Business role not assigned..

Hi,
I am not able to see the webclient UI and it shows message " logon is not possible because you have not been assigned to a business role.
Please suggest me the steps need to be done to get the webclient UI for user.
Regards,
Nex

Hello Nex,
Do the following steps:
Txn:PPOMA
Click on Position and expand.
Click on 'Search Term' With Name* and Execute
You would see the list of Business Roles.
Double click on any of these roles like SALES PRO or SERVICE PRO or TPM PRO .
On RHS, Task Assignment , Right Click and select 'Assign'
Choose Holder- User and give your user name and save.
Or
In Txn:SU01 ,under the tab 'Parameters, you can give
Parameter ID CRM_UI_PROFILE
Parameter Value Role Name and Save.
Hope this helps!
Best Regards,
Shanthala Kudva.

Similar Messages

Business Roles not getting refreshed in UI

Hi,
When I log in to the Web UI, I can see all my roles.
Now when I delete a Position/user assignment in the org model, I would assume
not to see that role when I log on to the BSP application.
I'm completely coming out of the application to reflect my changes.
My questions would be
1. How to delete a business role
I've tried removing the complete position itself but I can see the roles
I even tried clearing the browser cache but not luck, I'm using Firefox.
2.I wanted to try a different browser, can somebody tell me how to change the browser
3. For the other roles when I login I get an Interaction centre page with most of the screen blank.
I've checked all the links
I did try other solutions mentioned in other threads.
I'm new to this version as well.
I'm following c04 and CR580.
Please do tell me the missing config.
Another point is that I've SAP_ALL role
Points will be given
Thanks in advance
Regards
Deepak
Edited by: deepak nair on Oct 28, 2008 3:39 AM

Hi Deepak,
1. Did you copied SALESPRO business role to ZSALESPRO business role?? If yes, delete ZSALESPRO business role and
again copy SALESPRO business role to ZSALESPRO1 - reason may be by mistake you have copied IC_AGENT or IC_MANAGER to ZSALESPRO.
2. To make your life easy with PFCG roles -
2.1. I suggest you to copy standard Sales Professional role to "Z" role
(eg: SAP_CRM_UIU_SLS_PROFESSIONAL to Z_SAP_CRM_UIU_SLS_PROFESSIONAL) and generate the profile.
2.2. Add role SAP_CRM_UIU_FRAMEWORK (copy of it eg: ZSAP_CRM_UIU_FRAMEWORK)
2.3. Add these roles to your User along with SAP_ALL (or Z_SAP_ALL) and SAP_NEW
3. Add your User to Employee
4. Add your Employee to the Position in Org. Model
5. Select PFCG Role ID = Z_SAP_UIU_SLS_PROFESSIONAL in your business role (ZSALESPRO1)
6. Extend your Position with Business Role (PPOMA_CRM -> double click on your position -> select GOTO -> Detail Object -> Enhance Object Description) -> highlight business role -> click on create info-type -> select your business role (ZSALESPRO1) -> save
7. Clear the browser cache (delete temp. internet files) and delete cookies
8. Log on to WEB UI with your user and password...
I am sure that, if you follow this - you will active WEB UI without any problems. If still you have problems, let me know....
Cheers,
Peter J.

Business role assignment get lost

Hello *,
from time to time single users report logon problems due to missing business role assignment.
In these cases business role was assigned via user in tx su01 directly. Whenever it happened the affected user itself is shown for last modifier of user record. But the users of course are not authorized to edit this data.
We assume that maybe the personalization in web ui could be the reason but up to know the behaviour was not reproduceable.
Does anyone know this issue?
Kind regards
Thomas

Hi Thomas,
Sorry but maybe I've explained myself poorly. You said that business roles that were missing are normally assigned directly in SU01. Then, in order to try to understand how they are remove, in SU01 transaction there is a functionality that allows you to see the change history for every add/removal of a role. This will tell you the user that performed the action and which tcode he used.
Check this functionality that it's available as a menu option in SU01. Maybe it can give you some good clues about what's happening.
Kind regards,
Garcia

GRC 10 BRM - Approve Single Role assignment in Business Roles

Hello,
I want to set up a workflow where any Single Role assigned to a Business Role requires an approval of the Single Role Owner.
The thing is that my customer doesn't have a Security Administrator, so what they want is that each Single Role Owner could be aware when their roles are assigned to a Business Role, especially when the Business Role Owner is another person.
Once the Business Role is created, the provisioning would be in charge of Business Role Owners.
Do you know any way to configure this?
Thanks,
Fernando

Hi Claudio - thanks for breaking it down
@ Fernando - for the Role Approval Methodology you need to split your approval out to be based on request type. Claudio has shown this up above already. In continuing his example, where the business role goes to path C - you would then have Path C do a line by line approval based on the single role owners
By using this role approval methodology your single role approvers are indirectly allowing any user who are approved the business role via an access request and that request is approved by business role owner (which is role owner).
As mentioned - you are using two different workflow process ids
Role Build - using BRM to approve the single roles being part of the business role
Access Assignment - approving the user to receive the business role which includes the single roles
Regards
Colleen

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Approver for the application role not working out

Hi,
I have created a role with type application and Approver A, then created a business role with the Approver B and included application role into the business role.
When i assign this business role to a user the only request for approval goes to Approver B and after approval the both application and business roles are assigned. Strangely it seem to skip the Approver A. I did even remove the approver in business role, leaving only approver in application role, still same result - it skips Approver A.
I'm using IDM 8.0.0.1, any ideas why it would skip the approver in the included role?
Thanks!

Thanks for the quick reply. I've tried optional with approval and here is what I found.
It seems I need a combination of the two. My end goal is to have a second level approval, one group would be responsible for approving the business role and the system owners would be responsible for approving the nested application roles. When a user requests the business role, they must have approvals for the business role and all of the nested application roles for their request to be completed.
If the app. roles are required, the workflow automatically incorporate the nested appl. roles in the request but does not require approval for them. If they are conditional with approval, the user would have to submit a second request to get all of the nested application roles. It looks like I need a combination of the two, required with approval.
I need it to behave like it does when you have a role with approver that includes resources with an approver. The role and resources must all be approved before the request can be completed successfully.
I'm trying to see if this is possible through the GUI before I customize the workflow.

Is it possible to automate creation of roles,users & assign roles to users

Respected Guru's,
Is it possible to automate creation of roles according to our functional requierment with the help of SAP IDM.
Futher, i would like to know whether creation and deletion of users along with assigning created roles to the user's can be automated.
Please help me....
Thank you.

Hi Dayananadan,
SAP NW IdM is compatible with your system and uses SAP Java Connector (JCo).
My colleague Steffen Baumann wrote a blog with three parts, where you get some hints and screenshots how to create similar objects to business roles and automatically assign them. Have a look at the last two parts How To synchronize data from SAP HCM to SAP NetWeaver Identity Center using SAP PI (Part II) and
https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/8868. [original link is broken] [original link is broken] [original link is broken] Especially the last topic in the last part shows how to implement dynamic groups. It's not everything covered you will need to automatically create business roles and assign them. To explain this in detail is like writing another blog... If you go through the last two parts of the blog you will know how to modify the jobs my colleage has used for importing HCM data to create business roles similar to org. units.
You can also have a look at /docs/DOC-8983#section6. There you find "Identity Management for SAP System Landscapes: Configuration Guide" and other documents. They help to get familar with the possibilites of SAP NW IdM, but don't mention how to implement your case in detail.
Best regards,
Nils

Pfcg and business roles

hi all,
we have the requirement where we have to create 4 businessroles and out of 4 a manager rolerequires authrization for all 4and customer rep requires authrization . for 3
how to achieve that?
i have crated 4 pfcg id s for 4 roles and assigned it to a business role(manager) which is copied from the standard.
since manager requires 4 roles i created 4 manager roles and assigned 4 pfcg ids
is this the correct approach?
please help out as i was new to crm 2007
thanks
madhuri

The business role is user for customazion of web ui screens, while authorization roles are used for security reasons. So you need 4 business roles only if you need to maintan 4 different types of screens. If not, use just one.
On the other hand I guess you need 4 authorization roles because you want to give 4 different types of authorizations to users.
So, if you need just one type of screen, create one business role and assign it to users simply by using parameter CRM_UI_PROFILE. and authorization role assign via pfcg.
But if you need 4 b roles and 4 a roles that are always in corelation 1:1 then you can do it also as you wrote.

Business Area not coming in FS10N layout.

Dear SAP Friends,
I am working in a client where "Document Splitting" was activated on the basis of "Business Area" from the 1st August,2008. In this client their is four business areas. When I am getting the balance sheet as per Business Area in F.01 every GL shown the amount as per business area & also a some of amount is shown under the not assigned head. Amount under the not assigned is total of document of having no business area.
Now my client wants that all not assigned amount should be distributed as per the business area & not assigned amount will come to zero.The field of business area is "GSBER".
Now for that I am testing it on development. I have selected on document having no business area and updated the table "BSEG" for filed "GSBER" for that business area manually through ABAP. When I am seeing the same document under FB03 the system shows the Business Area correctly which I have given in the table. But when I see the General Ledger balance in FS10N (In layout selected business area column) the same document does not give business area in that business area column. But when I select it for details it shown the business area in that document.
Now my issue is why this is happening ? or is their any another way to do this ?
Because i have to update all of documents of before 1st, August 2008 with no business area .
Please give any solution ASAP & for helpful answer points will be surely awarded.
Thanks & Regards in advance
Sandeep
Edited by: Sandeep on Dec 6, 2008 11:34 AM

Hi,
Touching a cluster table like BSEG thru ABAP is a tricky thing. You would need to work out all linkages to other tables for the data you are touching, would suggest a where used for field business area and update all other tables relevant to the data, like BSI* and BSA*.
For FS10N, the data is not read from BSEG but rather from the totals tables like GLT0.
Cheers

Maintaining WebUI Business Roles in PFCG/Infotype 1263

Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang

Create Business role from workflow

We have problem crating a Business role from workflo in SIM 8.1.0.7. Especially we can not set PrimaryObjectGroup of the newly crated role.
Is there a way to set this parameter or to set the type of the tole to be Business Role not ITrole.
Here is the code for the creation
<set name='roleObject'>
<new class='com.waveset.object.Role'>
</new>
</set>
<invoke name='setName'>
<ref>roleObject</ref>
<s>role1</s>
</invoke>
<invoke name='setAuthType'>
<ref>roleObject</ref>
<s>BusinessRole</s>
</invoke>
<invoke name='setDescription'>
<ref>roleObject</ref>
<s>Test</s>
</invoke>

I was able to create the role by this code:
<set name="rolesvar">
<invoke name='getObject' class='com.waveset.ui.FormUtil'>
<select>
<ref>:display.session</ref>
<ref>context</ref>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
</select>
<s>Role</s>
<s>Template</s>
</invoke>
</set>
<set name='roleObject'>
<new class='com.waveset.object.Role'>
<invoke name='getPrimaryObjectClass'>
<ref>rolesvar</ref>
</invoke>
</new> </set>
<invoke name='setName'>
<ref>roleObject</ref>
<s>BusinesRole1</s>
</invoke>
<invoke name='setAuthType'>
<ref>roleObject</ref>
<s>BusinessRole</s>
</invoke>
<invoke name='setDescription'>
<ref>roleObject</ref>
<s>Test Business Role</s>
</invoke>
<invoke name='setMemberObjectGroupRef'>
<ref>roleObject</ref>
<invoke name='getObjectGroupRef' class='com.waveset.object.ObjectGroup'>
<select>
<ref>:display.session</ref>
<ref>context</ref>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
</select>
<s>Org1</s>
</invoke>
</invoke>
But there Template is a real object which have to be created.Is there a static method for geting an objectClass variable and passing it as an argument to the constructor ??
Edited by: piaggio100 on 2011-10-20 16:13

Dynamic calculation of privileges into business role

hi,
I have a requirement to create business roles containing a dynamic list of privileges. In addition, a costcenter attributes allows to determine the right privileges, within a business role, to assign.
I thought to use dynamic groups so that each time I assign a business role, a calculation of privileges based on costcenter is achieved.
for example:
BR1;FR10;Z_technical_privileges
BR1;FR30;Z_technical_privileges2
This list is often updated that's why I need it to be dynamic.
In the filter tab of the dyn group, I set a request to retrieve the mskeys of privileges (here is mskey of PRIV:ROLE:<sys>:Z_technical privileges & PRIV:ROLE:<sys>:Z_technical_privileges2)
Then I attach the dyn groups to the role (BR1) by setting up the autoassign field in the membership tab of the role.
When I assign the BR to a user, no privilege is provisioned (user already have an account in that system).
Am I forgetting something or doing something wrong?
how can I include the "check" on costcenter attributes?
thanks
Guillaume

Hello Guillaume,
dynamic roles find you the pool of people, that can be used in a business roles. If you attach a dynamic role to a BR, those users will become members of the BR.
You are trying the same with privileges and that's why nothing happens. Because privileges can't become members of the BR.
Are the different lists of privileges, that need to be assigned to users via the costcenter-attribute really changing so much?
You could use the dynamic groups to look for the members of a costcenter and assign those to the BR specific for that costcenter with the privileges added to the BR. That means one BR per costcenter and the privileges need to be changed manually or maybe via a job.
Hmm... where do the new privileges come from? How would you find them dynamically anyway? If you have a SQL statement for that, it should be possible to create a job, that adds the new privileges to the BR and delete old ones.
I don't see a fast and easy way to do this, but I haven't come across a request like this yet, so maybe there is one and I just don't know it (yet ^^).
Regards,
Steffi.

Business Roles and Tasks

Hi experts,
We´re involved in a SAP CRM implementation. We´d need to know if it´s possible to link Transaction Types with a Business Role. This is, when the user goes to create a new task, a window pops up with all tasks: is it possible to limit Tasks by Business Role? Maybe there´s a customizing point where you can define, by business role, the availabe tasks for that business role.
Thanks in advance.
Javier

Hi Javier,
As far as I understand you want to restrict transaction types per business role.
You can achieve this by customizing. You can create a transaction profile in customizing for each business role and assign the transaction types you have created to this transaction profile.You can find this customizing activity in spro transaction.
Then you can assign transaction profile you have created to your business roile by assigning function profile 'transaction profile' to the business role in crmc_ui_profile tcode.
In this way when you login with the business role the transactions you have maintained in transaction profile will only be shown up in the pop up.
I hope this helps yiour requirement. Let me know if you require any further information. Thanks.
Regards
Yogesh

Difference Between Partner function & Business Role

1) What's the difference between Partner function & Business Role?
2) What is BP role grouping??

Hi Jayant,
Partner functions
Partner functions are terms that describe the people and organizations with whom you do business, and who are therefore involved in transactions. For example, when you create an activity, based on Customizing settings, it automatically includes the partner functions Activity Partner, Contact Person, and Person Responsible. Partner functions are always assigned to partner function categories, which are hard-coded in the system.
The system includes commonly used partner functions, but you can also define your own.
Business role
The business role is a role describing the user interface of SAP CRM and displays the CRM functions in the form of BSP applications in the CRM Web Client. The business role is assigned to the end-user.
Business Role is a crucial aspect in configuring the Web UI as required by an individual or a group of Users.
For Ex: In general an individual who works within Sales as an agent would be able to login as a Sales Professional and a manager of the same team would login with the business role Sales Manager.
This is beneficial as the sales manager would be able to view the entire performance of the team, sales reports and will have access to all opportunities which he can assign to individual agents etc. whereas a Sales agent will be able to view only opportunities assigned to him, his individual sales targets etc.
All this can be achieved within SAP CRM 7.0 Web UI by configuring the Business Role.
Regards
Leon

CRM Architecture: relations between business roles and transaction

Hello Experts!
I am dwelling on the topic of the relations between Business Roles, Transactions, Transaction Types etc. Do you know if there is any architectual diagram to make clear how these objects are related, and how they depend on each other?
Thank you for help!
Karolina

Hi Javier,
As far as I understand you want to restrict transaction types per business role.
You can achieve this by customizing. You can create a transaction profile in customizing for each business role and assign the transaction types you have created to this transaction profile.You can find this customizing activity in spro transaction.
Then you can assign transaction profile you have created to your business roile by assigning function profile 'transaction profile' to the business role in crmc_ui_profile tcode.
In this way when you login with the business role the transactions you have maintained in transaction profile will only be shown up in the pop up.
I hope this helps yiour requirement. Let me know if you require any further information. Thanks.
Regards
Yogesh

Business role not assigned..

Similar Messages

Maybe you are looking for