Authorization for Accounts(Sales district) and Sold-to parties

Question

Hi Experts,
I have a requirement where I wanted to restrict Sales districts(Accounts) & Sold-to's depending on the employee responsible for.
The requirement goes like this.
There are Sales districts. Each Sales district has around 4 to 5 Sold-to parties.
For each Sales district a sales manager is responsible, and for each sold-to party a sales group is responsible.
Now when a manager logs in using his logon credentials then he should be able to see only the sales districts(Accounts), he is responsible for and the sold-to parties for that particular Sales district(Account).
But when a sales group logs in , he should be able to view only his sold-to parties, which he is responsible for.
Any clue on how to achieve this requirement.
I have used CRM_ORD_LP, CRM_ORD_OP & CRM_ORD_OE but they are related to actvities, leads & opportunities authorization objects.
How about Sales districts (Accounts)? How can I restrict it to Sales districts(Accounts) for managers and sales representatives?
Thanks in advance.
Rohan

Answer 1

If you don't need to restrict access to all customers but only to propose customers assigned to certain salesman you could probably do it via partner determination rule where you would say when the employee responsible is entered in sales document that customers belonging to this salesman are proposed on selection screen.
If you need to restrict it then I think you have 2 choices:
- use ace to restrict by sales district
- create Authorization Groups, assigned them to customers and then create pfcg roles for salesman providing in pfcg access to certain Authorization Group. in pfcg you use B_BUPA_GRP object. But the problem using pfcg is that you will have to create as many pfcg roles as many salesman you have and this can be a huge thing.
So ace will probably be more appropriate.