Authorizations for Opportunity searches in CRM/EP?

Need help restricting user results in Opportunity searches.
Our authorizations scheme defines users by their sales group, but when doing searches in CRM/EP User 1 can see results for users 2 and 3 when doing an opportunity search which are defined outside of user 1's sales group. Does this require any additional config enhancements such as Account or Territory management?
Does this need to be solved by authorizations at field level, or is there a table where these restrictions can be maintained? So far I have been trying to restrict values via CRM_ORD_LP and B_BUPA_BZT.
Not sure if this is the correct forum to post in, if not, is there a forum on here specifically for CRM Authorizations or configuration?
<removed_by_moderator>
Edited by: Julius Bussche on Aug 7, 2008 3:10 PM

Hi Ram,
The way we ended up resolving this was by adding the authorization object B_BUPA_ATT to each sales user role. Each user had a secondary role which defined their particular sales group in the org model.
It involved some programming (which required an outside resource) on our development side, but it worked.
We basically had the consultant write code to perform a check against custom Z values in the AUTHTYPE field, and then the variables were the data placed in
the AUTHVAL1 and AUTHVAL2 fields. And obviously ACTIVITY was whatever the specific user was allowed to do with items in that sales area (postal code, country, etc)
SAP's preferred solution is something called ACE which creates an extra layer of authorizations, however we didn't have the time and resources to properly implement that. You may want to look into that if you have the time.
Hope this information helps!

Similar Messages

Authorizations for formatted searches?

Hello experts,
I have created a simple formatted search so users select from the list the country of origin of a batch.
Currently, they get an error message.
Do you know which authorizations I should give them so they can use that formatted search query?
Many thanks

Hi Pam,
In Authorisation window for the particular user who is facing the error.
Navigate Admin > System initilisation > Authorisation > ( Select ) >
Reports --> Query Generator --> Execute Non - Select SQL Statement and give Full Authorisation.
Is the User now able to execute FMS ?
Regards,
Rakesh N

Authorization for Attribute Set in CRM

I saw the authorization field 'Edit' and 'Assign' in attribute set in CRM (i.e transaction : CRMD_PROF_TEMPL)
Can someone explain to me what does it mean ?

Hello,
first of all welcome to SDN. You will find a description how to use this fields in the CRM Documentation: <a href="http://help.sap.com/saphelp_crm50/helpdata/en/2b/59dc49c50911d3b29b0050da3ee986/frameset.htm">Working with Attribute Sets</a>. Have a look at the second last paragraph.
Regards
Gregor

Back Button for Custom Search Component CRM 7.0 Webui

Hi Guys,
I have developed Zworklistsearch component (WEBUI) for the service order header and item level search.
The component will replace standard worklist search in the worklist Menu (Standard component CRM_BT_TRANSINB).
The Component is having following parts
1. Search option (Selection box with option header level search and item level search)
The search option is binded to the component controller. When the search is loaded the default search type is header.
2. Search view fields
BOL objects for both item level and header level search has been created. However both the search views are referring to the same Z structure.
When the search is loaded default search view is header. The search view is loaded based on the search type selection by triggering outbound plug.
Both the search views are binded to the same component controller
3. Saved Search
Used standard Component SavedSearchRegistration.
4. Result view
Both item and header result views BOL objects are created.
The zworklistsearch object has been replaced with the standard transaction inbox search. However, the problem is with the navigation.
In case of header search type when I navigate to the service order from the header result view and when I hit back button the search view selection is retained.
However, in case of Item search type when I navigate to the service order or service order item and when I hit back button the search view selection is not retained.
The search view loaded on the component is the header search view.
Also when I execute the saved search, Component is opened in a new window (not in the worklist window). And If I navigate to the service order and hit back button, the worklist view is not displayed.

Hi,
Refer to this thread
You need to write breadcrumb methods.
[Re: Advanced Search Field Hiding]
[Re: "Back"-Button History in Z*Window]
-Satish

Custom search criteria for employee search in CRM Web UI

Hi,
I currently have some functionality in an implementation of enhancement spot BADI_CRM_BUPA_IL_SEARCH_EXT so that I can influence what search results are returned in component BP_HEAD_SEARCH.
It seems that this BADI is not called when looking for employees in BP_EMPL_SEARCH component.
Does anyone know where i can implement similar functionality as i have for the corporate account / individual account search, is there another BADI for this?
Cheers
Matt.

Hi Matt,
If a BADI is not getting called but you need it to be called then you can also call it in your custome code on component method.
Regards,
Suchita

Maintenance of Authorization for transactions in CRM 5.0.

Hi Experts .
We are using CRM 5.0 with PCUI.
TheBusiness requirement is to maintain authorization for own transactions.the users who is involved in transactions should only be authorized to Open & see the transactions.Other users who are not involved in partner function like "Assigned to" & "Account responsible " should not be able to open & see the transactions like Activity .Lead , Opportunity ,Sales orders.& Service orders.System should give error message saying no authorizations.
We tried with below authorization objects to achieve this
CRM_ORD_OP (your own documents)
- CRM_ORD_LP (organization levels)
- CRM_ORD_PR (transaction type)
- CRM_ORD_OE (sales area/service Org).
- CRM_ORD_RL
- CRM_ORD_RS
But still system allows to open transaction belong to others.
Is there any alternative to control this.
Helpful answers would be rewarded max points.
Thanks in Advance.
Regards,
Basavaraj Patil

Hello
in order to check authority object CRM_ORD_OE,
CRM_ORD_OP and CRM_ORD_LP must not give authority. Please see
online documentation for detailed information:
http://help.sap.com/saphelp_crm40/helpdata/en/e9/
b29a39e7aee372e10000000a11402f/frameset.htm
Under the chapter 'Process Flow of Authorization Check in Business
Transactions' you will find detailed explanations.
I hope that I could be of help with that information.
Gerhard

Opportunity Search for Status NE (is not) is not supported by SAP Standard

Hi experts,
due to wiki entry
Searching for business transactions in the web ui using the Status criteria - CRM - SCN Wiki
the opportunity search for a status with operator NE is not supported.
Is there any SAP proposal for an appropriate workaround?
Thank you and best regards
Vanessa

Hello Vanessa,
This is a fresh development for my current customer which is not yet completely tested. The last customer had the same requirement, created an OSS-message for it, SAP told him in standard it is not possible and gave up. I think I already heard that too many selection parameters are not supported but I haven't seen it yet in our project. But I have seen that with mabye 100000 excluded transactions there is a time out.
The alternative would be to create a sub-class of the GENIL-class (I think this is CL_CRM_QOPP_RUN_BTIL in your case - search for CL*OPP*IL* ) where the SQL-statement is triggered and redefine the relevant method (which is normally GET_DYNAMIC_QUERY_RESULT) and enhance the SQL-statement. Somewhere is customizing you have to replace the original class with the new class afterwards but right now I don't know where. I have not yet done this from scratch and I need to investigate this a little bit further.
The second alternative would be to modify the select statements in a BADI. I guess it is CRM_BADI_RF_Q1O_READ. But there I only the the possibility to change the STATUS_COMMON-criteria to OBJECT_ID criterias as still STATUS_COMMON NE is not supported in the SQL-statement of the GENIL-class.
Best regards,
Thomas

Duplicate check on search term for BP creation in CRM

HI,
I want to do a duplicate check on search term for BP creation in CRM.
i found one BADI ADDRESS_SEARCH. But the method address_search is not getting called.
Is there any other BADI available? how can I handle this issue?

hello,
BP is BDT (Business Data toolset) enabled (you can check it by adding break point in FM BUS_PBO and executing BP transaction). You can add your check directly to standard view (the check will be executed each time when user pushes enter) or you could add you check to appropriate action (during saving etc.) there are number of actions which you could use it depends on your requirements. You can find a lot of info about BDT (if you are not familiar) in Wiki.
br,
dez_

EDMS: 'Missing authorization for this functionality' when searching user

Hi,
I've activated ALC authorization for DMS. In EDMS, when trying to add an user to a DIR with search function an error occurres as below.
'Missing authorization for this functionality'
BTW, the user has contains SAP_ALL profile. It can't be any authorization reasons.
Regards,
Yemi

Hi,
authorization checks will not happen if the search help from sap-gui.I
think the problem is releted to missing implementation of "check
function module" from your side. If the search help is linked to a
"master data table" (type A) a check function must be implemented to
check the permission of the user.
This function module is read from table BAPIF4T. Please
check the following link: http://help.sa
p.com/saphelp_nw04/helpdata/en/a5/3eca044ac011d189
4e0000e829fbbd/content.htm
http://wiki.sdn.sap.com/wiki/display/PLM/Object+Link+search+in+EasyDMS
Regards,
Hari

Error on executing See Also search - no authorization for resource

Hi there,
i have installed TREX 6.1 SP 13.
It searching fine but only two bugs - 1)when i'm clicking on "See also" link in search result page - i'm getting error:
"Search Failure
Error on executing See Also search - no authorization for resource
An unexpected severe error occurred during the search call. If the situation persists, inform your system administrator."
2) when i'm clicking on "HTML version" - sometimes i'm getting "No valid content found in store" error message, but it depends on index.
Any ideas?

Hello Kwong,
thanks for responce. Only that i have in log is:
#1.5#000F20F6A8BD006D000000060000253400040016981EA972#1125996948354#com.sapporta
ls.wcm.control.util.search.SearchSessionBuilder#sap.com/irj#com.sapportals.wcm.c
ontrol.util.search.SearchSessionBuilder#Administrator#41230####04c0c6201eb411dab
6f0000f20f6a8bd#SAPEngine_Application_Thread[impl:3]_0##0#0#Error##Plain###Error
on executing See Also search - no authorization for resource#
Moreover, i'm working under administartor with all rights.

Authorization Policy for only search users

Hi all,
I need create a custom authorization policy for only search all users in create request. The users can't see any profile information of others users.
Anyone can help me ?
Regards,
Joel

ViewUser Admin Role can search and view users by default. Since the OES policies for this admin role has action as ViewSearch Entity. In your case, you can write EL's to hide Admin tab which will hide Admin ltab links based on current logged-in user profile.
http://docs.oracle.com/cd/E27559_01/dev.1112/e27150/uicust.htm#BABHBFGH

Saved search influences standard search for opportunity

Hello,
the search for opportunity (BT111S_OPPT/Search) i configured that the 7 most important search criteria are visible.
Now we created a saved search for opportunity where only 3 fields are used. This saved search works fine. But if i open later in the day again the standard search also only this 3 fields and not the configured 7 important fields are visible.
How could i change this strange behaviour?
Thanks a lot.
Kind regards
Manfred

Hi Manfred,
looks like your implementation is not clean. The view will keep the configuration as long as it is instantiated.
A simple check is in the view or window controller which Inbound Plug is called or if there is navigational data (the saved search data) supplied. The way to get the standard configuration from the config tool is shown in the DO_PREPARE_OUTPUT of CL_BSP_WD_ADVSEARCH_CONTROLLER.
Maybe play around with the variable INIT_QS...
cheers Carsten

How to config SAF for searching in CRM

Dear Sir,
I would like to configure SAF for seach the Knowledge search in CRM, Do you have any step or manual ??
Thank you and best regards,
Vimol

i can find the solution

ECC6: Authorizations for GOS

In ECC6, I should give two different levels authorization into generic object services Toolbox.
I have two type of users:
1. Administrator
2. Accountant
The Administrator should be able to create, edit, display and delete notes.
The Accountant should be able just to create and display notes.
Administrator users were given the S_OC_ROLE athorization object .
Accountant users were given the S_GOS_ATT authorization object, though this doesnu2019t work since the accountant users are still able to edit and delete notes.
My question is: how can I remove the edit and delete authorizations for accountant users?
Thanks,
Kind Regards

A concrete scenario I have to deal with:
The scope for all business partners and transactions should be limited to central Europe.
The relevant field for this authorization is the id (number range) respectively the business partner grouping.
- I would use ACE rules to filter the relevant business partners by their ID or grouping and relevant transactions by their account-assignment
- I would set up ACE rights to limit access for the actions read, write and delete
- to handle the create authorization, I have to define a PFCG role and limit access to certain CRM components
The user should be allowed to read Corporate Accounts,
to read, edit, create Contacts,
is not allowed to deal with Opportunities,
is allowed to create, read all activities and to read, edit, delete own activities (if he is the creator),
is not allowed to deal with any report or pipeline performance.
- ACE role/right to read Corporate Accounts
- PFCG role to restrict create access for the BP_HEAD component
- (ACE role/right to limit search results for opportunities)
- PFCG role to restrict create, search, overview access for the BT111M component
- Business role without Work Centers or Logical Links to opportunities
- ACE role to limit access to read activities
- ACE role to limit access to read, edit, delete activities which the user has created
- PFCG role to restrict access to all pipeline performance components
- remove PFCG roles for report access (e.g. SAP_CRM_OR_USER)

How to view specific assignment block information for opportunity

Hi everyone,
We have the following requirement from our users:
1) Users will specify a selection criteria to view only specific opportunities on the opportunity search screen
2) Users will then select multiple opportunities from the result list
3) Users want the ability to choose the specific assignment block information they want to view(opportunity header, sales team, partners etc)
4) We should then display this in some form so that only specific AB information is available to the users
As I am compartively new to the SAP world, I would really appreciate if some one could guide me here. Currently a solution is in place where users can launch a report which opens a new excel sheet which has information for about 7 assignment blocks(this is static and users cannot choose which ones they want). We essentially need a solution which can interact with our CRM system and give the users the ability to choose which AB information they want to view and then output this information in a printable format.
I have been told that we can use Crystal reports to accomplish this but I am not very sure as these are primarily analytics tools? It would be great if anyone can provide some pointers.
Regards,
Abhinav

Hello Madhusudan,
In your overview page controller you have to overwrite methods: DETACH_STATIC_OVW_VIEWS (this is where you remove your assignment block from the page dynamically), REATTACH_STATIC_OVW_VIEWS (this is where you can put your assignment block back on the page). Both methods have a returning parameter where you can specify which assignment block you want to detach/reattach.
Hope this helps.
Best Regards,
Yevgen

Authorizations for Opportunity searches in CRM/EP?

Similar Messages

Maybe you are looking for