Authorization Check in Business Transactions in CRM 2007

Hi everybody, I have a problem whit the authorization check in CRM 2007.
This link help me to follow the steps
http://help.sap.com/saphelp_crm60/helpdata/en/e9/b29a39e7aee372e10000000a11
I follow this steps:
1.- Created a new single role on the PFCG
2.- On the Menu tab add the transaction BSP_CRMD_BUS2000108 (Trax for LEADS)
3.- On the authorization tab create a new profile and in the authorization data set the values for CRM_ORD_OP: PARTN_FCT 00000012, PARTN_FCTT *, ACTVT '02,03
4.- Generate the authorization.
5.- Set my user "TESTUSER" on the user tab
6.- Save the profile
Then, I login to CRM whit TESTUSER and I see all the leads. I miss something, what could be the problem ?
Thanks for your help

Hi Shaji, Pankaj and Jushan, thanks four your answers.
I still have the same problem, I want to see only my leads that I´am the responsible, after I generated the authorization and assign the role to my user from tcode PFCG and SU01, I logout and login again and no changes, I still see all the leads.
Another test I made, I changed the authorization data and set the values for CRM_ORD_OP: PARTN_FCT , PARTN_FCTT 0008, ACTVT ' (person responsible) and the results was the same, see all the leads.
How works the User Comparisons and how can I check for errors in my pfcg role ?
Thanks for your help.

Similar Messages

CRM - Process Flow of Authorization Check in Business Transactions

Hello Folks:
I have implemented CRM security using Process Flow of Authorization Check in Business Transactions.
What I have in place:
CRM_ORD_OP (inactive, don't want access to own documents)
CRM_ORD_LP (inactive, not using standard org level values Distribution Channel, Sales Group, Sales Office, Sales Organization, and Service Organization.)
CRM_ACT (active)
CRM_CMP (active)
CRM_ORD_OE (active, restricted to display with dummy value ' ' for Distribution Channel
Sales Group, Sales Office, Sales Organization and Service Organization, as we are not restricting on them)
CRM_ORD_PR (active and restricted to display)
Issue:
Restrictions to display for documents works fine when using CRM backend system and the system throws out a message that you are not authorized to change. But, when i come in through Portals (PCUI), i dont get the display at all and it throws out a message insufficient access authorizations.
Traces on backend CRM reveal failing on change access for CRM_ORD_LP and CRM_ORD_PR, which we dont want to give out b/c we dont want to provide change for documents.
OSS notes to SAP have resulted in no results....please advise what is wrong here.
Thanks
KT

Thanks for the Priyanka for the reply, but what you mention is not correct.
BSP errors are different from what I am refering to.
The issue is still open...and looks like a SAP bug, which even they havent been able to fix so far.
Regards,
KT

Authorization Check in Business Transactions

Hi All,
i need to create Authorization Check for Business Transactions ( create/display/change ).
The standart sap Authorization object CRM_ORD_OP or CRM_ORD_LP is no good for me .
does anyone know a BADI or something else i can use ?
Thanks
Lilach.

I would suggest to give the authorization with CRM_ORD_OE if he isn' t in the document may be he is the organization which is selected on the activity..
For details, please have a look at this link :
http://help.sap.com/saphelp_crm70/helpdata/EN/48/a44236ceb873e8e10000000a42189b/content.htm
BR,
Cenk Sezgin

Business Objects in CRM 2007

What are the main business objects in CRM 2007 and how does this module interact with other SAP modules?

Hi,
then you can use an application called "OpenDocument". Each document on your BusinessObjects Enterprise system can be called with OpenDocument. If you go to help.sap.com in the BusinessObjects area and look for BusinessObjects Enterprise as product you will find more details
ingo

What is Business Transaction in CRM

Hi,
What is Business Transaction in CRM? What is deifference between partner and partner_guid? What is significance? and also product, prodcut_guid?
Thanks,
Shashikanth

Hi Shashikanth,
Most of the transaction that you carry out in CRM are Business Transaction. E.G. Service Contract, Activities, Lead, Task etc.
Business Transactions are further divided into Subobject Category, these Subobject Categories are again subdivided into Transaction Type.
<b>Categorization of CRM Business Transaction based on Subobject Category</b>
Business Transaction Name      SUBOBJECT CATEGORY
Activity                     BUS2000126
Service Contract             BUS2000112
Lead                             BUS2000108
Opportunity                     BUS2000111
Task                         BUS2000125
Utility contract item             BUS2000147
Note:
1. For Example if you want to retrieve all the activities in CRM, pass the OBJECT_TYPE as BUS2000126 in CRMD_ORDER_INDEX table.
2. The Subobject Category can be customized for a business transaction from the transaction SPRO.
Partner : Partner is a 10 char number used to identify Business Partner in the system.
PArtner GUID : It is global unique identifier to identify the partner globally.
As such there is no difference in partner and partner guid, both refer to the same entity in CRM and are unique across the system. Refer the table BUT000.
Same applies to product and product guid. Refer the table CRMM_PRODUCT.
<b>Reward points if it helps and close the thread.</b>

Questions about Territory determination in Business transactions in CRM 7.0

Hi All,
We are in the process of configuring territory management in our system. I have a couple of questions regarding Territory determination in Business transactions in CRM 7.0.
1) Territories in business transactinos are determined based on partner function categories: employee and person responsible. If the employee is assigned to multiple territories, which territory is determined for the transaction.
a) Is it the territory for which he is assigned the 'Default territory' flag'?
b) What if the employee does not have any territories with the 'Default territory' set?
2) We have had SAP CRM since the last 6-7 years and recently upgraded to CRM 7.0. When I use the transaction searches in the Web UI using the search parameters 'Territory ID' and 'Territory description' we can't see any old transactions in the search results. We can only see the test transactions that were created after we ran the master data reln. update program CRM_TERRMAN_PROC_REL. Is there another program which updates transactional data relationships similar to the master data one?
Appreciate your inputs.
Regards,
Ramesh Nallabelli

Hi All,
We are in the process of configuring territory management in our system. I have a couple of questions regarding Territory determination in Business transactions in CRM 7.0.
1) Territories in business transactinos are determined based on partner function categories: employee and person responsible. If the employee is assigned to multiple territories, which territory is determined for the transaction.
a) Is it the territory for which he is assigned the 'Default territory' flag'?
b) What if the employee does not have any territories with the 'Default territory' set?
2) We have had SAP CRM since the last 6-7 years and recently upgraded to CRM 7.0. When I use the transaction searches in the Web UI using the search parameters 'Territory ID' and 'Territory description' we can't see any old transactions in the search results. We can only see the test transactions that were created after we ran the master data reln. update program CRM_TERRMAN_PROC_REL. Is there another program which updates transactional data relationships similar to the master data one?
Appreciate your inputs.
Regards,
Ramesh Nallabelli

Implementation of Note 660016 for Follow up Transactions in CRM 2007

Hi All,
   We have a requirement to not show all the business activities and tasks available in crm for all the transactions as follow-ups.
   For this reason we implemented the note - 660016. Now its working fine.. It is not showing business acitivities and tasks as follow-up transactions in the CRM GUI and Web UI 2007 for all the transactions.
   But when I create a business activity as a followup for ztransaction in define copying control for business transactions.. It is showing in the CRM GUI but not in the WebUI.
But at the same time when I create a service complaint as a followup for my ztransaction, I am seeing the service complaint as a follow up in both CRM GUI and Web UI.
   Is the implementation of this note restricting business activities and taks in WebUI forever or do I need to write any extra logic or is this any configuration issue ?
Regards,
Raghu
Edited by: Raghu Danda on Mar 8, 2009 1:17 PM
Edited by: Raghu Danda on Mar 9, 2009 5:14 AM

Hi Robert,
   Thanks for your reply
   I checked the link, But I didnt get the full information there.
   Firstly, my problem is not with upgrade and
   the second thing is before implementing the note 660016, I am able to see both in CRM GUI and Web
   UI all the business acitivities and tasks along with other transaction types as follow-up transactions.
   After implementing the note, I am not able to see only the business activities and tasks in the Web UI
   as follow-ups and in CRM GUI, its appearing as follow-ups.
   Hope you got my question now...
   If this is not done in customization I need to code according to my scenario..
   When I kept a break point this class is triggering from another class.
   Do I need to code in the class CL_CRM_UIU_BT_ACT_CUST_GET, according to my scenario.
   Again I have a question here, will you please tell me in which component this class exists, so that I
   will enhance that component.
   Because when I debug after clicking on the Follow-Up button,this class is calling some where
   down...So I am unbale to get the right component for this.
Regards,
Raghu
I

Open ERP transaction within CRM 2007 using wizard for transaction launcher

Hello everybody,
I am trying to launch a SAP ERP transaction within SAP CRM 2007 using the transaction launcher wizard.
First I maintained all necessary setting for the RFC connections (in ERP and CRM) using for example transaction SM59 and BD87, e.g. the master data replication is working fine. Second I created a business object type based on the SAP Standard business object TSTC and set the u201CExecuteu201D method to u201CSynchronousu201D in SAP ERP.
Afterwards I created the URL for our ITS server and started the transaction launcher in CRM. During the step u201CFurther technical detailsu201D I selected as transaction type u201CBOR transactionu201D and chose our logical system (ERP) and added our newly created BOR object type as well as the method u201CExecuteu201D. If I now press the u201CNextu201D button the error message u201CAn RFC destination could not be specified for the logical system XYu201D is shown.
Any help is highly appreciated.
Thanks lot and kind regards,
Franziska

Hi,
The error you get is because the client you have mentioned for logical system mapping and the client in which you created the BOR object are not same.
Remember, for sucessfull transaction Launcher Configurations,
1) The client in which WEB UI Runs
2) The Logical System mapping and client mentioned in ITS url
3) The client is which you created the BOR object.
4) The client on which you are configuring transaction launcher wizard
ALL SHOULD BE THE SAME CLIENT, unless you are using the OWNLOGSYS concept for logical system mapping.
For example,
If my WEB UI is on client 200 of development system,
then i must create TSTC based BOR in client 200 , Map logical system for client 200 and configure trnsaction launcher in client 200.
In this approach, you cant transport the developments to other system and client ( like Quality and production system) , hence its advicible to create a logical system with name OWNLOGSYS. The name of logical system must be kept OWNLOGSYS in all the systems and clients so that then you can transport yout transaction launcher developments and the error you get now will not come. It its not possible to maintain the logical system with this name in all the system , then you will have to do as i mentioned in points 1 to 4.
Hope this helps.
Thanks & Regards,
Suchita

Business pacakge for CRM 2007

Hi,
we just installed CRM 2007 system. Is there any business pacakge available for CRM 2007 (as in case of CRM 2005). If so, Could you please let me know.
Thanks
Sri

Hi Hari,
We are planning to upgrade from CRM 5.0 to CRM 2007. Currently we are using CRM for Leads, Opportunity and Account & Contact Management with PCUI front end. We do have some customized iViews for Sales People and Customers. Could you please mail me the step-by-step procedure to upgrade CRM 5.0 to CRM 2007 to [email protected]
Please its urgent. Thanks a million....
Cheers,
Amit

Authorization Check for Business Partner screen

Hi!
Is it possible to exclude certain business partner information from being
processed or displayed in the business partner screen of Sales Order
(VA01/ VA21...) by restricting the authorizations? Thanks!
Just something similar to what is suggested for condition types in OSS notes 105621.
Best Regards,
Chris Poon

Thanks Mani for answering,
However, I am looking for ways to do it for the same TCode (VA01...) instead of creating a new TCode.
I tried using the user exit USEREXIT_FIELD_MODIFICATION in MV45AFZZ.
Display/hide Customer related field according to user authorization
IF SCREEN-NAME = 'GVS_TC_DATA-REC-NAME1' OR
     SCREEN-NAME = 'GVS_TC_DATA-REC-STREET' OR
     SCREEN-NAME = 'GVS_TC_DATA-REC-POST_CODE1' OR
     SCREEN-NAME = 'GVS_TC_DATA-REC-CITY1'.
    AUTHORITY-CHECK OBJECT 'ZV_DOC_CUS'
    ID 'ACTVT' FIELD 'L1'.
    IF SY-SUBRC NE 0.
      SCREEN-ACTIVE = 0.
    ENDIF.
ENDIF.
But it does not works at all
So I wonder if there is any other user exit to control the fields in Business Partner Page? thanks!
BR,
Chris Poon

How to create Business Partner in CRM 2007

Hi gurus!! how are you? I´m a rooky to sap crm and I would like your help and guidance to know how can I create a Business Partners and Roles.
Whatever detailed help or documentation you may give me will be rewarded =)
Thanks a lot in advanced!!!
Lorena.

Hello!
In the WebUI there are different Business Partner Types (Person, Organization, Group).
From user perspective you can differentiate between:
- Corporate Account (Organization)
- Individual Account (Person)
- Group Account (Group)
- Employee (Person)
- Contact Person (Relationship) (Person)
All these Business Partner have an own Overview-Page. Usually you can create the Business Partner starting from the related Search-Result-List (by default the new-button is not available for Employees as a Sales Rep usually doesnu2019t create new Employees u2026).
You can assign Business Partner Roles to these Business Partners (there is an own Assignment-Block within every Overview-Page of a Business Partner). Some roles will also get assigned automatically, if you create this Business Partner.
However it is possible to assign multiple roles to the Business Partner. Itu2019s also possible to have different Views of one Business Partner. E. g. an Individual Account can also be a Contact Person for another Account. But here it is not the Role determining the View it is the Contact Person Relationship doing this.
The Role itself also has an impact on the UI of the Business Partner as dependent on the Roles some Assignment-Blocks are displayed or not.
I hope this was not confusing u2026
Best regards
Arno

Authorization to access Web Client UI - CRM 2007 (v6)

When I create a user in the system, I have to assign it a business role.
Apart from assigning it work centers etc., I also need to assign a PFCG role.
What authorization objects should I include in that PFCG role that will allow the user to access (login and view the homepage) of the Web Client UI?
I assigned the user to a position in the Organization model, to the position I have assigned a business role.
I have tried giving it the authorization object for BSP, but it doesn't help.
After the login screen, I get the message saying "Sorry, Logon is not possible because you have not been assigned to a business role. Contact your system administrator. "
Anybody facing the same problem? Is there any standard Role that I can assign to the user which will give it access to the Web UI?

Hi
you wrote "Deactivate the object S_SERVICE via Cross-application Authorization Objects"
if I try with SU25 I get information like this :
You have switched off Basis authorization objects (starting with S_) or
HR authorization objects (starting with P_). However, these
authorization objects must always remain switched on.
The system ignores the fact you switched off these authorization objects
when saving. All other data is saved when you continue.
I always get an error in our system which says:
"XX field value(s) for object S_SERVICE were not entered in the profile"
what can I do with this?
Thank you for all suggestions
regards
RAfal

Maintenance of Authorization for transactions in CRM 5.0.

Hi Experts .
We are using CRM 5.0 with PCUI.
TheBusiness requirement is to maintain authorization for own transactions.the users who is involved in transactions should only be authorized to Open & see the transactions.Other users who are not involved in partner function like "Assigned to" & "Account responsible " should not be able to open & see the transactions like Activity .Lead , Opportunity ,Sales orders.& Service orders.System should give error message saying no authorizations.
We tried with below authorization objects to achieve this
CRM_ORD_OP (your own documents)
- CRM_ORD_LP (organization levels)
- CRM_ORD_PR (transaction type)
- CRM_ORD_OE (sales area/service Org).
- CRM_ORD_RL
- CRM_ORD_RS
But still system allows to open transaction belong to others.
Is there any alternative to control this.
Helpful answers would be rewarded max points.
Thanks in Advance.
Regards,
Basavaraj Patil

Hello
in order to check authority object CRM_ORD_OE,
CRM_ORD_OP and CRM_ORD_LP must not give authority. Please see
online documentation for detailed information:
http://help.sap.com/saphelp_crm40/helpdata/en/e9/
b29a39e7aee372e10000000a11402f/frameset.htm
Under the chapter 'Process Flow of Authorization Check in Business
Transactions' you will find detailed explanations.
I hope that I could be of help with that information.
Gerhard

Authorization flow Business Transactions

Hello partners,
I have a issue with the authorization flow concept.
My need is :
A.- the transaction type z01 is only for the user that belong to unit org A, object CRM_ORD_OE
B.- the transaction type z02 is only for the for own transactions of the employee, object CRM_ORD_OP
C.- the transaction type z03 is access for all users and not depend of unit org or his transaction.
So I have doubt with the combination of all of them, how can indicate to the system that for A scenary, I need the restrict only if the transaction type is Z01? and for the scenary B only for Z02, and the scneary C without restrictions?
this is the help sap documentation:
Process Flow of the Authorization Check in Business Transactions - Authorization Check in Business Transactions - SAP Li…
Regards
Roberto.

Thanks Christophe,
I analize the FM CRM_ORDER_CHECK_AUTHORITY_ACE,
but when I try to search activities in the SALESPRO, component view BT126S_APPT/ApptSQ, the break not work,
in others view like search service request, work ok the FM,
but for search activities not work,
I'm not sure if I need a specific Switch for that.
Do you know?
Regards

Configurations required for PME and SCE in SAP-CRM 2007

Hi Friends
How to configure the PME and SCE in SAP-CRM 2007.
If u have any documentation avilable for those two topics regading the implementation of e-Commerce application.
Waiting for ur reponse..
Regards
Satish.

Hi Mia,
Authorization group is available in the old versions and basically this help in defining new authorization groups and you can define what can be done with these authorization groups as what can be edited and what cannot be and this is done on SPRO. These authorization groups are entered in the authorization group and the user who has this authorization object will be able to work on the account.
So the business role in CRM 2007 has a PFCG role and the authorization profile that you created are assigned to the business role and users are assigned to the business role.
There are also few authorization objects to maintian the BP relationship and see if you can use these combination to check if it meets your requirement.
Hope it clarifies and if useful please reward points
Thanks
Srini

Authorization Check in Business Transactions in CRM 2007

Similar Messages

Maybe you are looking for