Business role of user
Hi,
How do we find what business role is associated with the user in crm sap 2007?
Regards
Shilpi
Hi Shilpi,
Do the following :
1) Generate PFCG Authorization Profile.
Goto Transaction PFCG ->Select the role (example: BP_SLS_EMPLOYEE)->click on CopyAs -> Change the name to Z_BP_SLS_EMPLOYEE -> select "authorizations" tab page -> Generate Profile (click on button next to Profile Name -> display authorizations screen will be displayed -> click Generate Profile (shift+F5) button next to open button) -> Save -> accept transport request (if any))
2) Assign PFCG Authorization Profile to User
We can achieve this by 2 ways
a) Goto transaction SU01->enter user name (ex: SAPUSER01)-> select 'Roles' tab page-> enter PFCG Role (example: Z_BP_SLS_EMPLOYEE)-> select 'Profiles' tab page -> enter SAP_ALL and SAP_NEW -> Save
OR
b) Goto transaction PFCG-> select 'Users' tab page -> enter user name (example: SAPUSER01) -> Save
3) Assign User to the Business Partner (Employee)
Goto transaction BP -> create a new BP in role employee or open/display the existing BP in role employee (example: Shilpi) -> select role = employee -> select 'Identification' tab page -> enter User name (example: SAPUSER01) -> Save -> accept transport request (if any)
4) Assign Employee to the Organization Unit
Select the Organization unit and assign the BP employee to the position (position = sales employee) -> Save
5) Create Business Role
SPRO->Img->CRM->Business Roles->Define Business Role-> select 'SALESPRO' (business role)->click on CopyAs->Change the name to ZSALESPRO->only change PFCG Role = Z_BP_SLS_EMPLOYEE->enter->click on skip button (ignore any warnings)->Save-> accept transport request (if any)
6) Assign Business Role to the Position in Org. Model
SPRO->Img->CRM->Business Roles->Define Organization Assignment->select the position (example: sales employee)->double-click on position (to make sure that you have select position)-> click on 'Goto' -> click on 'Detail Object' -> click on 'Enhanced Object Description' -> select 'Active' tab page -> highlight 'Business Role' line -> click on create/change button to add the business role -> enter Business Role = ZSALESPRO -> save -> accept transport request (if any)
7) Refresh your Internet Browser
Tools-> Internet Options -> Click on delete files button -> select delete all offline content check box -> click on OK button
Logon to CRM WEB UI with the User (SAPUSER01)...
Please note that when ever you have saved any configuration in CRM, you have to come out of that sequence to reflect the changes made.
If this solved your problem, please award the points...
Cheers,
Peter J.
Similar Messages
-
Table that stores the business role and user id mapping
Hi,
i want to know the table that stores the Business role and the business role and user id mapping in CRM system.
Thanks in Advance.
Regards,
PricyHi Mary,
There is no direct table but there is a way to find it.
HRP1263 is the table where business roles are stored when maintained at org level. These are stored against the Position.
For getting user ID and position linkage refer table HRP1001.
In HRP1001 table use below criteria to get the User and Position.
OTYPE = CP
SCLAS = US
SOBID = User ID
ENDDA = 31.12.9999
Get the OBJID
Query the HRP1001 table again with following
OTYPE = CP
OBJID = OBJID from above Query
ENDDA = 31.12.9999
SCLAS = S
SOBID = Thats Position.
Pass the position to HRP1263 as below.
OTYPE = S
OBJID = POSITION
PROFILE - Thats business role assigned for the given position and user.
Hope this is helpful.
Regards,
Naresh -
Link to Business Role and User Account
How to link an user account with a business role so that the user account can work with the new UI?
Hi,
Go to transaction PPOMA_CRM. Search for your business role say SALESPRO in the Position Search.Double click on the role so that its details are visible on the right hand side.Then search for your user from the user search.When it comes in the left side bottom, drag and drop it to the position on the right side.
Regards,
Rohit -
Business role and user defenitions
Hello,
What is the difference between a business role definition and the user definition?Hi,
User will maintain in SU01 tcode.
Under Owned Users, the Catalog Manager displays the users for which you have owner rights. SQL Studio allows you to view information about these users, and rename and delete users.
· To display information about a user, select the user name, choose Catalog Manager ® Open Object Definition.
· To change a user name, select it and choose Catalog Manager ®Rename Object.
· To delete a user, select the user name, and choose Catalog Manager® Drop Object.
Business roles are any one like vendors, customers , competetors etc.
All the roles will maintain under Businss partner level. If you want to see the roles go to BUT100 table.
Regards
Srinu -
SOD User Violation report by Business Role
All,
Is there a current method for generating a User violation report that shows all SOD's via the technical role and which Business role that, the Technical role is associated to in GRC?
Currently the reports that I am seeing do provide the transaction, authorization, and technical role level of any violation and what business process triggered it but does not show which business role(s) that these conflicting SOD's reside in. (especially if a user is assigned to 2 or more business roles)
Audit is pulling reports of users with SOD's and asking to re-mediate the SOD but currently we have to do dumps of all of the business roles a user is assigned to and then compare the role listed in the violation with the technical roles listed in the assigned business roles of the user.
is this available at all? or maybe in 10.1?Dear Michael,
yes exactly - the new feature comes with the note. It is also possible to implement this note in 10.0 (it's included in SP17 but can be implemented earlier).
See the following screenshot how it looks like in an productive environment after implementing this note:
[BR] stands for Business Role.
Hope this answer the question.
Bestregards,
Alesandro -
2 Business Roles - Navigate from One to Another
Hello
My Key user is assigned a regular Web UI Business Role(CASEWORKER) and it is used for daily work.
However he needs to access standard FCC_AGENT IC specific role in order to process the Collection Work Items occasionally.
Solution which I am thinking was to assign both the Business Roles to User.
However the disadvantage is: User have to switch back to Other Role in order to perform the Operation. Moreover the User is not really happy with this approach.
Is there any other option available ?
Is that possible to Open a new Session (for Secondary Role) from Navigation Bar of first Business Role ?
Please advise.
CheersHi Remo,
Maybe you can consider configuring a new business role for your key-user, where you can put all workcenter that he needs (from both business roles that you indicated).
What do you think?
Kind regards,
Garcia -
Hi experts,
I'm having a problem when our project approaching the end.
If I assigned the business role in parameter CRM_UI_PROFILE and PFCG role in SU01.
It works fine,and the user can logon the web ui.
Now I created a new organization model and position,assigned the business role and user to the position.
A PFCG role was also assigned to the business role:
Then I removed all the roles and profiles in user master in SU01.
The user can not login CRM WEB UI and the system raised "Logon is not possible because you have not been assigned to a business role; please contact your system administrator".
Can anybody suggest what the problem is? Is there any other settings I should make?
I suppose that,since the user was assigned to the position the organizational model, the system can determine the user's business role, and through the business role, the corresponding PFCG role can also be determined.
Am I correct?
Thanks.
JerryJerry, yes, you're right.
Let me point you to pretty good explanation right here: Logon is not possible because you have not been assigned to a business role; please contact your system administrator
So business role determination is taken in three steps (you can observe them in class CL_CRM_UI_PROFILE_DETERM method LOAD_PROFILES):
1. From user's parameter CRM_UI_PROFILE (method LOAD_FROM_USER_PARAMETER);
If CRM_UI_PROFILE = * then the user needs to have S_DEVELOP authorization object with OBJTYPE = 'DEBUG' (debug authorization).
2. If not found on previous step: From organizational management (method LOAD_FROM_ORG_MANAGEMENT)
3. If not found on previous steps: Based on PFCG roles (method LOAD_FROM_PFCG_ROLE); -
SAP CRM 2007 Business role assignment
Hi all,
We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
1- We create a PFCG role : "pfcgrole1"
2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
3- assign the user to the PFCG role "pfcgrole1"
We have two cases :
CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
RESULT : The user logs in to CRM, the user gets error message "Logon is not possible because you have not been assigned a business role"
CASE 2:The user is not assigned to any position in Org management.
RESULT : The user logs in to CRM, everything works fine
my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
Thanks in advance.Please review these old threads first:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
There is a lot of technical background on how business role to PFCG role assignment works.
Thank you,
Stephen
CRM Forum Moderator -
hi all,
we have the requirement where we have to create 4 businessroles and out of 4 a manager rolerequires authrization for all 4and customer rep requires authrization . for 3
how to achieve that?
i have crated 4 pfcg id s for 4 roles and assigned it to a business role(manager) which is copied from the standard.
since manager requires 4 roles i created 4 manager roles and assigned 4 pfcg ids
is this the correct approach?
please help out as i was new to crm 2007
thanks
madhuriThe business role is user for customazion of web ui screens, while authorization roles are used for security reasons. So you need 4 business roles only if you need to maintan 4 different types of screens. If not, use just one.
On the other hand I guess you need 4 authorization roles because you want to give 4 different types of authorizations to users.
So, if you need just one type of screen, create one business role and assign it to users simply by using parameter CRM_UI_PROFILE. and authorization role assign via pfcg.
But if you need 4 b roles and 4 a roles that are always in corelation 1:1 then you can do it also as you wrote. -
CRM business role - user mapping initial load
Hi,
I'm tyring to initial load the data from the CRM systems into IDM. I'm able to get all data of the users expect their business role mapping(parameter in CRM).
in the read pass of the user from the abap initial load , the attribute for the parameter is as follows,
Target Source
sap%$rep.$NAME%Parameter1:Info:VARCHAR:255| parameter1
but no data is stored in the parameter1 table though the user has some parameter mapped in the CRM system
Can anyone plz help to load this user-business role mapping details.
Thanks in Advance.
Regards,
PricyHello Pricy,
can you just give me some hints on what you are trying to do exactly?
My assumptions:
- CRM business role is stored as user parameter in ABAP SU01 user data, right?
- you want to read all the ABAP user data from your CRM system INCLUDING the user parameter data from ABAP SU01 user data, right?
If that is the case at least the loading part should work pretty fine. I just tried this on my local system and had no issues, all user parameters of my existing ABAP users where loaded into one temporary table.
-> Pass: ReadABAPUsers -> table "sap%$rep.$NAME%Parameter1:Info:VARCHAR:255|"
Did you find this temp table created on your database correctly? My table is there and is called "sapT01_001Parameter1" (where my repository is named T01_001) and it contains all the existing user parameters.
What exactly is your issue?
Regards,
René -
Business role for technical users
Hi,
Does SAP deliever a crm 7.0 business role for technical/consultant users? I need to get access to the configuration mode i the webclient where I can change and add new fields. Can anybody help me?
Thanks,
regards CamillaHi Camilla
Check Best Practice Guide C04.
Create the Power User role as instructed in the document.
This will enable to to complete configuration tasks.
Regards
Arden -
Business Role assignment to user
Hi all,
I am learning about the concept of business roles in CRM. In the forum discussions I see that the business role has to be assinged to the user even though we assign the PFCG role (linked to the business role) to the user. Like SU01 where we assign pfcg role to the user, what is the transaction code to assign the business role to the user.
Thanks.
Neha.I'm going to chime in and say this question has been discussed to the detail in this forum. If you would have done a search you would have a pretty good discussion on this topic.
Re: Reg: Business Role
That thread covers all your options in detail.
Thank you,
Stephen -
Multiple PFCG Roles to a user and one business role
Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo LupinariYes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.
-
Assignment pfcg-role to user and assignment pfcg-role to business role
Hello, Gurus!
What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
As I see authrizations from pfcg-role assigned to business role have no effect to user...
Best regards,
Artuк Litvinov.Artur,
The business role assignment does not give a user that PFCG role. Instead it is just a mapping table and does nothing more.
Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient. In your scenario let's do the following:
You have pfcg roles:
RA
RB
You a have business role
B1
You have users:
Joe
Jack
Business Role B1 is assigned to role RA which contains UIU_COMP.
User Joe gets business role B1 and roles RB which does not have UIU_COMP. This will not let him use the webclient.
User Jack gets business role B1 and pfcg role RA. This will work because everything is there.
This means you need both the correct PFCG plus business role setup to make it work properly.
Take care,
Stephen -
Creation of Business role without allow user the possibility of personaliz.
Hi
I'm new in SAP. and I'm in need. Is it possible create Business Role (in CRM) without the possibility (for the user) to personalize the assignment block and the general setting?
Thanks for your future help!
StefanoHi,
this is possible by assigning the Function Profile 'PERSONALIZATION' with value 'ALL_DISABLED' to your business Role in the Business Role Customizing.
Kind regards,
Carl
Maybe you are looking for
-
Need to upgrade from my Treo 650
I have a Treo 650 that is getting old, but I love it. I use it to manage my entire life! Should I replace it with another Treo 650? Or is there another Palm product that I can upgrade to that I can transfer all my data to? I use my Treo 650 (Verizon
-
Xorg 1.8 and Genius UC-LOGIC Tablet WP5540U
Hello, work someone with type tablet type on xorg 1.8? I follow this instructions (http://bbs.archlinux.org/viewtopic.php?pid=786420), but this don't help me. Xorg hot-plug feature have be on, or off ? Thanks for any help!
-
Hi Experts, I have to design a query wherein the user has to compare the forecast and the actual figures.Forecasting is done on weekly basis for next 12 months. Now in my selections i have period before forecast is frozen : say if user enters 6 month
-
What is this...a trim for something?
For the life of me I can't figure out what this section does. Anyone know? It looks like some sort of trim level but it doesn't seem to do anything. Kurt
-
Best way to deal with pics on computer and on iphone
Hey Gang, Ive got lots of pics of animals, houses, friends, celebs, yada yada. I have one huge PICS folder and have many subfolders there. My goals: a. iPhoto on my computer will show all pics of everything, even duds and bad pics b. Photos app on my