Account Lifecycle /Business Role

I have made a change to the account life cycle stages for a client.
The user can now change the account life cycle stage status from Customer Closed to First Order Completed. Previousl;y once the account was saved in Customer Closed Stage no changes could be made.
I made the changes using the BP Role Exclusion Group option and everything is working fine.
The status can be changed by loggin in from any business role.
But now i want to limit these changes to a particular Business Role (IC_Agent)
How can i do that?

Hi Shoaib,
You can follow this approach to achieve it.
lr_profile_instance TYPE REF TO if_crm_ui_profile.
lr_profile_instance = cl_crm_ui_profile=>get_instance( ).
CALL METHOD lr_profile_instance->get_profile
Get business role of current logged in user.
Disable the lifecycle field on UI based on the status (only for that status it will be disabled, for other status it will be enabled).
This can be achieved in 2 ways:
1. write code in GET_I method of the field to read value and then set field disabled property to true
2. OR you can create different view config using subojects - then call that config at runtime using do_config_determination.
There is another approach,
When you change the status, if on selection of new value some event occurs (which you can find in GET_P or put breakpoint in DO_HANDLE_EVENT) - then you can set the old value back or avoid it from setting the value.
(this can also be done in SET_<attribute> method - check business role and <old value>, if it is not what you want - do not put <new value> in the set method of the attribute in the context node.
I hope it resolves your problem.
Thanks,
Rohit

Similar Messages

Individual Account Creation in IC_AGENT business role.

Hi,
After system got upgraded from 6.0 to EHP1, marketing attributes are not working as expected.
When i create an Individual Account type in ZIC_AGENT business role, it gets created successfully but its marketing attributes are not getting set when i check in the Account overview.
There is a BADI implementation of "BUPA_GENERAL_UPDATE", i debugged and found that in FM "CRM_MKTBP_READ_KSSK_AUSP", system is trying to get the attributes from table "ausp"
      select * from ausp into table et_ausp
          where partner_guid = lv_guid
          and klart = 'BUP'.
I think, somewhere configurations are not done correctly. But i am aware where i check all these configurations for markting attributes corresponding to BP. If you know then please let me know.
Thanks
Raman.

Hi,
You can check it in ,
MARKETINGPRO ( business role ) -> Marketing ( work center ) -> attribute Sets
search for the specific attribute/attribute set. go to OV page ..there will b check box for person and organization.
Regards
Sandeep Kumar B

Link to Business Role and User Account

How to link an user account with a business role so that the user account can work with the new UI?

Hi,
Go to transaction PPOMA_CRM. Search for your business role say SALESPRO in the Position Search.Double click on the role so that its details are visible on the right hand side.Then search for your user from the user search.When it comes in the left side bottom, drag and drop it to the position on the right side.
Regards,
Rohit

SAP Technical roles and IDM Business roles mapping

Hi Guys
Just wondering if there is an easy way to export SAP Positions and create them automatically as Business Roles in IDM and the SAP technical roles that are related to that corresponding position into privledges assigned to that Business Role. Or am I going about this the wrong way? What do you normally do in terms of getting all your sap technical roles from the sap system and assigning them to business roles in IDM. Any help on this is much appreciated?
Cheers
Leo

Thanks Matt,
I think get I the picture now
One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
Here is what Ive done so far
1. HCM data loaded into productive identity store via vds
2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
Thanks again for all your help!
Leo

IC WebClient Shared Services Business Roles

Dear All
I have a question regarding the some of the IC Webclient Shared Services roles provided by SAP.
I know that as of CRM 7.0 EHP 1.0 SAP provides separate roles for Accounting Interaction Center, Employee Interaction center and ITDS- IT HelpDesk Role along with a Shared Services Agent Role.
I want to know that is it recommended to combine the Accounting Interaction Center, Employee Interaction Center and IT HelDesk role into one role or the opporsite way of using separte roles for separate functions.
Thanks
Tarang

Hello
Well...it depends.
If you want your agents to handle all types of calls and you don't have a big-big company with many employees and a big support desk, the best option (due to maintenance reasons) is keeping everything in a single business role with a multi account identification profile.
On the other hand, if you have agents with separate and independent account, IT and employee tasks and your business processes are different depending on who is on the phone, you need three different business roles.
So, to summarize, it depends on your project needs and your company size.
Regards
Joaquin

Fact sheet not visible in new Z business role

Hi all,
On creating a new Z marketing professional role after copying from the standard role, I am not able to find the option of viewing the Account Fact Sheet under the link "More" in the customer master. i didnt find any customizing wherein I could assign the fact sheet to the business role.
I've assigned the fact sheet to transaction types under Settings for activities but didnt work out. Any further settings ??
Deserving points to be rewarded, Regards,
Jacob.

Jacob,
check note 1040229.
you have to maintain cluster view CRMV_BUIL_PRT (tx sm34)
there you have to link your newly created business role (its PFCG role) to the form view CRM_ACCOUNT_OVERVIEW_PRN
and to class/interface CL_UIU_PRN_ACCOUNT.
should work this way
regards,
Ineke

Issue regarding Business Role assignment

Hi All,
1.
I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
In the infotype Business Role I have assigned IC_AGENT (standard) business role.
IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
2.
Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
Now when I run the application everything is visible (telephony, navigation bar and workarea).
Why is it not visible in first case?
I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
Regards,
Ashish

Hi Ashish,
As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
Refer pg 56 in CR580, it will clear your doubt.
Thanks & regards,
Suchita

Business Roles Provisioning - Issue

Hi All,
We are on GRC SP13.
We are using business roles for provisioning.
When i select "CHANGE ACCOUNT" request type and request for business roles through GRC, roles are being assigned to UserID and everything is working fine.
Issue is with the notification mail user is getting after provisioning. My notification email has details as shown below.
Hi Padmavathi Sai,
The Request number : 453 , has been processed and the Request is Closed. The details are as follows:
PREDDY User created in XXXXXXX
XXXXXXXXX Business role assigned to PREDDY
Kind regards,
Access Control Administrator
PREDDY UserID is already available in the target system and user selected change account request type, but notification email says that user is created
Anyone came across this issue?
Regards,
Sai.

Hi Colleen,
I am using the standard notification template GRAC_AR_CLOSE.
Hi %FIRST_NAME% %LAST_NAME% (%USER_ID%),
The Request number : %REQNO% , has been processed and the Request is
Closed. The details are as follows:
%PROVISIONING%
Kind regards,
Access Control Administrator
%PROVISIONING% variable shows mail notification as I have mentioned above
Can you help me with this?
Regards,
Sai.

Use GRAC_USER_ACCES_WS to provision Business Role

I have situation where I need to provision several hundred users across 90 business roles. I have been experimenting with FM GRAC_IDM_USR_ACCS_REQ_SERVICES (underlying FM for enterprice service GRAC_USER_ACCES_WS) to automate mass provisioning using GRC access requests. I figured out how to use the FM to provision technical roles to users but cannot get it to work for GRC Business Roles.
If the service cannot provision business roles, that would imply that an IdM would also not be able to do so. We are currently looking at IdM (non-SAP) solutions. Now I wonder if the value of business roles we are building will be diminished if an IdM is used.
Is it possible to provision business roles using the service and/or FM? If so, any details on the input values required would be much appreciated.

Hi Harinam,
Thanks for the details. I have already raised a OSS message to SAP.
I have implemented SAP note 1930923 in GRC sandbox system and can see that the mail issue I am reporting was no longer appearing. But I have seen new one this time
After note implementation: (Change Account Request Type with Business Role Assignment)
Hi GRC User Demo 1 (Z_GRAC_USER1),
The Request number : 592 , has been processed and the Request is Closed. The details are as follows:
XX Business role assigned to Z_GRAC_USER1
Kind regards,
Access Control Administrator
Before and After note implementation: (Change Account Request Type with Business Role removal)
Hi GRC User Demo 1 (Z_GRAC_USER9),
The Request number : 593 , has been processed and the Request is Closed. The details are as follows:
YY Role removed from Z_GRAC_USER9 ( )
Kind regards,
Access Control Administrator
Now the issue during role assignment is resolved, but during role removal mail notification says role has been removed from user and ends with empty brackets ().
For single roles in this brackets it usually fills the system name. May be for business roles since there will not be any specific system it is coming empty, but I think SAP should fix this.
Let me know if you are also facing the same
Since you confirmed that you are using business roles, let me know any critical issues which you came across as part of SP13 as we are also on SP13 and could be helpful.
Thanks once again for taking your time in replying for my issue.
Regards,
Sai.

Direct Posting to Contracts and Business roles in SRM

Hi guys,
We have SRM 7 and ECC 6.0.
Please consider the following business scenario:
Invoice creation in SRM against ERP contract that has been previously replicated to SRM;
No PO or GR involved in this process;
Possibility to have one contract to vendor A, and the corresponding invoices for different vendors.
Considering this we thought about the following solution:
Activate Direct Posting to Contracts functionality in ERP;
Contract, supplier and materials / services replication to SRM, through PI;
Allow different partners in the contract, using partner role “Invoicing party” (RS), so that it would be possible to post an invoice to vendor B, with reference to a contract with vendor A.
Questions:
Reporting – as far as I know it’s only possible to run analyses for vendors, which in our case would be vendor A, assigned to the contract. However, we will need to have information about the invoices posted to the other business partners that are assigned to that contract. Do you have any idea if there is any standard approach for this?
Contract and business roles replication to SRM – does the contract and the assigned business roles could be replicated to SRM or is it required any specific customizing in SRM for this to be possible?
Any help would be appreciated.
Thanks in advance.
Regards,
AN

Hi,
For direct posting to G/L in MIRO, follow the path:
SPRO > Materials Management > Logistics Invoice Verification > Incoming Invoice > Activate Direct Posting to G/L Accounts and Material Accounts > Here Activate "Dir.posting to G/L acct = active" and save.
MIRO - It will show additional Tab as "GL Account" along with "Reference"
For more check the links:
http://www.saptechies.com/transaction-mr1m-direct-posting-to-gl-account/
http://www.scribd.com/doc/17887583/MM-FI-Account-Determination
Regards,
Biju K

SAP Business Roles

Hi,
Has anyone ever worked with business roles. I am new to the OCM side having worked on the security side for many years. I am working on a project developing business roles and needed more details on how business roles link to security roles?

Thanks Matt,
I think get I the picture now
One thing that I am still not sure about is how the sap abap technical roles or profiles are provisioned through workflow
Here is what Ive done so far
1. HCM data loaded into productive identity store via vds
2. Did an initial load of the abap system into the productive identity store (now the technical roles and profiles are loaded as privileges in the idstore)
3. Through workflow I select a user that already has an abap account and assign that user some additional sap technical roles, for e.g. sap_all and sap_new. The corresponding privileges for these roles are namely PRIV:PROFILE:ECX:SAP_ALL and PRIV:PROFILE:ECX:SAP_NEW .
4. For the provisioning to occur so that these new privileges are reflected in the ABAP system for this user, I have used the setABAPRole&ProfileForUser task from sap provisioning framework folder and set it as the add/mod/del event task for the MXREF_MX_PRIVILEGE attribute. That way whenever a privilege is added to a user account the setABAPRole&ProfileForUser task will run and the sap_all and sap_new profiles will be added in the backend. This way I can avoid setting a provisioning task for each abap privilege that gets loaded.
But it should be obvious now that there is a flaw with this kind of setup, because all non abap privileges that get added or removed will trigger the setABAPRole&ProfileForUser task anyway because the privileges use the same attribute i.e.MXREF_MX_PRIVILEGE. So it brings me to the question how do you provision abap technical roles or profiles through workflow without setting a provisioning task for each abap related privilege.
Thanks again for all your help!
Leo

Dynamic calculation of privileges into business role

hi,
I have a requirement to create business roles containing a dynamic list of privileges. In addition, a costcenter attributes allows to determine the right privileges, within a business role, to assign.
I thought to use dynamic groups so that each time I assign a business role, a calculation of privileges based on costcenter is achieved.
for example:
BR1;FR10;Z_technical_privileges
BR1;FR30;Z_technical_privileges2
This list is often updated that's why I need it to be dynamic.
In the filter tab of the dyn group, I set a request to retrieve the mskeys of privileges (here is mskey of PRIV:ROLE:<sys>:Z_technical privileges & PRIV:ROLE:<sys>:Z_technical_privileges2)
Then I attach the dyn groups to the role (BR1) by setting up the autoassign field in the membership tab of the role.
When I assign the BR to a user, no privilege is provisioned (user already have an account in that system).
Am I forgetting something or doing something wrong?
how can I include the "check" on costcenter attributes?
thanks
Guillaume

Hello Guillaume,
dynamic roles find you the pool of people, that can be used in a business roles. If you attach a dynamic role to a BR, those users will become members of the BR.
You are trying the same with privileges and that's why nothing happens. Because privileges can't become members of the BR.
Are the different lists of privileges, that need to be assigned to users via the costcenter-attribute really changing so much?
You could use the dynamic groups to look for the members of a costcenter and assign those to the BR specific for that costcenter with the privileges added to the BR. That means one BR per costcenter and the privileges need to be changed manually or maybe via a job.
Hmm... where do the new privileges come from? How would you find them dynamically anyway? If you have a SQL statement for that, it should be possible to create a job, that adds the new privileges to the BR and delete old ones.
I don't see a fast and easy way to do this, but I haven't come across a request like this yet, so maybe there is one and I just don't know it (yet ^^).
Regards,
Steffi.

Reg: Business Role

Hi All,
   I would like to know whether the below scenario is possible in CRM 2007.
our organization structurefor eg. is - orgunit - > department -> divisions -> managers -> users
workcentres for example: service, case, sales, activity, email..etc
Email is common for the entire organization.It can be clicked and able to get the work group.
my scenario is to have only one Business Role for the total organization.
I need to show all the workcentres in the navigation bar for total organization, no matter who logs in..
(i guess anyways it will show all the workcentres..because it has only one business role)
Now is it possible to filter at the workcentre level with some authorizations...
Example:
   if my manager logs in:
    1) he has to show all the workcentres in the navigation bar.
    2) Email can be usable
    3) he only has authorozation for service and sales. so if clicks on activity..it has to show not authorized to view this page..
if a user logs in:
   1) he has to be shown all the workcentres in the navigation bar.
   2) Email can be usable
   3) he has only authorization for case and activity. so if click on service..it has to show..not
      authorized to view this page..
So I need to give authorizations at the workcentre level...is this possible...
we have many work centres to add in the navigation bar..and we dont want to confuse the users in our organization by giving too many business roles for each workcentre..for this reason we are thinking to give only one business role, which it directly let the user in..
Can anybody throw some light on this..how we can do this..or any alternative is also appreciable..
Please dont think this is huge message..i just want to elaborate my scenario...so that you will understand and also i will get good answers from you...
Regards,
Raghu

Dear Stephen,
we are facing serious problem in SAP CRM Web UI - Sales & Marketing Implementation Project.
Issue:         We are Trying to create New Contact within the Account screen and not able to Create New Contact.   It display error like ****you are not authorized to change the business partner*****.
We are maintaining the Role Type SOLD-TO-PARTY 03 (Display access) and Role Type Prospect, Competitor, Contacts 01, 02, 03 accesses in the PFCG Role Z:WKFS_CRM_UI_SALEREP.
1.      B_BUPA_RLT                                              CRM_BPROLE
                 Activity : 03                                                 Activity : 03
                 BP Role : CRM000                                    BP Role : CRM000
2.      B_BUPA_RLT                                                       CRM_BPROLE
      Activity: 01, 02, 03                                               Activity: 01, 02, 03
      BP Role: BUP001, BUP002, CRM005                 BP Role: BUP001, BUP002, CRM005
When user trying to create Contact (BUP001) by getting to Account (CRM000) screen, through the CONTACT assignment block, they are getting the below error.
In this process, users are NOT EDITING the ACCOUNT and creating the new CONTACT (BUP001) through the NEW button (which they are authorized).
Even though, they are authorized to do it, since they are inside the ACCOUNT (CRM000), we are getting this issue.
Please help me on this . My Devlopment phase will be stoped due to this issue.
Thanks,
Srinivas Nallabotula,
Email ID : [email protected]
Mobile : +91 8792700882

Two Business roles with same config key

Hello ,
I have 2 users groups, the search for account page UI should be configured different for them. Rest of the pages should have the same layout.
Do I need to create 2 different configuration keys? Can I just define 2 Business roles with same configuration key? How can I make only account search view different? May be using special object type?
Thank you,
Rika

Hello ,
Thank you very much for your answer.
May be I need to explain my problem with more details:
We created z* business role for Sales team. We designed screens and made all necessary enhancements.
Now I need to create a new Business Role for management. This role should have the same WEB GUI except some little changes:
For example: Sales Rep do not need search for accounts by Sales group/office. So we hide this search for him.
Management should have options to search by Sales group.
There some additional changes in several views that should be performed for management.
Should I copy every view to new configuration key (one by one) in this case?
As a told before most of views are similar.
Thank you
Rika

Business role configuration

Hi
Can we configure the business role of sales professional in backend so as to make it eligible to block/archive an account in web UI??
Thanks
Aakshi

Thanks for the reply.
1. Can we Block/Achieve the BP from WEBUI.
2. If yes, through which Business Role.
3. If not available as standard how can we achieve this.
As a standard the BLOCK and Archieve options are available in STATUS tab of BP in CRM GUI.
We would like to know, how can we control it through WEBUI.
Please advise.

Account Lifecycle /Business Role

Similar Messages

Maybe you are looking for