Authorizations for BP in CRM 2007

Hello Experts,
The requirement is that certain Users should not have access to BPs starting with 4 series no (eg 400100) and another set of users shouldnt have access to BP starting with 6 series no (eg 600001). These two no. ranges are also linked to seperate Account groups. I tried restricting the Roles, Acct group etc in PFCG (B_BUPA_ATT, B_BUPA_RLT) but still when the user searches for the BPs all of them are displayed in theSearch result.
Any help would be highly appriciated.
Regards
Suhel

Suhel,
Please refer to notes 1392467 and 1129682 to read about supporting this authority objects in new CRM versions.
As alternative variant I can offer implementing ACE, you can read more information about this here:
/people/boris.dingenouts/blog/2006/09/18/the-concept-and-implementation-of-crm-ace
/people/ravikiran.chittum/blog/2007/09/19/configuration-implementation-of-crm-access-control-engine-ace-part-1
/people/ravikiran.chittum/blog/2007/10/01/configuration-implementation-of-crm-access-control-engine-ace-part-2
BR, Arthur.

Similar Messages

Authorization objects for BP in CRM 2007

Hi,
right now i'm struggling with the standard authorizations for the BP in the WEB UI.
We want to restrict access to BP by role.
There is the standard object B_BUPA_RLT which worked before in SAP GUI.
The object is still relevant but in our system just the general rights to the BP are controlled. The value roletype really doesnt change anything. E.g. I just enter roletype customer and change, but I then can change all roletypes.
The new object CRM_BPROLE just controlls the assignment of roles.
Thus it doesnt help.
Thanks
Andreas

Hi Andreas,
THE new role CRM_BPROLE also controls the change access to Business Partners. We have implemented it over at our client site. I think one step that you might be missing is implementing the BADI. The authority check is deactivated by default. FOr that you have to implement the BADI through the following path
>>Master Data - Business Partner - Accounts and Contacts- Business Add-Ins Implementation: Filtering of BP Roles by Authorization
Reward points if it helps.
Thanks,
Anand
Edited by: Anand on May 7, 2008 1:59 AM

Maintenance of Authorization for transactions in CRM 5.0.

Hi Experts .
We are using CRM 5.0 with PCUI.
TheBusiness requirement is to maintain authorization for own transactions.the users who is involved in transactions should only be authorized to Open & see the transactions.Other users who are not involved in partner function like "Assigned to" & "Account responsible " should not be able to open & see the transactions like Activity .Lead , Opportunity ,Sales orders.& Service orders.System should give error message saying no authorizations.
We tried with below authorization objects to achieve this
CRM_ORD_OP (your own documents)
- CRM_ORD_LP (organization levels)
- CRM_ORD_PR (transaction type)
- CRM_ORD_OE (sales area/service Org).
- CRM_ORD_RL
- CRM_ORD_RS
But still system allows to open transaction belong to others.
Is there any alternative to control this.
Helpful answers would be rewarded max points.
Thanks in Advance.
Regards,
Basavaraj Patil

Hello
in order to check authority object CRM_ORD_OE,
CRM_ORD_OP and CRM_ORD_LP must not give authority. Please see
online documentation for detailed information:
http://help.sap.com/saphelp_crm40/helpdata/en/e9/
b29a39e7aee372e10000000a11402f/frameset.htm
Under the chapter 'Process Flow of Authorization Check in Business
Transactions' you will find detailed explanations.
I hope that I could be of help with that information.
Gerhard

Web Client - BP not valid for Sales Org - CRM 2007

Hi,
In the Web Client (CRM 2007, for the Quick Create Activities it is not possible to add Business Partner's as Internal Assignees,Towards Awareness or Person's Responsible. There is an error message - "TEST1 is not Valid for Sales Org" -
This issue never occured previously with the "Web Interaction Centers" - CRM 4.0, when we added in Internal Assignee's , Towards Awareness BP's.
Any help on this would be greatly appreciated
Thanks
Dan

Hi,
I suppose this is not the right forum for this issue...
Regards,
Wolfhard

Region based authorization for user in crm

hi
In our project, there is a requirement that CRM users should be able to access master & transactional data related to a region for which they are responsible.
I was told that it can be achieved using PPOMA. I have defined org units for region and assigned positions to it. But I don't know how to proceed further.
Please help me in resolving this.
thanx & regards
hits

i'm fairly sure that solely using PPOMA/E will not do the trick. what you can do there is implement the structure of your organization and attach roles to either org units or positions. after that you attach users to the positions so that they will have the access to the authorizations that stick to that position. additionally you might want to put some roles to the org units to establish an interitance from org unit to position to user. this is very nice for the 'overall' basis role everybody needs.
but now for your question. the elements that represent your 'regions' must be someplace in the role - preferably in the organizational levels of that role - like say: a plant or purchasing group or sales unit or such - the relation from that organization level to the user will be drawn manually by your attaching the role to a position (or org unit). the emphasis here is with 'manually' - so you do it.
so. this all goes for ERP, but not necessarily for CRM. since i know next to naught about CRM it might be different there but i very much doubt it, since you could ALE-distribute your users/org-scheme to - say: a CRM system belonging as a child to a CUA so necessarily it would have to follow the same structure. mind you: i might be wrong ...

Standard (ABAP coding) delivery for SES in CRM 2007?

Hello,
I found the Netweaver functionality "Search Engine Service (SES)" on help.sap.com.
This function sounds great. Documents on SDN (like "https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/21404ae5-0601-0010-0395-a6d917099f1a" and "https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a751a1ec-0a01-0010-f0ba-89e4c5cd0261") tell that this functionality is part of Netweaver ABAP and that there're already ready-to-use implementations for business objects in SAP ERP.
However, we're using CRM and want to extend the search functionalities using SES. I was able to create an index for business object BUS1006 (business partner) and insert some data, search for it, and so on. However, it was necessary to do all the data selection manually.
I found enhancement spot COM_PRODUCT_SE which seems to deal with the product search using SES. I tried with business object BUS1006 where enhancement spot HRHAP00_SES seems to be used - however with no (sample) implementation. When creating/updating an index using report COM_SE_DISPATCHER, the methods of the corresponding BADI implementation are called to retrieve object IDs, attribute names, attribute values and so on. As described before, this seems to be not delivered by SAP standard, thus, we have to do the coding in methods IF_HAP_SES_BUSOBJ_AESGET_ATTRIBUTE_NAME_LIST, IF_HAP_SES_BUSOBJ_AESGET_ATTRIBUTE_VALUES, IF_HAP_SES_BUSOBJ_AES~GET_OBJECT_ID_LIST on ourselves?
So my question is: Is the ready-to-use implementation of SES for CRM business objects already contained (and I didn't find it) or will it be part of further shipments?
Many thanks & regards
Wolfgang

Hi Wolfgang,
unfortunately, CRM did not include the SES methods in all their objects.
CRM will focus on enabling their objects on "Embedded Search", which is basically "the next version of SES" that will beavailable for Business Suite 2008 applications. This will then also enable CRM content to be searched through SAP NetWeaver Enterprise Search.
Of course you can - in the meantime - attempt your own implementation of SES for CRM objects. Unfortunately, I am not the right guy to further help with coding details for that.
Best, Karsten

Extract data from CRM 2007 (CRM 6.0)

Hi all,
When BW-ekstraktion, g.e. 0BPARTNER_ATTR, we will get infopackage error:
8 when starting the extraction program
The problem is in SAP CRM 2007. This system has been setup as (transaction kode CRMC_REPO_OPT) "BP BI AND INTERACTIVE REPORTING" as activeted.
In Transaction kode SBIW "Control parameters for data transfer from the souce system" the field "Target system for background job" has value CRMCLNT150 (BW INTERACTIVE REPORTING client in the CRM 2007 system). This is done for getting the CRM 2007 "CRM Interactive Reporting" to work.
"Target system for background job" must be empty (Note 147104) else can't SAP BW get any data.
We need to get both "CRM Interactive Reporting" and BW data loads to work. Has any one got "luck" with data load to BI 7.0 and CRM INTERACTIVE REPORTING (CRM 2007) running at the same time ?
(OSS has been created)
best regards
René

Why do you need to copy it? The data is easily available from R/3 via RFC.
Rob

Connecting EP 7 to CRM 2007

Hi All
I tried creating a URL iview for connecting to CRM 2007. The URL is working ok and the details based on the roles given in the background is also getting displayed.
But when i click on anyother workset or role and come back to the CRM iview its already logged the user off. Then the user will have to login to the Portal for getting connected to the CRM again.
I had configured SSO ticket from portal to CRM 2007.
What can the reason be that i am logged of from the system while navigating else where in the portal.
Regards,
Sasha.

Hi,
Have you maintained the following profile parameters on your CRM system?
login/create_sso_ticket=2
Login/accept_sso_ticket=1
Also check if the following parameter is:
login/ticket_expiration_time
Good luck & best regards,
Jan Laros

Authorization restriction for CRM 2007

Dear Experts,
We are in process of defining the authorization matrix for CRM 2007 for end users who will be using Web UI.
Here my requirement is the service orders created by USER1 should not be displayed by USER2 and vice-versa when they do a search in both Web UI and GUI in Tx CRMD_ORDER for service orders.
Please let me know how can I acheive this and what is the auth. object for the same.
Thanks & Regards,
Sharath

Dear babu,
If I understood your request, you want that, only one user will be able to access the document. If you want to do that, this is the answer:
At tcode PFCG you shoud set:
First you must set what type of document will be avaible to the user, in this case Z020.
CRM_ORD_PR: PR_TYPE 'Z020',ACTVT '*'
Next you must set which activities they will be able to do (notice, you must set the same field in the previsou object(
CRM_ACT: ACTVT u2018*u2019
And then you set which partner function or partner category are able to access the document, here is the main point !
In this example I set that only users who has Partner Category (not partner function) Employee Responsible (std partner category 0008) are able to access the document
CRM_ORD_OP: ACTVT '', PARTN_FCT '', PARTN_FCTT '0008'
Here you can notice again field ACTVT, here you will set what user are able to do, "*" means everything, "1" = create, "2" = modify, etc. (I can see the list at PFCG, adding the auth. object to the PFCG profile).
I notice only std partner function or partner category works with this object. I sent a message to sap support, and they confirm that, so if your user has Z partner funcition or category it is not possible to do that.
Summary, your user must be present in the partner list of the document, and they must have a partner function or partner category std. It is possible to set together both values PARTN_FCT and PARTN_FCTT, but I think it is not necessary.
The easy way to do that is, user who will be able to access the document, must be the employee responsible.
This help is very usefull
http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm
Regards,
Lalas
ps.: As you should know, only one partner function must have partner category Employee Responsible, in the partner det. procedure, otherwise, you will get error message in your application.

Authorization Check in Business Transactions in CRM 2007

Hi everybody, I have a problem whit the authorization check in CRM 2007.
This link help me to follow the steps
http://help.sap.com/saphelp_crm60/helpdata/en/e9/b29a39e7aee372e10000000a11
I follow this steps:
1.- Created a new single role on the PFCG
2.- On the Menu tab add the transaction BSP_CRMD_BUS2000108 (Trax for LEADS)
3.- On the authorization tab create a new profile and in the authorization data set the values for CRM_ORD_OP: PARTN_FCT 00000012, PARTN_FCTT *, ACTVT '02,03
4.- Generate the authorization.
5.- Set my user "TESTUSER" on the user tab
6.- Save the profile
Then, I login to CRM whit TESTUSER and I see all the leads. I miss something, what could be the problem ?
Thanks for your help

Hi Shaji, Pankaj and Jushan, thanks four your answers.
I still have the same problem, I want to see only my leads that I´am the responsible, after I generated the authorization and assign the role to my user from tcode PFCG and SU01, I logout and login again and no changes, I still see all the leads.
Another test I made, I changed the authorization data and set the values for CRM_ORD_OP: PARTN_FCT , PARTN_FCTT 0008, ACTVT ' (person responsible) and the results was the same, see all the leads.
How works the User Comparisons and how can I check for errors in my pfcg role ?
Thanks for your help.

Configurations required for PME and SCE in SAP-CRM 2007

Hi Friends
How to configure the PME and SCE in SAP-CRM 2007.
If u have any documentation avilable for those two topics regading the implementation of e-Commerce application.
Waiting for ur reponse..
Regards
Satish.

Hi Mia,
Authorization group is available in the old versions and basically this help in defining new authorization groups and you can define what can be done with these authorization groups as what can be edited and what cannot be and this is done on SPRO. These authorization groups are entered in the authorization group and the user who has this authorization object will be able to work on the account.
So the business role in CRM 2007 has a PFCG role and the authorization profile that you created are assigned to the business role and users are assigned to the business role.
There are also few authorization objects to maintian the BP relationship and see if you can use these combination to check if it meets your requirement.
Hope it clarifies and if useful please reward points
Thanks
Srini

CRM 2007 MClient Authorizations

Hello All -
I am new to CRM 2007 Mobile Client tech.
I am looking for your help in authorization's with respect to MC
Thanks in advance.
VJ
Edited by: sapsec vj on May 25, 2008 11:30 AM

Hi,
the following link in the SAP help portal will surely help you:
[http://help.sap.com/saphelp_crm60/helpdata/en/06/f6248c39694225a9d0ab59155a1ca8/frameset.htm]
Regards,
Wolfhard

What are the steps for adding a new field to the ST for CRM 2007?.

Yeah, I know it's a basic question. I'm fairly familiar with CRM 5.0 but 2007 is new to me and there a good few changes.
If I need to add a new field (probably with some processing to set its value) to the Service ticket what would be the steps I need to take to achieve this in CRM 2007?.
Your help would be much appreciated.
Jas.

Are we talking about the EEW Business objects displayed in the EEWB as there is no business object called 'CRM OPPORTUNITY', but there is one called 'OPPORTUNITY'. Just wanted to make sure I was on the right track.
So, as I need to change the service ticket it would mean that my transaction type will be service request,or whatever the shorted value is, is that correct?.
I can see the transaction types in table CRMC_PROC_TYPE_T, although it looks like I need to pick SRVO (Service order) at a guess, and if this is right I'm looking for the EEW Business object to match. But it feels like guesswork to me. For example, I could choose EEW Business object 'SERVICE_TRANSACTION' which has an Extension type of 'CUSTOMER_H', or I could choose EEW Business object 'SERVICE_CONTRACT' or 'SERVICE_CONFIRMATION', although the last is unlikely. But, my point is there is so much open to interpreatation, and I'm expecting it to be more exact. Perhaps I'm just missing something.
Jas.
Edited by: Jason Stratham on Sep 4, 2009 2:30 PM
Edited by: Jason Stratham on Sep 4, 2009 2:39 PM

Error while building B2B for CRM 2007

Hi All
I am trying to make few changes in B2B application for CRM 2007.
I have created projects for crmisawebb2bsap.com and crmhomeshrextsap.com
But whenever I try to build anyone of them.
There is a error.
Build log -
Development Component Build (2009-07-28 12:14:18)
Component name: crm/b2b_2
Component vendor: sap.com
SC compartment: sap.com_SAP-CRMAPP_1
    Source code location: http://xxx/sap.com_SAP-CRMAPP/dev/inactive/DCs/sap.com/crm/b2b_2/_comp/
DC root folder: C:\Documents and Settings\.dtc\4\DCs\sap.com\crm\b2b_2\_comp\
DC type: J2EE
DC subtype: Enterprise Application
DC Model check:
          [dcmake] All used DCs are available locally
          [dcmake] ERROR: Check for used DCs failed: Cannot build because used component is broken: sap.com/crm/isa/web/b2b( sap.com_SAP-SHRWEB_1)
          [dcmake] Build failed with errors.
Please advice me how to proceed.
Thanks
Pratyush

Did you find the issue? I'm trying to install binutils and the gcc toolchain on my laptop. I was able to get it to work (randomly) on my desktop a year ago (http://nakedproof.blogspot.com/2012/09/ … linux.html), but the same steps aren't working anymore.

FAQ: User Interface Guidelines for CRM 2007 are now available

The CRM UI Concept Team has made the UI Guidelines for CRM Web Client User Interface (CRM 2007 UI) available to the BPX community:
This document provides an overview of the on-premise as well as the off-premise versions of the SAP CRM Web Client User Interface (UI). It contains the properties and principles of the SAP CRM Web Client UI that are already committed and available. For planned features, refer to the corresponding specification documents.
The information in the guidelines starts with general topics, followed by details. The sections are organized with high-level topics like Page Types and Navigation Schema first, followed by the consecutive sections describing which building blocks and elements of the UI populate the various pages. A section typically starts with one or more screenshots of a central UI element with a generic explanation. The subsequent sections explain the detailed aspects of each element.
We hope that you will find this information useful.
Enjoy the new CRM UI! [UI Guidelines for CRM Web Client User Interface (CRM 2007 UI)_ |http://www.sapdesignguild.org/resources/CRM-UI-Guidelines-Customers.pdf]
Edited by: Zhaojie Liu on Jun 10, 2009 10:08 AM

Hi,
not sure why your download stops.. you can also try to download via this link: [http://www.sapdesignguild.org/resources/CRM-UI-Guidelines-Customers.pdf|http://www.sapdesignguild.org/resources/CRM-UI-Guidelines-Customers.pdf] (Document is 17,4MB of size)
Here the guidelines also have been posted together with an article about the CRM 2007 Web Client UI.
Hope this helps
Best regards
Ingo

Authorizations for BP in CRM 2007

Similar Messages

Maybe you are looking for