Authorization for IC Web Client Profile

Dear Guru,
This is the first time I involve in IC Web Client
Project.
I would like to limit IC Web Client Profile. What is authorization object which I have to limit ?
Beside that, if users miss authorization in the web screen, what is user have to do ( in R3 we can order user to run /nsu53 or I run ST01 to trace ) ?
Pls advice.
Thanks,
SUGANDI

You can use SAP delivered roles
SAP_PCC_IC_AGENT
SAP_PCC_IC_MANAGER
SAP_PCC_CAMPAIGN_MANAGER.
Each of these roles have access to Interaction Center BSP application 'CRM_IC' as well as other PCUI applications used in IC Web Client.
Authorization object for BSP applications is 'BSP_APPL'.
Talk to your security person and ask him to assign these roles to the user who are going to use the application.
You can even customize these roles.
Thanks,
Thirumala.

Similar Messages

Managing authorization for IC web client

Where can we find autorization objects used for the IC web client ?
- I cannot find any documentation on this topic.
- There's no transaction code and by the way no SU24 definition.
- Declaring the IC WEB BSP in transaction PFCG, no object are associated to the profil.
Tanguy

Due to our service center geographic organization we want to control acces from the country code of our custumer.
I got more information from the CRM security guide :
http://help.sap.com/saphelp_crm40sr1/helpdata/en/28/797b14a9cf4296b02742f641c18971/frameset.htm
And OSS note 675502 (No authorization for executing a PCUI BSP application)
I will test the following solution :
1- Add the shadow transaction BSP_CRMD_BUS2000116 in PFCG in order to get the BSP_APPL object
2- Add the transaction CRMD_ORDER & BP in order to control document usage from country code

Regarrding IC Web Client Profile Assignment

Hi ,
I am learning IC web client actually, in a tutorial i came across something called IC web client profile. i created it successfully. Next they have said to assign it to the user or business partner' s position in organisation management. i don get what this is actullay. Can anybody help me in knowing how to assign the profile. ?
thanks,
selva M.
Edited by: selvakumar mohan on Apr 10, 2008 1:26 PM

hi Selva,
Once you have creted the ICWC profile you will need to assign this profile to either a BP/User or Position or Org unit.
for this go to the trasaction ppoma_crm where you can see you orgnisation setup along with the positions and BP assignements.
Now select position and go on the top to the go to field and then detailed object --.enhanced object descriton and then follow the steps as given above.
Regards
Raj

S_DEVELOP authorization needed for CRM Web Client in SAP CRM 7.0?

We implemented an own WebUI component in SAP CRM 2007 and use it in others components (with USAGE).
After we transport the component in SAP CRM 7.0 we always got an error CX_BSP_DLC_CONFIG_GENERAL_ERR at loading the component. But if we set the permission to SAP_ALL all thing work fine.
In SAP Note Nr. 1367944 we read:
"It is not possible to run the CRM Web Client without the S_DEVELOP, activity=03
authorization because it is needed by the Web Client Framework.
The S_DEVELOP authorizatin is part of the SAP_CRM_UIU_FRAMEWORK PFCG role, which must
be assigned to every user."
"This dependency has been removed in CRM 7.0."
Do we need to install some other SAP Notes at SAP CRM 7.0?
Many thanks for advices!
Handri Gunawan

Hi Handri,
I asked my collegue here, who created the note.
The note is correct, in CRM 7.0 you do not need S_DEVELOP anymomre.
The error that you have might occur because of another reason.
Could you track the call stack of this exception?
And send me back the call stack?
Regards,
Steve

Authorization to access Web Client UI - CRM 2007 (v6)

When I create a user in the system, I have to assign it a business role.
Apart from assigning it work centers etc., I also need to assign a PFCG role.
What authorization objects should I include in that PFCG role that will allow the user to access (login and view the homepage) of the Web Client UI?
I assigned the user to a position in the Organization model, to the position I have assigned a business role.
I have tried giving it the authorization object for BSP, but it doesn't help.
After the login screen, I get the message saying "Sorry, Logon is not possible because you have not been assigned to a business role. Contact your system administrator. "
Anybody facing the same problem? Is there any standard Role that I can assign to the user which will give it access to the Web UI?

Hi
you wrote "Deactivate the object S_SERVICE via Cross-application Authorization Objects"
if I try with SU25 I get information like this :
You have switched off Basis authorization objects (starting with S_) or
HR authorization objects (starting with P_). However, these
authorization objects must always remain switched on.
The system ignores the fact you switched off these authorization objects
when saving. All other data is saved when you continue.
I always get an error in our system which says:
"XX field value(s) for object S_SERVICE were not entered in the profile"
what can I do with this?
Thank you for all suggestions
regards
RAfal

Problem In IC Web Client Profile

Hi Experts,
I m using CRM5.0 for Web Client.I m changing BuPaMoreContactView as maintained in Cook Book CR5.0.
I m following all steps correctly as
1. Run time profile
2. Assign Run Time profile to my own profile
3. Create Org'n --> Position --> User and assign my profile to organization.
Now when i m checking profile assign to my user(By CRM_IC exicution) it is showing profile that is not exist and giving error Activity clipboard profile could not be loaded
Other problem when i m searching Business partner I m geting only two tab that r Account and Address .I am not geting third tab that is Contact Persion. How i will find that in search page.
Please tell me what is the problem and what i need to check
Thanks
Gaurav

Hi Gaurav,
I gor confused with CRM 5.1/5.2 and CRM 2007 profile. You are on CRM 5.0 then you do following things
1) goto tx ppoma_crm
2) on top left under search screen, search for Positions " Sales" and Marketing and Service one by one.
Now assign yourself to each of these positions. ( You might find more than one psoition when you search by above criteria. Ideally you should be able to see position names soemthing like Sales Representative, Marketing Represetative etc . I am not sure what exactly would be the name at your system because ppl might chnage the description of positions.
Now launch UI again and you must be able to see all modules.
Let me know if u still have any issues

A Web application + API for non web clients

Hi there,
I am new to the java enterprise world, i have a query regarding the application i am developing currently, I am not sure this is the exact category to ask this question but please help me on this.
In very simple terms my applications job is to give a listing or view of files distributed across network.
For this I need to have a webApp which can provide a view to all web clients. (where view is nothing but listing of files independent of there location)
Because this view tells nothing more than files , and i am as data center administrator cannot tell much about data, so we need to provide APIs so other applications (WebAPP or anything else)
can present the view in more data specific terms.
The webapp part is fine with me, but how do i support API being on an application server like glassfish.
Please help me on this.
Thanks in advance
AP

Dear all,
Anyone can help me to clear this problem ?

No authorization for query/Web application assigment in roles

Hi All,
in order to clean/reorganize our roles, I have to clean some query/Web application/Workbook assignment in roles. After I have loged in into BEX Browser I have cleaned/moved some objects from roles. But it seem that I have not all necessary rights to do that.
Which is the relevant authorization object which I need to change query assignemnt in roles?
Is there an other way to add/remove queries/Web applications from roles?
Any help would be great. Thanks in advance.
Best regards,
Stefanos from Munich/germany.

Hi,
try : S_USER_AGR
hope it help's

Howto add "With Authorization" for removel to Enrollment Profiles?

When I enroll a iOS device to our Profile manager it get's an "Remote Management" profile which the user can remove without restriction.
When I add profiles later on, they are all linked to this firest profile and can all be deleted by deleting the first profile. It doesn't matter if the latter has a removal restriction set.
So how do I lock the Enrollment Profiles??

Of course, the previous posting is not really related to this thread and therefore ought to have be posted as a New topic, but seeing as how AS has introduced the subject...
Here is the way to add a unique constraint to a populated column, ensuring that the existing values are unique as well.
ALTER TABLE t1
ADD CONSTRAINT t1_uk UNIQUE (col1,col2)
EXCEPTIONS INTO my_exceptions
/If the alter table statement fails this will populate the EXCEPTIONS table with the rows that contain duplicate values for (col1,col2). These are identified by ROWID. We can then chose to:[list]
[*] delete rows with a bad key;
[*] amend the values of the key columns;
[*] re-apply the constraint with the NOVALIDATE option.[list]
We should be wary of choosing the NOVALIDATE option. There's usually a good reason why the unique constraint is required and we should not circumvent it. Apart from anything else, Oracle allows us to build foreign keys referencing NOVALIDATE unique keys. This could result in child rows that have two parents, which is normal in biology, but very wrong in a database. NOVALIDATE is useful in datawarehouses and suchlike, because little updating occurs and the data integrity issues are of less imporatance. I don't think it ought to be used in OLTP situations.
Once we have handled the duplicate values we can re-run the alter table statement and apply the constraint.
If you don't already have an EXCEPTIONS table (it can be called anything, it's the structure that counts) you may need to run (or get a DBA to run) a script called UTLEXCPT.SQL, which will be in the $ORACLE_HOME/rdbms/admin directory.
Cheers, APC

Components Required for CIC Web Client

We have a question about CIC installation components for CRM 5.
When we check the "Upgrade Master Guide" for "mySAP Customer
Relationship Management" ( Pages 58 - 61 ) for all CIC components, we
do not find that JAVA components are required for CIC ( Like JCRM).
When we see details from Best Practices Doucment for CRM component matrix, we see that its required.
We are not sure what to do. We were under the impression that Java
components are not mandatory for CIC forCRM 5. All we need is TREX and IPC.
Can someone please clarify/confirm ASAP as system needs to be build
accordingly. If we do need JCRM, what functionalities is this required for?
Thanks for help in advance.

Hi Nikhil,
With 04s all required installations will be completed by default. Just that you have create a domain and the track to make use Webdynpro Components in NWDI.
Following are the SCs that are required.
DI Build Tool 7.00
SAP J2EE Engine 7.00
SAP Java Tech Services 7.00
This u can download from Service Market Place
Support Packages and Patches - SAP NetWeaver - SAP NETWEAVER - SAP NETWEAVER 7.0 (2004S) - Entry by Component - Development Infrastructure
Regards,
Nagarajan.

Use Enterprise portal theme for Web Client

Hi Experts,
I am new to this topic.
I am working in portal project. We have situation that in portal we have excellent theme but in CRM Web client we donu2019t have fantasy theme like portal.
Is there anyway can I use my portal theme for CRM web client?
If you guide me how to integrate portal theme into CRM Web UIs, that will be great.
Thanks.

Ashok,
There is no easy way to extend your portal theme to the CRM WebClient. Lot of effort is needed for identifying the portal CSS files and updating CRm WebClient theme CSS files with the portal theme attribute values.
Thanks,
Thirumala.

Custom profiles in IC Web client terminate in XSLT error 'unexpected EOF'

Hello,
we've upgraded from CRM 4.0 SP7 to CRM2005 (i.e. CRM 5.0) SP7.
The IC web client is not able to start our custom web client profiles. However, SAP's default profile is OK.
When launching via transaction CRM_IC or SE80 and default.htm, the window opens up, but if we use one of the custom IC Web client profiles, the application won't load correctly. It only displays the logos and the clipboard, then gives the error message:
The runtime repository could not be interpreted. An XSLT transformation error occurred.
Reason: Unexpected end-of-file.
Transformation: BSP_WD_RT_REP_RUNTIME
I've checked the customization, and I find no errors. All function profiles (XML files) from 4.0 have been migrated correctly into 5.0 customization tables.
The custom profile launches our BSP application Z_CRM_IC, which is a copy of the standard BSP with a few controller replacements. The corresponding runtime framework profile calls the repository Z_CRM_IC_RT_REP, which is also a copy of the original.
When I check the repository Z_CRM_IC_RT_REP in SE80, the system displays the error
BSP Application Z_CRM_IC_RT_REP,BSP Page CRM_IC.XM
The included page "CRM_IC_All_Viewsets_wo_BUPA_and_Main.xml" is created in language "ABAP".
However, I don't think that's really an error, because the include merely points to the standard xml file
../CRM_IC_DT_REP/CRM_IC_All_Viewsets_wo_BUPA_and_Main.xml
and when I run a check on that, the workbench finds no errors.
Any idea on how to get the IC Web client up and running again?
Regards,
Arto

Note 880180 seems to help.
After making the suggested changes, I ran into another translation error, but that's a different story...

How to select from multiple addresses of account in IC Web Client

Hi all,
We are implementing a B2C scenario for IC Web Client. We have customers with multiple addresses. However, when we search the acount, only standard address comes to screen. We want to be able select the related address, and then confirm the acount with that address.
Is there any way to customize the Web Client in order to be able to select from multiple addresses of the acount?
Thanks in advance.
Edited by: Danisman Danisman on Aug 31, 2010 2:52 PM

Thanks for the answer. Yes, we are using 7.0 but in the account identification screen, there is no personalize button ( I assume you are suggesting adding an addres block by using that button, right?).
We checked the necessary customizing : there is an entry for fucntional profile PERSONALIZATION : ALL_ENABLED.
Should we do something else to show the button?
Thanks again.

Finding an EJB object. Web clients vs. Java clients

From what I've read this is the process for a web client to find an EJB object: the client uses JDNI to find a reference to the EJBHome interface and then it uses the create method from this interface which makes the container to begin to work, creating an instance of the implementation class and an instance of the EJBObject interface, and returning a reference to the EJBObject, which will be used by the client to call the methods.
Are there any differences if the client is a java application and not a web client?

The Java Client talk to the server with random ports
not 80. Gives me a headache. _*why?
There's no need to get headaches about it, in fact no need to worry about it at all.
Just have the JNDI services available so you can do the lookup (which might require opening a port (or more than one) on the firewall, but that's it.
And that's no different between a standalone client and a web application client. Both need to do that JNDI lookup.

Display Authorization for webdynpro component

I have a requirement where , the source code has to be hidden . I have seen programs where it hides ABAP report but none for We dynpro. Is there a way to hide web dynpro code . Or is there any way to revoka even display authorization for the web dynpro components ? Please provide any suggestions.
Regards,
Sri

Hi Srivijaya,
Go to application, parameters tab give WDDISABLEUSERPERSONALIZATION give value to 'X'. It will disable user personalization settings, user can't see any help regarding component.
Cheers,
Kris.

Authorization for IC Web Client Profile

Similar Messages

Maybe you are looking for