Assigning Business Roles - No such task exists

I am trying to create a user ID and assign a Business Role in the process. The attribute that I am using is MXREF_MX_ROLE. It is defined as a multivalue system attribute with a data type of entry reference and the reference type in MX_ROLE.
From my workflow task, I can select the role from the selection window but when I click OK to save to the identity store, I get an error "You have tampered with the params". From the Monitor UI, I see the message "Failed setting value for attribute Member of Role. No such task exists"
I have a Modify User task that uses the same attribute. When I attempt to use it, I get the "Failed setting value for attribute Member of Role. No such task exists". But I do not get the "you have tampered with the params" message.
I am only trying to set this in the identity store right now. I am not yet ready to provision to my ABAP system.
Any assistance is appreciated.

Hi Lori,
in case you have linked privileges to your role, SAP NW IdM searches for tasks in the related repository (as stated in the attribute MX_REPOSITORYNAME of your privileges). Type in the ID of some test tasks in the repository constants MX_DEPROVISIONTASK, MX_PROVISIONTASK and MX_MODIFYTASK and see if it works.
Otherwise, there could be a missing relation the other way round from the role to the user. See if there is a MXMEMBER_MX_PERSON attribute in your role.
Best regards,
Nils

Similar Messages

Need to delet or assign individual roles without changing all existing role

Hi
I am looking for a way in order to delete or add single roles without touching all other roles a user has.
I found various BAPI_USER_* , however they always change the entire role assignment.
Does anybody got an idea or an associated BAPI`?
Thanks a lot,
Kind regards,
Mingolo

Hello Minima
The corresponding BAPI is BAPI_USER_ACTGROUPS_ASSIGN. In to delete only specific roles you first have to read the assigned roles of the user using BAPI BAPI_USER_GET_DETAIL.
Now here the procedure:
(1) Read the assigned roles for a given user using BAPI_USER_GET_DETAIL. The roles are returned in TABLES parameter ACTIVITYGROUPS.
(2) Delete the role you want to unassigned from ACTIVITYGROUPS.
(3) Change the user using BAPI_USER_ACTGROUPS_ASSIGN with the modified list of roles (in ACTIVITYGROUPS).
The logic behind this is as follows:
- the BAPI BAPI_USER_ACTGROUPS_ASSIGN compared the imported list of roles with the currently assigned roles.
- If one is missing, it is unassigned.
- If one is new, it is assigned.
- All others role assignements remain.
Regards
Uwe

Refreshing business role assignment to org. structure

Hi Experts,
I am trying to change the assignment of business role in org. structure but the changes are not coming into effect.
i.e. initially i have assigned servicepro to my org. strcuture & i am getting the relevant screen on login into WEB UI.
Now i have changed it to marketingpro still i am getting the same screen.
Can any one of you suggest that how i can refresh such changes.
& can anyone also suggest how i can assign business role directly to users.
Thanks & regards
Nanda Kumar

Hi Nanda,
I assume the reason for Business Role change not refelecting can be
1. A Profile assigned in SU3 or
2. You are trying to open the Web UI from same browser session using a new tab in IE7 (internet explorer), you need to create a new browser session.IE7 tabbed browser does not recognize the changes in SAP GUI, you need to open in a new browser.
Regards,
Masood Imrani S.

Business Roles and Tasks

Hi experts,
We´re involved in a SAP CRM implementation. We´d need to know if it´s possible to link Transaction Types with a Business Role. This is, when the user goes to create a new task, a window pops up with all tasks: is it possible to limit Tasks by Business Role? Maybe there´s a customizing point where you can define, by business role, the availabe tasks for that business role.
Thanks in advance.
Javier

Hi Javier,
As far as I understand you want to restrict transaction types per business role.
You can achieve this by customizing. You can create a transaction profile in customizing for each business role and assign the transaction types you have created to this transaction profile.You can find this customizing activity in spro transaction.
Then you can assign transaction profile you have created to your business roile by assigning function profile 'transaction profile' to the business role in crmc_ui_profile tcode.
In this way when you login with the business role the transactions you have maintained in transaction profile will only be shown up in the pop up.
I hope this helps yiour requirement. Let me know if you require any further information. Thanks.
Regards
Yogesh

Error in assigning role to multiple task

Hi,
We are using BAPI BAPI_BUS2175_ROLE_ASSIGN_ADD to assign role to task. It is working fine if we are assigning different role to different tasks. But if we assign the same role to different tasks in a project, it is giving dump while saving the data.
We are using following sequence in the code:
1. BAPI_BUS2172_LOAD to load the project
2. BAPI_BUS2175_ROLE_ASSIGN_ADD to assign role to task
3. BAPI_CPROJECTS_COMMIT_WORK to save the changes.
So when BAPI_CPROJECTS_COMMIT_WORK is executing, it is giving dump as follows.
The exception 'CX_DPR_FATAL_ERROR' was raised, but it was not caught anywhere
along
the call hierarchy.
Since exceptions represent error situations and this error was not
adequately responded to, the running ABAP program
'CL_DPR_AUTHORIZATION_SERVICES=CP' has to be
terminated.
Could you please let me know what may be the reason for getting dump.
Regards,
Anil Salekar

I can tell you the table where the the role assignments get stored . It is
DPR_ENTITY_LINK.

Business Role Assignment

Hello All
Where do we assign Business Roles to Org Unit / Position. Can somebody please provide the navigation.
I am in training and actually I want to get the business role created by me displayed when I log to CRM Web Client. How to do ...
Thx
DM

Hi DM,
by using tnrx PPOMA_CRM, Click on the Position which you have created. And then click 'GOTO --> Details Objects' on the top of the GUI page.
Select the tab Business Role and then create a new infotype.
Choose your Business Role in the Field 'Business Role' and save.
Now you have assigned your Role with your org.
Let me know in case you need any more specific explanation.
VS
Edited by: VS on Aug 7, 2009 2:42 PM
Edited by: VS on Aug 7, 2009 3:06 PM

SAP CRM 2007 Business role assignment

Hi all,
We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
1- We create a PFCG role : "pfcgrole1"
2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
3- assign the user to the PFCG role "pfcgrole1"
We have two cases :
CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
RESULT : The user logs in to CRM, the user gets error message "Logon is not possible because you have not been assigned a business role"
CASE 2:The user is not assigned to any position in Org management.
RESULT : The user logs in to CRM, everything works fine
my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
Thanks in advance.

Please review these old threads first:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
There is a lot of technical background on how business role to PFCG role assignment works.
Thank you,
Stephen
CRM Forum Moderator

Assigning Role to a Task and Resource to a Task

Hello Friends,
In cProjects, I go to the below tab Projects > Resources > Tasks.
Here I do an assignment of Role to a Task and assignment of Resource to a Task.
Could you please tell me as to where does this information gets stored.(ie which tables).
And could you pleae tell me as to how do we differentiate between the Task, Roles and Resources in the internal table created.
Because the internal table consists of Task Guid, Participant Guid and Entity Guid.
Thanks,
Salil

I can tell you the table where the the role assignments get stored . It is
DPR_ENTITY_LINK.

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Business role of user

Hi,
How do we find what business role is associated with the user in crm sap 2007?
Regards
Shilpi

Hi Shilpi,
Do the following :
1) Generate PFCG Authorization Profile.
Goto Transaction PFCG ->Select the role (example: BP_SLS_EMPLOYEE)->click on CopyAs -> Change the name to Z_BP_SLS_EMPLOYEE -> select "authorizations" tab page -> Generate Profile (click on button next to Profile Name -> display authorizations screen will be displayed -> click Generate Profile (shift+F5) button next to open button) -> Save -> accept transport request (if any))
2) Assign PFCG Authorization Profile to User
We can achieve this by 2 ways
a) Goto transaction SU01->enter user name (ex: SAPUSER01)-> select 'Roles' tab page-> enter PFCG Role (example: Z_BP_SLS_EMPLOYEE)-> select 'Profiles' tab page -> enter SAP_ALL and SAP_NEW -> Save
OR
b) Goto transaction PFCG-> select 'Users' tab page -> enter user name (example: SAPUSER01) -> Save
3) Assign User to the Business Partner (Employee)
Goto transaction BP -> create a new BP in role employee or open/display the existing BP in role employee (example: Shilpi) -> select role = employee -> select 'Identification' tab page -> enter User name (example: SAPUSER01) -> Save -> accept transport request (if any)
4) Assign Employee to the Organization Unit
Select the Organization unit and assign the BP employee to the position (position = sales employee) -> Save
5) Create Business Role
SPRO->Img->CRM->Business Roles->Define Business Role-> select 'SALESPRO' (business role)->click on CopyAs->Change the name to ZSALESPRO->only change PFCG Role = Z_BP_SLS_EMPLOYEE->enter->click on skip button (ignore any warnings)->Save-> accept transport request (if any)
6) Assign Business Role to the Position in Org. Model
SPRO->Img->CRM->Business Roles->Define Organization Assignment->select the position (example: sales employee)->double-click on position (to make sure that you have select position)-> click on 'Goto' -> click on 'Detail Object' -> click on 'Enhanced Object Description' -> select 'Active' tab page -> highlight 'Business Role' line -> click on create/change button to add the business role -> enter Business Role = ZSALESPRO -> save -> accept transport request (if any)
7) Refresh your Internet Browser
Tools-> Internet Options -> Click on delete files button -> select delete all offline content check box -> click on OK button
Logon to CRM WEB UI with the User (SAPUSER01)...
Please note that when ever you have saved any configuration in CRM, you have to come out of that sequence to reflect the changes made.
If this solved your problem, please award the points...
Cheers,
Peter J.

How to get Currently used Business Role

Hi Experts,
I need to get the business role currently being used by the user (i.e. SALESPRO). I've come across the method calls
Data: lr_ui_profile type ref to IF_CRM_UI_PROFILE,
lv_profile TYPE CRMT_IC_CONFIGPROF.
lr_ui_profile = cl_crm_ui_profile=>get_instance( ).
lv_profile = lr_ui_profile->get_profile( ).
and so I tried it on an ABAP report being called from the WebUI via Transaction Launcher. However in my case after executing the method LV_PROFILE doesn't yield a value (but SY-SUBRC was 0). Can anyone kindly provide a reason behind this? Or are there any other ways to retrieve the current login business role of the user?
Regards,
Marc
Edited by: imdiko24 on Nov 12, 2010 8:51 AM

Hi Marc,
Please try once, as exactly what i said in my earlier repl..
Assign any business role like for eg. "SALESPRO" in SU3 to parameter CRM_UI_PROFILE and test with the following code if lv_value holds the business roles?
*DATA: lv_value TYPE tpara-partext.*
*GET PARAMETER ID 'CRM_UI_PROFILE' FIELD lv_value.*
lv_value will hold the current business role..If you get correct business role in lv_value, that means you have not assigned business role correctly in the org model.
Cheers,
Sumit Mittal

Direct Posting to Contracts and Business roles in SRM

Hi guys,
We have SRM 7 and ECC 6.0.
Please consider the following business scenario:
Invoice creation in SRM against ERP contract that has been previously replicated to SRM;
No PO or GR involved in this process;
Possibility to have one contract to vendor A, and the corresponding invoices for different vendors.
Considering this we thought about the following solution:
Activate Direct Posting to Contracts functionality in ERP;
Contract, supplier and materials / services replication to SRM, through PI;
Allow different partners in the contract, using partner role “Invoicing party” (RS), so that it would be possible to post an invoice to vendor B, with reference to a contract with vendor A.
Questions:
Reporting – as far as I know it’s only possible to run analyses for vendors, which in our case would be vendor A, assigned to the contract. However, we will need to have information about the invoices posted to the other business partners that are assigned to that contract. Do you have any idea if there is any standard approach for this?
Contract and business roles replication to SRM – does the contract and the assigned business roles could be replicated to SRM or is it required any specific customizing in SRM for this to be possible?
Any help would be appreciated.
Thanks in advance.
Regards,
AN

Hi,
For direct posting to G/L in MIRO, follow the path:
SPRO > Materials Management > Logistics Invoice Verification > Incoming Invoice > Activate Direct Posting to G/L Accounts and Material Accounts > Here Activate "Dir.posting to G/L acct = active" and save.
MIRO - It will show additional Tab as "GL Account" along with "Reference"
For more check the links:
http://www.saptechies.com/transaction-mr1m-direct-posting-to-gl-account/
http://www.scribd.com/doc/17887583/MM-FI-Account-Determination
Regards,
Biju K

SOD User Violation report by Business Role

All,
Is there a current method for generating a User violation report that shows all SOD's via the technical role and which Business role that, the Technical role is associated to in GRC?
Currently the reports that I am seeing do provide the transaction, authorization, and technical role level of any violation and what business process triggered it but does not show which business role(s) that these conflicting SOD's reside in. (especially if a user is assigned to 2 or more business roles)
Audit is pulling reports of users with SOD's and asking to re-mediate the SOD but currently we have to do dumps of all of the business roles a user is assigned to and then compare the role listed in the violation with the technical roles listed in the assigned business roles of the user.
is this available at all? or maybe in 10.1?

Dear Michael,
yes exactly - the new feature comes with the note. It is also possible to implement this note in 10.0 (it's included in SP17 but can be implemented earlier).
See the following screenshot how it looks like in an productive environment after implementing this note:
[BR] stands for Business Role.
Hope this answer the question.
Bestregards,
Alesandro

Error - Business partner 30000011 does not exist in role TR0151

Hello,
I am receiving an error "Business partner 30000011 does not exist in role TR0151" while creating a Fixed Deposit Transaction through FTR_CREATE.
Whilst testing Fixed Deposit accounting in SAP Treasury, i was testing a scenario of a MINOR and his/her GUARDIAN. Both have been created as Business Partners. However, i have NOT created the Minor further as a Customer.
I now have a MINOR defined as a Business Partner, a GUARDIAN defined as a BUSINESS PARTNER and CUSTOMER both and a relationship established between the two through the RELATIONSHIPS tab.
After doing the above, i am trying to create a Fixed Deposit through FTR_CREATE where i am receiving the above mentioned error.
In Customizing, i have checked that the TR0151 is assigned to COUNTERPARTY role and TR0154 to the BENEFICIARY role
The GUARDIAN was created with BP role - Business Partner General and then changed to COUNTER PARTY. The MINOR has been created with BP Role - Business Partner General and then changed to BENEFICIARY.
My expectation was that since MINOR is not defined as Customer, the system would not allow me to create a FD for the Minor and display such a message which would ask me to create the FD using the GUARDIAN as the Business Partner.
Request your help on this.
Regards,
Murtuza.
+91 9923205169

Hi,
It is not necessary that a business partner has to be linked to a customer account. In certain cases, your house bank itself acts as a counterparty, in that case you can directly settle to your bank account instead of managing through a customer.
For your case, you need to maintain the role of counterparty for MINOR as well. Only if the business partner exists in that role can you create a transaction.
Regards,
Ravi

SharePoint's role and its task assignment

SharePoint's role and its task assignment list below:
*Workflow
*App
*PowerShell
*SharePoint migrering
*Enterprise Content Managment
*Business Intelligence
*social business platform
*SharePoint analyst
*SharePoint Enterprise Search
*Document management
*SharePoint Cloud
*SharePoint BDC (Business Data Catalog)
What more am I missing that is important to add?
Please remember that I'm a newbie in SharePoint 2013.

I understand you have added ECM but I would also add Records Management, Machine Translation Service and Community Sites.
If you want to add features then you should also include Office Web Apps, Cross Browser Support and Responsive Web Design.
Amit

Assigning Business Roles - No such task exists

Similar Messages

Maybe you are looking for