Business Role assignment now working as Expected

Hi All,
We have a User A, B and C , all these users have Business Role X, when these users were logging in they were gettings screens as per the configuration.
However now all of sudden Only User A ,though still has same Business Role X , is getting different Work centers,Logical links Mostly standard(Claim management, worklist, calendar,Email Inbox) .
User B and C who have the same business role are getting correct UI screens.
We are unable to find what went wrong all of sudden.
Thanks in advance for your suggestions
Regards,
Chandu.

Chandu,
If the CRM_UI_PROFILE is set to some UI Profile, this takes more priority(than the UI Profile assigned to the Business Role)
and shows the Navigation Bar and Work Centre configured for this UI Profile.
The normal Business Role configs wont work at that time.
Remove this entry and see, it will solve the issue.
Regards,
Masood Imrani S.

Similar Messages

  • Another FPN Thread: Remote role assignment not working

    Hi all,
    We have successfully implemented FPN for use in our ESS and BW environment and we are experiencing very little problems with it. We now want to start implementing it for our eRecruitment and SRM systems (as producers). For some reason we are not able to use the Remote Role Assignement functionality.
    We have set up trust for the systems and use SSO.
    Connection test for the producer is successfull.
    We can see the Producer content in the pcd on the consumer.
    Server times are the same.
    As far as I know I have correctly set permissions on producer and consumer.
    Possible cause: We are in the process of upgrading our consumer Portal to NW 7.0 SPS15 and have encountered some problems. The system is partially upgraded, so some components are SP15 and some others are still SP13. This is currently under investigation by SAP. Can this be an issue as our producer portals all are still on SP13?
    I hope to hear from you soon. Please ask if you need any screenshots. Thanks in advance.
    Best regards,
    Jan Laros

    Hi Jan,
    if remote role assignment not works, you can also use remote delta links. I only work with remote delta links because i have more options   and a better performance.
    If your connection works you can go to Content Administration ->Portal Content-> NetWeaver-Content-Producer. Hier you can see your remote system. Now you can copy the role and add it to your portal-content.
    If you can not see the content make sure that you have the same user  on both sides also check the premissions on the portal-content of your remote system. To test the connection it is easier to add Everyone group to the content of your remote system.
    regards,
    Sharam

  • SAP CRM 2007 Business role assignment

    Hi all,
    We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
    1- We create a PFCG role : "pfcgrole1"
    2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
    3- assign the user to the PFCG role "pfcgrole1"
    We have two cases :
    CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
    RESULT : The user logs in  to CRM, the user gets error message  "Logon is not possible because you have not been assigned a business role"
    CASE 2:The user is not assigned to any  position in Org management.
    RESULT : The user logs in to CRM, everything works fine
    my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
    Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
    Thanks in advance.

    Please review these old threads first:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    There is a lot of technical background on how business role to PFCG role assignment works.
    Thank you,
    Stephen
    CRM Forum Moderator

  • Business role customizing not working in crm 2007 web client

    Can someone tell me what services need to be activated via sicf for business role customizing to work in the Web Client under the Administration component in CRM 2007.  I have everything else working in this are eg surveys, document template, fact sheet configuration, view configuration but the business role customizing when selected just opens a blank screen
    Thanks in advance
    Eddie

    Hi Eddie,
    The SAP CRM 2007 Master guide suggests enabling all the SICF services in the SAP namespace.
    We had some script errors in CRM UI, but once all the SICF services were activated, they simply disappeared.
    The IDES demo systems are also set up this way, so you can try doing it.
    Regards,
    Padma

  • Organizational Model - WebUI business role assignment

    We have created the organizational model in our system where we have the levels that are tied to a specific business role.   We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment.   I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
    Any help would be greatly appreciated. 
    Thanks,
    Darcie

    Hi Robert,
    maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
    for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
    for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
    pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
    regards.

  • Business role assignment get lost

    Hello *,
    from time to time single users report logon problems due to missing business role assignment.
    In these cases business role was assigned via user in tx su01 directly. Whenever it happened the affected user itself is shown for last modifier of user record. But the users of course are not authorized to edit this data.
    We assume that maybe the personalization in web ui could be the reason but up to know the behaviour was not reproduceable.
    Does anyone know this issue?
    Kind regards
    Thomas

    Hi Thomas,
    Sorry but maybe I've explained myself poorly. You said that business roles that were missing are normally assigned directly in SU01. Then, in order to try to understand how they are remove, in SU01 transaction there is a functionality that allows you to see the change history for every add/removal of a role. This will tell you the user that performed the action and which tcode he used.
    Check this functionality that it's available as a menu option in SU01. Maybe it can give you some good clues about what's happening.
    Kind regards,
    Garcia

  • Business Role Assignment to User by Organizational Model

    We have created the organizational model in our system where we have the levels that are tied to a specific business role. We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment. I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
    Any help would be greatly appreciated.
    Thanks,
    Darcie

    Hi Robert,
    maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
    for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
    for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
    pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
    regards.

  • Issue regarding Business Role assignment

    Hi All,
    1.
    I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
    In the infotype Business Role I have assigned IC_AGENT (standard) business role.
    IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
    But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
    2.
    Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
    Now when I run the application everything is visible (telephony, navigation bar and workarea).
    Why is it not visible in first case?
    I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
    Regards,
    Ashish

    Hi Ashish,
    As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
    PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
    PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
    In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
    Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
    In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
    This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
    If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
    Refer pg 56 in CR580, it will clear your doubt.
    Thanks & regards,
    Suchita

  • Business Role Assignment

    Hello All
    Where do we assign Business Roles to Org Unit / Position. Can somebody please provide the navigation.
    I am in training and actually I want to get the business role created by me displayed when I log to CRM Web Client. How to do ...
    Thx
    DM

    Hi DM,
    by using tnrx PPOMA_CRM, Click on the Position which you have created. And then click 'GOTO --> Details Objects' on the top of the GUI page.
    Select the tab Business Role and then create a new infotype.
    Choose your Business Role in the Field 'Business Role' and save.
    Now you have assigned your Role with your org.
    Let me know in case you need any more specific explanation.
    VS
    Edited by: VS on Aug 7, 2009 2:42 PM
    Edited by: VS on Aug 7, 2009 3:06 PM

  • Refreshing business role assignment to org. structure

    Hi Experts,
    I am trying to change the assignment of business role in org. structure but the changes are not coming into effect.
    i.e. initially i have assigned servicepro to my org. strcuture & i am getting the relevant screen on login into WEB UI.
    Now i have changed it  to marketingpro still i am getting the same screen.
    Can any one of you suggest that how i can refresh such changes.
    & can anyone also suggest how i can assign business role directly to users.
    Thanks & regards
    Nanda Kumar

    Hi Nanda,
    I assume the reason for Business Role change not refelecting can be
    1. A Profile assigned in SU3 or
    2. You are trying to open the Web UI from same browser session using a new tab in IE7 (internet explorer), you need to create a new browser session.IE7 tabbed browser does not recognize the changes in SAP GUI, you need to open in a new browser.
    Regards,
    Masood Imrani S.

  • FPN - error trying to lookup object - remote role assignment not working

    Hello everyone,
    We have implemented a Federated Portal Network connection in our landscape between our portals.
    We use only remote role assignment functionality.
    Everything was working fine, but since 2 days we encounter the following error in the Default trace.
    Error trying to lookup object: alias: <role name>
    It is possible to open the producer portal in the Portal Content Administration and also searching for the Producer portal roles is possible in User administration. But when we assign the remote role the tab is not displayed in the portal only the above mentioned error is shown in the default trace. Our portals run SP 12 and BI Java SP14.
    Is there a solution or workaround for this issue ?
    Martin

    Hi,
    I have the same issue as you, I cannot see role tabs in Consumer portal and I get the same error in the defaulttrace as you.
    What did you do to resolve this issue?
    Many thanks
    Gordon

  • Security-role and security-role-assignment not working in WL7.0

    Hello all..
    Some EJB components that worked fine in WebLogic 6.1 no longer work in
    WL7.0. It has to do with the security-role and security-role-assignment
    descriptor elements no longer allowing anonymous users to be included in the
    authorization for a bean.
    For example, in WL6.1 placing these items in ejb-jar.xml:
    <assembly-descriptor>
    <security-role>
    <role-name>Employees</role-name>
    </security-role>
    <method-permission>
    <role-name>Employees</role-name>
    <method>
    <ejb-name>CustomerEJB</ejb-name>
    <method-name>*</method-name>
    </method>
    </method-permission>
    and mapping WebLogic default users to this role in weblogic-ejb-jar.xml:
    <security-role-assignment>
    <role-name>Employees</role-name>
    <principal-name>guest</principal-name>
    <principal-name>system</principal-name>
    </security-role-assignment>
    worked fine for clients creating their context using a simple
    InitialContext() constructor without specifying SECURITY_PRINCIPAL or
    SECURITY_CREDENTIALS. These users were basically "guest" to WebLogic, and
    the security-role-assignment element above told WebLogic that "guest" was in
    the Employees role for purposes of this EJB archive.
    Worked in WL6.1, no longer works in WL7.0. Client receives typical
    permission exception:
    java.rmi.AccessException: Security violation: insufficient permission to
    access method 'create'
    If I explicity connect as "system" things are fine, or I can create a new
    user in the default realm in WebLogic, put a matching <principal-name>
    element in the section above, and connect as that user. Note that if I leave
    off the <security-role> section completely, or set the required role name to
    "everyone", the anonymous access works fine. Apparently the anonymous user
    is a member of "everyone" behind the scenes even though "everyone" does not
    appear in the realm list of groups or roles.
    So, my question boils down to this: Is there a "magic" username in WL7 like
    "guest" was in WL6.1 that can be mapped to the required role name, or must
    every client connection use a true weblogic-created user with appropriate
    role assignments used to map it to the required role name.
    -Greg
    P.S. Note that none of the EJB examples provided with WL used
    <security-role>..
    Check out my WebLogic 6.1 Workbook for O'Reilly EJB Third Edition
    www.amazon.com/exec/obidos/ASIN/1931822468 or www.titan-books.com

    Below are the screen shots for PFCG:

  • Role assignment not working

    Hi everyone,
    I am trying to assign different roles to different users for GRC - Risk Management 10.0; however it seems like standard roles don't have any affect on type of activity. I have maintained various levels of roles (e.g. risk owner, risk expert, risk manager, etc) using PFCG and assigned almost every role to the users; but it doesn't give them the authorization to create or edit anything, they can only display.
    The only workaround for this was assigning a role with the authorization object GRFN_USER (with 02 Change value enabled) or assigning SAP_GRC_FN_ALL (Power user role which also contains object GRFN_USER). However this would allow users to do "anything" they want which obviously isn't what I seek.
    I have tried changing customization options such as Maintain Custom Agent Determination Rules and Maintain Entity Role Assignment, it hasn't solved anything so far.
    I urgently require your assistance on this issue. Thank you.
    Regards,
    Seckin

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • ABAP centered role assignment not working

    I have been trying to implement ABAP centered role assignment for our users but not really having much luck in gettng it to work. I've been trying to make sense of it by using [the help guide|http://help.sap.com/saphelp_nwmobile71/helpdata/en/d2/3e3842b23d690de10000000a155106/frameset.htm] but I must be doing someting wrong. Here are the steps that  take.
    1. Create a single ABAP role - A single role with no menu or authorizatons
    2. Create a UME Group - I name the group exactly the same as the ABAP single role from the previous step
    3. Assign UME Group to Portal Role
    4. Assign mapped user to ABAP role
    Supposedly the ABAP role assingment is supposed to reflect through to the UME group membership so the portal user then sees the associated portal tab.
    Can you enlighten me?
    Thanks in advance

    Hi,
    I 'm facing same kind of problem.
    Case 1:
    I tried with:
                      Assigning users to group (abap role) which didn't worked.
                      Assigning UME Role to group (abap role) which worked. Then i assigned the user to the UME Role, but the user is not getting the backend authorizations.
                      Assigning the portal role to the group (abap role), then when i assiged a user to the abap role from R/3 automatically the user is getting the portal role.
    How can i do the same from portal?
    Case2:     
    While distributing the portal roles to the ABAP system (System Administrator -> Permissions -> SAP Authorizations), the status is showing as "Role transfer compleated". but when i checked from the R/3 transaction WP3R, there are no portal roles.
    Why are the portal roles not getting transfered even though the status is green?
    Mr.Chowdary

  • Business Role assignment to user

    Hi all,
       I am learning about the concept of  business roles in CRM. In the forum discussions I see that the business role has to be assinged to the user even though we assign the PFCG role (linked to the business role) to the user. Like SU01 where we assign pfcg role to the user, what is the transaction code to assign the business role to the user.
    Thanks.
    Neha.

    I'm going to chime in and say this question has been discussed to the detail in this forum.  If you would have done a search you would have a pretty good discussion on this topic.
    Re: Reg: Business Role
    That thread covers all your options in detail.
    Thank you,
    Stephen

Maybe you are looking for