ACE: Authorize on Partner in Transaction

Hello,
We would like to authorize CRM users based on the partner 'Department' in each transaction. This is always filled with a Sales Office, and if the user is an employee of the Sales Office that is filled in the Department-partner-field, it should be visible to this user. We need this because sometimes, the Organizational Data in the transaction does not contain the sales office where the transaction is allowed to be seen, but it cannot be overwritten either. Does someone have an idea how to solve this?

Hi Michael,
Thanks for your reply. In fact, we use Org. Mgmt, but the entry in the partner function Department will not be maintained in the Org. Model. In fact, it just is a BP in the form of an Organization, and we woud like to authorize on BP no. in this Partner Function. I switched from ACE to Authorizations and created a new authorization field PARTN_NO, which can then be filled in (e.g., PARTN_NO = 123) in the different roles (if I say so correctly), so that a user with a certain role can only see transactions in which there is a partner with number 123 (the rule checks all partner functions, but in our case this number can only be found in the partner function Department). We have to test it, but I assume this should do the trick.

Similar Messages

List of users who have authorization for a particular transaction?

Hi All,
Can anyone guide me how to know the list of users who have authorization for a particular transaction?
I need this to find out the list of authorizations that are obsolete ,when the particular trnsaction is obsolete in an Upgrade process.
Thanks in advance.

we can get the list of users for a particular transaction as below.
get the tcode and place in AGR_TCODES and we get the list of roles .
loop the roles and pass each role to AGR_USERS and we get list of users for that role.
finally we got the list of users for that tcode.

Error in creating business partner through transaction FPP1 in ECC6.0

HI,
We have upgraded our system from 4.7E to ECC6.0.Now when we are trying to create business partner through transaction FPP1 we are getting error as " Exception condition "NO_ACTIVE_TAB" raised."
Can any one help us in rectifying the error and tell us the possible causes of error.. .??
Regards,
Shruti Singh

Hello,
Notes 696189 & 618123 may be of some help to you....:)
Regards
Olivia

No system assigned for partner in transaction DPCOMMON_MAP_P_S ( Dealer Portal)

Hello all,
Sorry to post a very basic question, but I am quite new to Dealer Portal and SD functional module. Request to help.
I have deployed spare part business package on portal. BP documentaion link. http://help.sap.com/erp2005_ehp_04/helpdata/EN/c3/f71b9a69574d6c84ac33b68d2d03c3/frameset.htm
I have configured as per the steps mentioned in the link below,but still facing issues..
http://help.sap.com/erp2005_ehp_05/helpdata/en/e6/e58079420c4b7e87df4f9c3db04719/content.htm?frameset=/en/e6/e58079420c4b7e87df4f9c3db04719/frameset.htm
As per the above link,below are the steps done.
I have created logical system and assigned to RFC destination using transaction DPCOMMON_MAP_S_R.
Then assigned the logical system created at the above step to partner, through transaction DPCOMMON_MAP_P_S
And lastly also assigned users to partners through transaction DPCOMMON_MAP_U_P.
However I am getting below errors when initial overview screen is accessed,I think there are some configurations missing.. Any help is appreciated.
Personalization data not found.
No system assigned for partner in transaction DPCOMMON_MAP_P_S
Thanks
San

Issue is resolved.
For the RFC destination , log on security tab. Ensure current user is ticked and no hard coded user id being passed here.
Also ensure the personalization data is saved properly by navigating to personalization iview.

CRM - Process Flow of Authorization Check in Business Transactions

Hello Folks:
I have implemented CRM security using Process Flow of Authorization Check in Business Transactions.
What I have in place:
CRM_ORD_OP (inactive, don't want access to own documents)
CRM_ORD_LP (inactive, not using standard org level values Distribution Channel, Sales Group, Sales Office, Sales Organization, and Service Organization.)
CRM_ACT (active)
CRM_CMP (active)
CRM_ORD_OE (active, restricted to display with dummy value ' ' for Distribution Channel
Sales Group, Sales Office, Sales Organization and Service Organization, as we are not restricting on them)
CRM_ORD_PR (active and restricted to display)
Issue:
Restrictions to display for documents works fine when using CRM backend system and the system throws out a message that you are not authorized to change. But, when i come in through Portals (PCUI), i dont get the display at all and it throws out a message insufficient access authorizations.
Traces on backend CRM reveal failing on change access for CRM_ORD_LP and CRM_ORD_PR, which we dont want to give out b/c we dont want to provide change for documents.
OSS notes to SAP have resulted in no results....please advise what is wrong here.
Thanks
KT

Thanks for the Priyanka for the reply, but what you mention is not correct.
BSP errors are different from what I am refering to.
The issue is still open...and looks like a SAP bug, which even they havent been able to fix so far.
Regards,
KT

Authorization of credit card transaction failed. Failure in Authorization

Hello All,
I am getting the below error while doing Auto-Receipts in R12.1.3.
Authorization of credit card transaction failed. Failure in Authorization
Please guide me to identify the issue.
Thanks and Regards,
Muthu

Hi,
Thank you very much for your support.
But still i'm getting the same error. I read in one site the below step(Marked as Bold), This could be the reason why the error is occurring..
But I don't know how to check, If any one know about the below step, let me know.
Depending upon the function security options set up by your system administrator, you might be able to create, format, and approve Automatic receipt batches in one step.
Thanks and Regards,
Muthu

Authorization Check in Business Transactions

Hi All,
i need to create Authorization Check for Business Transactions ( create/display/change ).
The standart sap Authorization object CRM_ORD_OP or CRM_ORD_LP is no good for me .
does anyone know a BADI or something else i can use ?
Thanks
Lilach.

I would suggest to give the authorization with CRM_ORD_OE if he isn' t in the document may be he is the organization which is selected on the activity..
For details, please have a look at this link :
http://help.sap.com/saphelp_crm70/helpdata/EN/48/a44236ceb873e8e10000000a42189b/content.htm
BR,
Cenk Sezgin

Authorization default values of transaction /MRSS/PLBOMGR for object /MRSS/

Hello,
When I add the tcode "/MRSS/PLBOORGM " throuh the menu tab and when I go the authrization tab and click on either
Change Authorization Data or Expert Mode for Profile Generation the is an error message stating the following :
======================================================================================
Authorization default values of transaction /MRSS/PLBOORGM for object /MRSS/PB1 inconsistent
Message no. 5@015
Diagnosis
The authorization fields contained in the authorization defaults are incomplete or incorrect.
System Response
The process had to be terminated to avoid generating inconsistent authorization data.
Procedure
Use transaction SU24 to adjust the authorization defaults to the object definitions in transaction SU21 and then repeat the process.
============================================================================================
SU24, the custom values maintained are same as SAP Default . Any suggestion?
Thanks
Osama Khalifa

This indicates one of two things resulting from changes to the authorization object AFTER SU22 had been maintained for it:
1) One or more of the fields were converted to org. levels using the "old" technique of maintaining the table instead of running the report for this.
2) One of more of the fields were changed in SU20 or SU21 but the original data in SU22 was not corrected.
Solution in both cases is to correct the proposals in SU24 (customer data) and report it to SAP to correct in SU22 (original SAP data).
Cheers,
Julius

How to remove authorizations for a particular transaction

Hi,
I have an SAP_ALL authorisation for a user. I need to remove authorization for a particular transaction (FK01) for this particular user.
How do i make that.

Hi Marcus ,
u can remove authorization Objects for a given tcode ,but what i am thinking is SAP_ALL will get ride of this child objects , may be i am wrong.
But what i am saying is check that are the authorization which are required to run FK01/XK01 and remove them from that Role .
2.Otherwise check for Object S_Tcode and remove FK01 and XK01.
Regards
Prabhu

Authorization default values of transaction F-53 for object F_FAGL_LDR

All,
I am getting this error when I go to adjust an existing role
"Authorization default values of transaction F-53 for object F_FAGL_LDR inconsistant"
Can any one help me resolve this issue? I tried to set the check indicator to "NO" but it is still giving me the error at the bottom.
Please assist.

> ... they had me add Profit center to F_FAGL_LDR through SU21 and then I ran into the inconsistant issue.
This part was missing before hand... I can understand that SAP said this is not support, because you have modified as standard object by adding a field to it... that makes it yours now.
Whoever "they" is, they gave you bad advice.
To repair the authorization object preferably do so by transporting it from a system on the same release which still has the standard fields.
Cheers,
Julius
Edited by: Julius Bussche on Aug 15, 2009 3:30 PM

Restrict authorizations for payment item transaction

Hi All,
This is regarding authorizations for a banking system.
The requirement is the users need to be restricted for the following transaction based on the Bank Posting Area or the contract managing unit.
BCA_PAYMITEM_CREATE
When the user goes to create payment item the user should be allowed to enter an account which has been created with the contract managing Unit ZSUM007 or Bank Posting area ZSUM. The user should not be allowed to go in for any other values of contract managing unit and Bank Posting Area
BCA_PAYMITEM_MAINTN
The user should be allowed to enter an account which has been created with the contract managing Unit ZSUM007 or Bank Posting area ZSUM .The user should not be allowed to go in for any other values of contract managing unit and Bank Posting Area.
I checked the transactions in SU24 and found only authorization object S_TCODE associated with the transcations BCA_PAYMITEM_CREATE and BCA_PAYMITEM_MAINTN.
Can someone please suggest a way to acheive this.
Regards,
Thamarai.

Hi Shiva,
I tried assigning the org unit using PFCG ORGFIELD CREATE.
Now the org unit in pfcg shows Org. level Contract-Managing Organizational Unit (Encrypted) but there is no coresponding field in the authorization objects in the role.
Can you please help since the project is very critical.
Regards,
Thamarai.

Restricting the authorization Object for B2B Transactions

Hi All
we are facing the problem in the ISA b2b app, actually the scenario is as below.
we have various transaction types like b2b sales,Peoplesoft order,Request for Order change, RMA ,Request for Quotation(RFQ) and metel order.
As per the requirement, The client wants only a few functionalities for a particular user.
Example:
Transaction Type Authorization
PeopleSoft order View only View only
B2B:Req. OrderCh x x
B2B: Req. RMA
B2B: Req. Quote x x
Metel Order x
For b2b sales transaction a lower level employee would only be able to view the order and he should be restricted to make any changes. Is there a posibility to restrict in this manner? This is Urgent. Please respond immediately. Thanking you in anticipation.
Message was edited by:
Sunil Kumar

>
Viral741 wrote:
> Hi All
>
> I have a requirement in SAP Security to restrict the authorization object S_ALV_LAYO to a particular set of users.
>
> Background:
>
> We use composite roles which is shared accross all areas(Finace,marketing,work managment).Now the requirement is for from Work managment to restrict S_ALV_LAYO so that user cant change default layout and can create user specific layout,but other areas are not ready for this.So please let me know if there is any way i can restrict this auth object only for work managment area only.
>
> Thanks,
>
> Nitesh
Nitesh,
Remove access to S_ALV_LAYO for general users and give access to F_IT_ALV instead. Keep S_ALV_LAYO for the users who will be maintaining the default layout.
Good Luck!

Authorization object for parameter transactions

Hi all,
I'm trying to restrict transaction VL10h for shipping point,this transaction is a parameter transaction and is not controlled by an authorization object directly.when I run a trace , transaction Vl10x shows up. The authorization object that is being checked is V_LIKP_VST.
Note : The requirement is when the user executes transaction VL10h he/she should be able to display only those shipping points they are authorized to.
Please advice.
Thanks,
Mohan.

Hi Mohan,
For transaction VL10H you can specify values for the following fields in authorization object V_LIKP_VST:
-Activity:
01     Create or generate
02     Change
03     Display
04     Print, edit messages
18     Deliveries from coll. proc.
24     Archive
25     Reload
85     Reverse
-Shipping point: Here you must set the restriction for each group of users that are allowed for the maintenance of the shipping points that are used for delivery processing.
You can restrict the access through these fields.
Regards,
Leandro

Transaction Launcher - TCode Authorization Issue for ERP transaction

We are trying to implement an ERP transaction in the CRM WebUI via the transaction Launcher. Everything has been set up properly and the transaction appears in the nav bar. I am running it to launch a new window. When i click on it, a new window pops up, with transaction IC_LTXE and an error saying
*"You do not have authorization to view transaction ZSD_IC".*
Everything seems to be set up properly and we can access the transaction with the same user id in ERP. He has SAP_ALL.
Does this have anything to do with IC_LTXE? Is there anything special i need to do to assign proper authorization to this user.
Thanks,
jeremy

Hello Jeremy,
We are trying to execute R/3 transaction from Transaction Launcher but we are facing problems.
In order to execute transactions from TL we have copied object TSTC to ZTSTC in both systems and use the method Execute to be used from Transaction Launcher customizing. Then we have customized T. Launcher in order to get two links, one to R3 transaction (using the object ZTSTC, method execute and XD03 as value parameter) and one to CRM transaction (using the object ZTSTC, method execute and CRMD_MKTDS as value parameter).
When we execute the TL link to CRM, transaction works properly through ITS, but executing the link to R3 transaction we receive the following popup message:u2018Logged Off Successfully. You have been logged off from SAP NetWeaver Application Server.u2019 the screen gets in blank and no further actions are executed.
In order to correct the fail we have implemented these notes, but the problem still remains.
0001224663 Launch of Front Office with Transaction Launcher fails
0001263716 Launching Front Office Process using Transaction Launcher
Based on your experience could you help us to get the right configuration to reach R/3 transaction through Transaction Launcher.
Thank you very much in advance.
Best regards.

Authorization Check in Business Transactions in CRM 2007

Hi everybody, I have a problem whit the authorization check in CRM 2007.
This link help me to follow the steps
http://help.sap.com/saphelp_crm60/helpdata/en/e9/b29a39e7aee372e10000000a11
I follow this steps:
1.- Created a new single role on the PFCG
2.- On the Menu tab add the transaction BSP_CRMD_BUS2000108 (Trax for LEADS)
3.- On the authorization tab create a new profile and in the authorization data set the values for CRM_ORD_OP: PARTN_FCT 00000012, PARTN_FCTT *, ACTVT '02,03
4.- Generate the authorization.
5.- Set my user "TESTUSER" on the user tab
6.- Save the profile
Then, I login to CRM whit TESTUSER and I see all the leads. I miss something, what could be the problem ?
Thanks for your help

Hi Shaji, Pankaj and Jushan, thanks four your answers.
I still have the same problem, I want to see only my leads that I´am the responsible, after I generated the authorization and assign the role to my user from tcode PFCG and SU01, I logout and login again and no changes, I still see all the leads.
Another test I made, I changed the authorization data and set the values for CRM_ORD_OP: PARTN_FCT , PARTN_FCTT 0008, ACTVT ' (person responsible) and the results was the same, see all the leads.
How works the User Comparisons and how can I check for errors in my pfcg role ?
Thanks for your help.

ACE: Authorize on Partner in Transaction

Similar Messages

Maybe you are looking for