Authorizations & Business roles for ITSM

Dears,
i would like to ask whoever implemented an ITSM as a service desk for an IT organization, after setup the Organizational Structure (Organizational Model) and setup the Organizational Unit (Sold To Part) and Org. Object (Support team).
what is the best approach to give Authorizations & Business roles for :
1) new employee joined the company as an End User (Requester).
2) new employee joined the company as one of the IT Help desk (Dispatcher, Processor....etc.)
Regards,
Yazeed

HI Shikha,
i hope you are assigning the Role to the Position cretaed in your org model.
That is by navigating thru
GO TO-DETAIL OBJECT-ENHANCED DETIAL DESCRIPTION-By creating new infotype for Business Role
here one can assign the Business Role with the position.
In case you are not assigning by above mentioned way. Try to do so. Hope this will help.
Vijayata

Similar Messages

Business role for technical users

Hi,
Does SAP deliever a crm 7.0 business role for technical/consultant users? I need to get access to the configuration mode i the webclient where I can change and add new fields. Can anybody help me?
Thanks,
regards Camilla

Hi Camilla
Check Best Practice Guide C04.
Create the Power User role as instructed in the document.
This will enable to to complete configuration tasks.
Regards
Arden

Standard WebClient UI business role for the CRM 7.0

Hello Gurus
where can we get the below mentioned thing....i tried in service market place but i did not get
The predefined authorization roles are provided as attachment BP_CRM_ROLES.ZIP to the collective note of this SAP Best Practices version. Download and unzip the roles to your local directory
after dowloading we need to uplaod in to PFCG roles
(The purpose of this activity is to copy a standard WebClient UI business role and to assign a new authorization role to it. The WebClient UI business role is designed to centralize the authorizations, navigations, and content of the CRM WebClient UI.
The business roles will be adapted to the Best Practices scenario scope)
i am struck of ove here
regards
Sreeram

Hi Sreeram,
The roles you want to assign to the user you have to select for your scenario. The best practice role assigned to an user to navigate to the webclient. The other roles you assign to the user to give authoraization for your scenario. If you will go to C04 document you can get the standard roles which will be assigned to one particular user. For the standard user let sal SALES_MAN we assign the standard roles as peer the best practice as SAP_CRM_UIU_FRAMEWORK ,SAP_CRM_OR_ADMIN, SAP_CRM_OR_USER and BP_SLS_MANAGER. If you need other authorization for the user then copy the standard role and assign the authorization manually in transaction PFCG.
Hope this will help you.
Thanx
Chinmaya

Business roles for diffrent org positions

Hi guys,
I have an issue:
I have an organization model:
Org ABC-> Org A-> channel manager
-> Org B-> partner manager
I assigned channel manager role to channal manager in org A but when i assign partner manager role in org B , it overwrites the channel manager role for org A also. In short the organization model is taking only one business role. What could be the issue?
I have assigned the required PFCG roles to both the business roles.
Plz help!!
Regards
Shikha

HI Shikha,
i hope you are assigning the Role to the Position cretaed in your org model.
That is by navigating thru
GO TO-DETAIL OBJECT-ENHANCED DETIAL DESCRIPTION-By creating new infotype for Business Role
here one can assign the Business Role with the position.
In case you are not assigning by above mentioned way. Try to do so. Hope this will help.
Vijayata

Change business role for a user badi

is there any badi to change a business role assigned to a user dynamically i want to change...
inputs will be highly appreciated. i want to change the business role based on some condition...
some thing like component_loading, where we can change the enhancement set.. i am looking for similar kind of thing for changing business role...
thanks in advance.

Hi Niraja,
Did check these BADIs
BUPA_ROLE_CHECK
BUPA_ROLE_EXPORT
BUPA_ROLE_IMPORT
BUPA_ROLES_UPDATE
Regards,
Raghu

Business Roles configuration for ARM

Hi Gurus,
We have implemented ARM piece of AC but now we have a requirement to map our security technical roles to business roles. Can we create and use business roles without using BRM ?
Example: Create/maintain single roles in backend (ECC/BW etc) and import in GRC then map single roles to Business roles for requestors to select.
Regards,
Salman

Yes Salman,
You can use BRM to create business roles to group roles as per your requirement. You need to confirm the check box for connection group as Business, as below:
As you mentioned, I assume you have defined the Methodology Processes and Steps for role maintenance then under NWBC, you would be able to see role type as Business.
Hope you completed the action for: Deactivate Role Types
Let us know if you need more info on this or for any issues.
Regards,
Ameet

Maintaining WebUI Business Roles in PFCG/Infotype 1263

Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang

Reg: Business Role

Hi All,
   I would like to know whether the below scenario is possible in CRM 2007.
our organization structurefor eg. is - orgunit - > department -> divisions -> managers -> users
workcentres for example: service, case, sales, activity, email..etc
Email is common for the entire organization.It can be clicked and able to get the work group.
my scenario is to have only one Business Role for the total organization.
I need to show all the workcentres in the navigation bar for total organization, no matter who logs in..
(i guess anyways it will show all the workcentres..because it has only one business role)
Now is it possible to filter at the workcentre level with some authorizations...
Example:
   if my manager logs in:
    1) he has to show all the workcentres in the navigation bar.
    2) Email can be usable
    3) he only has authorozation for service and sales. so if clicks on activity..it has to show not authorized to view this page..
if a user logs in:
   1) he has to be shown all the workcentres in the navigation bar.
   2) Email can be usable
   3) he has only authorization for case and activity. so if click on service..it has to show..not
      authorized to view this page..
So I need to give authorizations at the workcentre level...is this possible...
we have many work centres to add in the navigation bar..and we dont want to confuse the users in our organization by giving too many business roles for each workcentre..for this reason we are thinking to give only one business role, which it directly let the user in..
Can anybody throw some light on this..how we can do this..or any alternative is also appreciable..
Please dont think this is huge message..i just want to elaborate my scenario...so that you will understand and also i will get good answers from you...
Regards,
Raghu

Dear Stephen,
we are facing serious problem in SAP CRM Web UI - Sales & Marketing Implementation Project.
Issue:         We are Trying to create New Contact within the Account screen and not able to Create New Contact.   It display error like ****you are not authorized to change the business partner*****.
We are maintaining the Role Type SOLD-TO-PARTY 03 (Display access) and Role Type Prospect, Competitor, Contacts 01, 02, 03 accesses in the PFCG Role Z:WKFS_CRM_UI_SALEREP.
1.      B_BUPA_RLT                                              CRM_BPROLE
                 Activity : 03                                                 Activity : 03
                 BP Role : CRM000                                    BP Role : CRM000
2.      B_BUPA_RLT                                                       CRM_BPROLE
      Activity: 01, 02, 03                                               Activity: 01, 02, 03
      BP Role: BUP001, BUP002, CRM005                 BP Role: BUP001, BUP002, CRM005
When user trying to create Contact (BUP001) by getting to Account (CRM000) screen, through the CONTACT assignment block, they are getting the below error.
In this process, users are NOT EDITING the ACCOUNT and creating the new CONTACT (BUP001) through the NEW button (which they are authorized).
Even though, they are authorized to do it, since they are inside the ACCOUNT (CRM000), we are getting this issue.
Please help me on this . My Devlopment phase will be stoped due to this issue.
Thanks,
Srinivas Nallabotula,
Email ID : [email protected]
Mobile : +91 8792700882

Deactivate unusable business roles

Hi, colleagues
How to deactivate unusable business roles in Web UI?
We want to show only some of business roles, not all.
I know about parameter CRM_UI_PROFILE and about pfcg-roles.
But how to deactivate standard business roles, for example?
We need to use only created Z-roles and show only them for all users.
Denis.

Please check my document
http://scn.sap.com/people/monika.suchy2/blog/2013/07/25/restrict-access-to-business-roles-in-web-uiRestrict access to business roles in Web UI
It describes a way to restrict business roles using an own authorization object.
Monika

Business role in IC

Hi experts,
I have a confusion on understanding Business Roles in interation center.
scenario:
call center set up is there with 100 CSR's, where everyones role is same.
here my confusion is Do we have to create different business role for each CSR or, only one role we can assign to Org for all the users.
if am assigining one role to all users how it is going to differentiate with each other.
Ex: one CSR created Search criteria differently and other created differently, like if 100 creating, will all 100 search options will be available to all ? if yes searching this search criteria itself is a problem ?
how about the recent items.
If we are using only one business role, how we are going to differentiate b/n the users.
How the Business role concept used in IC ?
Regards

Hi,
Thanks for your reply.
Here is the scenario am explaining again:
call center set up is there with 100 CSR's, where everyones role is same.
1. here my confusion is Do we have to create different business role for each CSR or, only one role we can assign to all users(as i know we can assign from Org)
2. if am assigining one role to all users how it is going to differentiate with each other users.
Ex: one CSR created Search criteria differently and other created differently, like if 100 creating, will all 100 search options will be available to all ? if yes searching this search criteria itself is a problem ?
3. how about the recent items.
4. If we are using only one business role, how we are going to differentiate b/n the users.
How is the Business role concept used in IC ?
My confusion is with Business roles, how this is differentiated b/n the users if it is only one role.
Thanks in advance.

Portal Content - Business Packages for CRM 7.0 and IC Webclient

Hi all

We are looking at CRM 7.0 and SAP Netweaver Portal 7.0 integration. 
I've noticed that the Business Package (BP) for CRM 7.0 contains very limited business roles for: 
Channel ManagerChannel Manager 
Partner Manager 
Channel Manager (Telecommunications) 
Partner Manager (Telecommunications) 
Customer 
Digital Asset Management 
Incentives and Commissions 
only.

In the past, there the BP for CRM 5.0 contains a lot more roles including customer service representatives and managers. Given that the standard business role export (from CRM 7.0) and import (EP 7.0) does not work for IC Web client business roles, is there a standard way for functionality delivered in IC Webclient like Customer Service to be integrated into EP 7.0?

Otherwise, if we were to configure each BSP page individually for IC Webclient, will there be functions that do not work? eg: alerts, manager realtime view of CSR activities, call tracking, telephony integration etc..

Thanks!

There are two approaches (that I'm aware of):
- install external authentication (such as an LDAP which can be populated from the R/3 backends)
- install an additional Java instance
I would go for both of them because
- it will make things easier if you implement other functionality that is in the portal (non-ESS)
- it will avoid patching one portal and to keep the SPs of both backend systems in sync with the portal
Markus

2 Business Roles - Navigate from One to Another

Hello
My Key user is assigned a regular Web UI Business Role(CASEWORKER) and it is used for daily work.
However he needs to access standard FCC_AGENT IC specific role in order to process the Collection Work Items occasionally.
Solution which I am thinking was to assign both the Business Roles to User.
However the disadvantage is: User have to switch back to Other Role in order to perform the Operation. Moreover the User is not really happy with this approach.
Is there any other option available ?
Is that possible to Open a new Session (for Secondary Role) from Navigation Bar of first Business Role ?
Please advise.
Cheers

Hi Remo,
Maybe you can consider configuring a new business role for your key-user, where you can put all workcenter that he needs (from both business roles that you indicated).
What do you think?
Kind regards,
Garcia

Business Roles Provisioning - Issue

Hi All,
We are on GRC SP13.
We are using business roles for provisioning.
When i select "CHANGE ACCOUNT" request type and request for business roles through GRC, roles are being assigned to UserID and everything is working fine.
Issue is with the notification mail user is getting after provisioning. My notification email has details as shown below.
Hi Padmavathi Sai,
The Request number : 453 , has been processed and the Request is Closed. The details are as follows:
PREDDY User created in XXXXXXX
XXXXXXXXX Business role assigned to PREDDY
Kind regards,
Access Control Administrator
PREDDY UserID is already available in the target system and user selected change account request type, but notification email says that user is created
Anyone came across this issue?
Regards,
Sai.

Hi Colleen,
I am using the standard notification template GRAC_AR_CLOSE.
Hi %FIRST_NAME% %LAST_NAME% (%USER_ID%),
The Request number : %REQNO% , has been processed and the Request is
Closed. The details are as follows:
%PROVISIONING%
Kind regards,
Access Control Administrator
%PROVISIONING% variable shows mail notification as I have mentioned above
Can you help me with this?
Regards,
Sai.

Business Roles - Risk analysis

Hi All,
We are on GRC SP13.
We are using business roles for provisioning to end users.
When role owner is performing risk analysis for business roles, results are proper according to defined ruleset only if "SYSTEM" field is empty.
If system is selected, then results shows that "NO VIOLATIONS".
Is this the standard behaviour for risk analysis of business roles or Am i missing anything?
Looking for your advise on this.
Regards,
Sai.

Hi Jaya,
Yes I remember this is possible. You can setup a customize attribute in GRC privileges. And put the business role name into this attribute.
Try this URL, but perhaps your GRC consultant should read it instead of you.
http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d0e2c628-2690-2e10-0d82-dbf1931db2cd?QuickLink=index&overridelayout=true&51565377381172
After creating the attribute, you need to revise the GRC framework to include this attribute (business role name) in your request.
I don't have a working IDM system (with GRC integration) with me. I could not provide you more details.
Cheers,
Chenyang Xiong

Business Roles & Technical Roles

Colleagues,
With the whole process of creating Business Roles for the implementation of IdM we gotten to thinking and started looking for a best practice when it comes to creating and managing business roles aswell as technical (SAP, ABAP) roles.
Anyone have any good documentation in this regard?
Thx in advance,
Jonathan

Hey Sandeep,
It's a good document but not exactly what I was looking for.
Concerning the Business Roles I was looking for more of a functional (business) view point on the whole business role thing. Something I could use from a technical standpoint to help my customer in the business role creation process.
Concerning the Technical Roles (ABAP authorisations). We have the situation here at the moment that we're dealing with 14 years or role creation in the SAP systems with no guidelines what so ever. So to put it gently: it's a mess. And I was wondering if there was any best practice document out there describing the "best practice" of creating technical roles, handling authorisations in SAP etc.
I realise that the second question doesn't quite fit in this forum but I'm guessing here would be the closest match for the question.
Thx.

Authorizations & Business roles for ITSM

Similar Messages

Maybe you are looking for