.
Finally, setting the ume.logon.locale option seems to work; the combobox from the logon screen allows us to select a language without problems. Instead of manually edit-ing the code; I want to restrict languages in this box to Dutch and English.
Thanks so far!
Kind regards,
Walter

Restrict some user roles for tocde VA02

Hi All,
Please can any one help on this?
i have to restrict some user roles while rejecting the item in va02 tcode. how to do this.
Thanks,
Ramu

Hi,
There are two ways to do this:
- Make a transaction variant through SHD0 and assign it to your sales doc. While creating the variant you can place non-changeability ticks on specific fields. Next allow those users only to work with your transaction variant but not with the original transaction.
- You could make use of user-exit FORM USEREXIT_FIELD_MODIFICATION in include MV45AFZZ (via authorization objects, which you can assign in role customizing).
Check this link:
http://www.sap-img.com/sap-sd/short-sap-sd-questions-3.htm
Regards
Adil

How to Restrict the node level in account hierarchy

Hi experts,
I want to restrict the node level in account hierarchy. I attached one example. in that if i click 6000 node again it want to show error message. for one parent node i want to create only two child node. Further if i create means it want to show error msgs and not allow to create the node..
Regards,
gopi

Hi ,
The component is bp_hier, and method is onnew_node.
IF lv_tree->is_locked( ) = abap_false.
     lv_tree->lock( ).
   ENDIF.
   CHECK lv_tree->is_locked( ) = abap_true.
   lv_index = typed_context->accounthierarchy->selected_index.
   lv_tree_node = typed_context->accounthierarchy->get_node_by_index( lv_index ).
*key = lv_tree_node->node_key.
CALL METHOD lv_api->get_node_parent
     EXPORTING
       iv_node_key        = key
     IMPORTING
       ev_parent_node_key = lv_paent_key
*      ev_tree_guid       =
*   lv_parent = lv_tree_node->parent_entity.
*    typed_context->accounthierarchy->parent_entity.
CALL METHOD lv_tree_node->get_children
   receiving
     rt_children = rt_child.
   CHECK lv_tree_node IS BOUND.
   lv_tree_node->is_leaf = abap_false.
   TRY.
       lv_proxy_node ?= lv_tree_node.
       TRY.
           lv_object ?= lv_proxy_node->bo.
         CATCH cx_sy_move_cast_error.
           lv_mixed_node ?= lv_proxy_node->bo.
           lv_object ?= lv_mixed_node->if_bsp_wd_ext_property_access~get_model_node( ).
       ENDTRY.
       lv_object_name = lv_object->get_name( ).
       IF lv_object_name = 'BuilHierarchyNode'.
         lv_relation_name = 'BuilHNodeRel'.
       ELSEIF lv_object_name = 'BuilHierarchyHeader'.
         lv_relation_name = 'BuilHeaderNodeRel'.
       ELSE.
         RETURN.
       ENDIF.
       lv_tree_node->get_children( ).
       lv_object = lv_object->create_related_entity( lv_relation_name ).
       lv_child_node = lv_proxy_node->node_factory->get_proxy(
           iv_bo = lv_object
           iv_proxy_type = 'CL_BP_HIER_HIERARCHYTREEV_CN05'
           iv_parent_proxy = lv_tree_node ).
       lv_tree_node->expand_node( ).
       typed_context->accounthierarchy->refresh( ).
       typed_context->accounthierarchy->deselect_all( ).
       lv_child_node->selected = abap_true.
       lv_child_node->is_leaf = abap_true.
*accounthierarchy
*      selectedhierarchynode
       lv_col_wrap = typed_context->selectedhierarchynode->get_collection_wrapper( ).
       lv_col_wrap->clear( ).
This is the code.
i wrote . but its not getting.

How to handle Custom field added in BP : Role Bill Account

Hi Friends,
I am working on an interface which creates Bill Account role for a BP but the problem is there are about 15 Custom fields added to standard BP transaction in BA role.
As I am using BAPI_BUPA_FS_CREATE_FROM_DATA2 for creating the BP and
BAPI_BUPA_CENTRAL_CHANGE for changing the BP role Bill Account?
Can anyone tell me how to handle those custom fields in the existing BAPIs or there is some other way of doing it?
Thanks in advance,
Pradeep
Note : Helpful answers will be rewarded.

Hi,
I have seen these BAPIs but are they used with normal BAPIs for BP creation and change.
For example : I create the BP using BAPI_BUPA_FS_CREATE_FROM_DATA2 and for the Custom fields I should use these BAPIs as suggested by you alongwith the create BAPI.
And will it work for Changing the BP also.
Kindly clarify.
Regards,
Pradeep

...notifications are a paid only feature, they are not available with a free account...

Hi Support-Team,
is there a chance to change this:
"... notifications are a paid only feature, they are not available with a free account ..."
If we can't send a notification to an other user FormsCentral doesn't make sence and will cancel the account... That would be a pity, because otherwise everything would work very well.
Kind regards
Andreas

Hi;
Thanks for your feedback, but notifications are a paid feature and are not available in a free account. That isn't likely to change. Hopefully there is enough value in this and the other features of a paid account for you to consider an upgrade.
Thanks,
Josh

How could i get access to MDM API,Is it available to all Enterprise accounts?e

Hi ,
I am trying to develop an enterprise application which needs to list all the installed Enterprise apps in the device.Also there is an option to delete the installed enterprise apps from device.I found that this can be done only by setting up a customized MDM server.My company already has an enterprise account.I have some doubts related to this
1 . Is it possible to setup a custom MDM server using MDM API's?
2. How could i get access to MDM API's to setup a custom MDM server/
3. Is MDM server provided only by third party vendors?
4. Is MDM server /MDM API available to all enterprise accounts?
Looking forward for a quick response.
Thanks in advance

A backup of a device with a newer version of iOS cannot be retored to a device with an older version. The solution is to connect to itunes and update the new device's iOS, then perform a restore.

I've already purchased iMovie 9.0.6 on my computer, but i can't upgrade it. it said there is available update on another account, but i just got one account on my computer...

I've already purchased iMovie 9.0.6 on my computer, but i can't upgrade it. it said there is available update on another account, but i just got one account on my computer...

Updates:
I found why the original backup file is not showing on iTunes. Becuase it is corrupted.
All other folders contains Infor.plist, Manifest.mbdb, Manifest.plist and Status plist files.
But the folder that contains origianal backup files does not have those files above.
I think the only way I can restore the data is using third party extracting software.
Do you know anything about that kind of software?

TS1702 Unable to make an in-purchase. App says the account and apple ID dont match and i must install the app.. The original app is no longer available, the game and account were updated. Thank you

Unable to make an in-purchase. App says the account and apple ID dont match and i must install the app.. The original app is no longer available, the game and account were updated. Thank you

You will need to login on the device using the same exact Apple ID that was used to download the app. You can not use abother account login to buy in app purchases to prevent fraud.
If you keep getting this warning, you are not logged into the original account.

GRC AC: regular Email notification about role or account expiration

Hello all,
Is it possible to use GRC AC for sending email notifications to users about role or account expiration?
For example 1 week before SAP account expired.
Or should we use some external application for this job?
Thanks,
Anton,

Hi Anton,
CUP is not designed to for sending email notifications to users about role or account expiration.
If you want this functionality, please open an enhancement request following the note below.
Note # 1083615 - GRC Access Control Enhancement Process.
Best Regards,
Sirish Gullapalli.

MM role in Account determination

hii
What are major MM consultant roles in account determination.??
Explain in detail...?
Thanks

Hi MM Group,
SAP MM Role in Account Determination :
This account determination is for MM settings u2013 Rajgeetha
Account determination is based for combination of valuation grouping code, general modifier/account modifier, valuation class in SAP MM.
This will be defined for particular transaction event key. Transaction event key will inturn be defined for each movement type of SAP MM.
Basically GL account are assigned for certain combination of above.
To put down in flowchart format-
- Movement type-
- Transaction event key
- GL account determination (one debit and one credit)- based on below combination
- Valuation grouping code (see definition below)
- Account modifier (see definition below)
- Valuation class (see definition below)
SAP will see transaction is made in MM, it searches the transaction event key from movement types. Based on valuation grouping code, account modifier and valuation class, determination will be done for GL account for debit and credit.
Some definitions and assignments
1) SAP MM Valuation grouping code: It is maintained as part of plant configuration same for all plants within company code having same chart of account.
This will be applicable only if valuation control is active for organization
2) SAP MM Account modifier: This is defined in each movement type. There may be more than one account modifier per movement type based on combinations of different special stock, movement indicator, consumption type.
3) SAP MM valuation class: This is maintained in material master. Material type is taken from material master. Account category reference is taken from material type which in turn is assigned to valuation class. GL account are assigned to valuation class
Example:
Material 1016101 is received in stock for plant SEPC by movement 101 in SAP MM.
1) Valuation class determination from material master of 1016101.
2) Valuation grouping code determination based on plant SEPC
3) Account modifier will be taken from movement type 101
4) Transaction event key will be always BSX for inventory posting. (that is programmed) and also defined in movement type
5) In account assignment, for combination of above GL account determination as we saw in above hierarchy.
Hope, it is useful for you,
Regards,
K.Rajendran

Face Time - "This ipod is restricted from creating Face Time Accounts"

Since uploading iso6 the ipod touch has the following message when selecting Face Time "This iPod touch is restricted from creating Face Time accounts. I have tried switching off/on. I have reviewed the restrictions and it is not restricted. The message above will not even allow me to 'get started'? although previous to iso6 Face Time was fine...... any help apreciated.

I have not seen that problem. All I can suggest is the standard fixes:
- Reset the iPod. Nothing will be lost
Reset iPod touch: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup
- Restore to factory settings/new iPod.
- Make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

CRM 7.0 - Restrict Available BP Roles in Account Maintenance

Similar Messages

Maybe you are looking for