Business Roles configuration for ARM

Hi Gurus,
We have implemented ARM piece of AC but now we have a requirement to map our security technical roles to business roles. Can we create and use business roles without using BRM ?
Example: Create/maintain single roles in backend (ECC/BW etc) and import in GRC then map single roles to Business roles for requestors to select.
Regards,
Salman

Yes Salman,
You can use BRM to create business roles to group roles as per your requirement. You need to confirm the check box for connection group as Business, as below:
As you mentioned, I assume you have defined the Methodology Processes and Steps for role maintenance then under NWBC, you would be able to see role type as Business.
Hope you completed the action for: Deactivate Role Types
Let us know if you need more info on this or for any issues.
Regards,
Ameet

Similar Messages

  • Common technical roles in different business roles in BRM & ARM

    Hi Gurus ,
    Some help please .
    We have the following situation with BRM & ARM role provisioning .
    In BRM we have for example two business roles setup (B1 & B2). We have in these two business roles a common technical role .
    E.g. B1 (has role T1 ,T2 )  , while B2 (has roles T1 & T3) .
    in our example an user already has role B1 (with T1 & T2) assigned. The user then needs access to role B2 as well .
    Since role T1 is common in both business roles  , When an user does an request , ARM then send them a notification saying that an duplicate role exist within the request. (which they have to remove before continuing) . This is confusing the some users .
    My question is as follows. Is there a way to for the user to process the request without having the warning displayed & without having the duplicate technical role assigned ?
    So essentially , they will get access to business role B1 & B2 (but technical role T1 will not be assigned twice) ?
    Your help is greatly appreciated .
    Regards,
    AJ

    Hi AJ,
    Could you share the notification message that  ARM generates.And what about role T1 assignment.
    Is it assigned two time in user profle?
    Thanks,
    Mamoon

  • Business role configuration

    Hi
    Can we configure the business role of sales professional in backend so as to make it eligible to block/archive an account in web UI??
    Thanks
    Aakshi

    Thanks for the reply.
    1. Can we Block/Achieve the BP from WEBUI.
    2. If yes, through which Business Role.
    3. If not available as standard how can we achieve this.
    As a standard the BLOCK and Archieve options are available in STATUS tab of BP in CRM GUI.
    We would like to know, how can we control it through WEBUI.
    Please advise.

  • Business Role - Configuration Key

    Hi experts,
    I have made a lot of view configurations on my configuration key. And now, i need another role with same configurations except 2 or 3 diferences. So i want to copy the configuration key with all its configurations. Does anybody know how can i do this?
    Regards.
    Sadi Yılmaz

    There is a class named CL_BSP_DLC_STORAGE_UTIL with a method COPY_CONFIG(). I am sure you can write a small report looping over the entries in the configuration table for your role key. Best of all this method writes the transport entries for free =)
    I think it does copy the texts you maintained on the view, too.
    cheers Carsten

  • Business Role: ZSOLMANPRO (missing info in NavBar)

    Hi
    I am using Business Role ZSOLMANPRO for CRM Web Client UI (mainly for ChaRM).
    Anyway, I have tested with SAP_ALL and SAP_NEW and everything appears perfectly.
    When I remove SAP_ALL and SAP_NEW there are some items missing.
    The below screenshot is with SAP_ALL and SAP_NEW.  The YELLOW highlighted items do NOT show when these profiles are removed:
    Why are yellow items not showing???
    I have double checked and they are definitely assigned to the ZSOLMANPRO Business Profile via "Direct Link Groups to Nav. Bar Profile".
    So I can't for the life of me work out why they are not showing!!
    Any suggestions?
    Thanks
    Shaun

    Please see  the last item on this page:
    http://scn.sap.com/community/it-management/alm/solution-manager/blog/2014/01/30/add-external-url-to-navigation-bar-web-ui
    I have added in auth object C_LL_TGT and put the associated parameters in place. Still does not show .

  • Table that stores the business role and user id mapping

    Hi,
    i want to know the table that stores the Business role and the business role and user id mapping in CRM system.
    Thanks in Advance.
    Regards,
    Pricy

    Hi Mary,
    There is no direct table but there is a way to find it.
    HRP1263 is the table where business roles are stored when maintained at org level. These are stored against the Position.
    For getting user ID and position linkage refer table HRP1001.
    In HRP1001 table use below criteria to get the User and Position.
    OTYPE = CP
    SCLAS = US
    SOBID = User ID
    ENDDA = 31.12.9999
    Get the OBJID
    Query the HRP1001 table again with following
    OTYPE = CP
    OBJID = OBJID from above Query
    ENDDA = 31.12.9999
    SCLAS = S
    SOBID = Thats Position.
    Pass the position to HRP1263 as below.
    OTYPE = S
    OBJID = POSITION
    PROFILE - Thats business role assigned for the given position and user.
    Hope this is helpful.
    Regards,
    Naresh

  • How to get Currently used Business Role

    Hi Experts,
    I need to get the business role currently being used by the user (i.e. SALESPRO). I've come across the method calls
      Data: lr_ui_profile type ref to IF_CRM_UI_PROFILE,
            lv_profile    TYPE CRMT_IC_CONFIGPROF.
      lr_ui_profile = cl_crm_ui_profile=>get_instance( ).
      lv_profile = lr_ui_profile->get_profile( ).
    and so I tried it on an ABAP report being called from the WebUI via Transaction Launcher. However in my case after executing the method LV_PROFILE doesn't yield a value (but SY-SUBRC was 0).  Can anyone kindly provide a reason behind this? Or are there any other ways to retrieve the current login business role of the user?
    Regards,
    Marc
    Edited by: imdiko24 on Nov 12, 2010 8:51 AM

    Hi Marc,
    Please try once, as exactly what i said in my earlier repl..
    Assign any business role like for eg. "SALESPRO" in SU3 to parameter CRM_UI_PROFILE and test with the following code if lv_value holds the business roles?
    *DATA: lv_value TYPE tpara-partext.*
    *GET PARAMETER ID 'CRM_UI_PROFILE' FIELD lv_value.*
    lv_value will hold the current business role..If you get correct business role in lv_value, that means you have not assigned business role correctly in the org model.
    Cheers,
    Sumit Mittal

  • Default Role configuration  in CUP

    Hi Experts,
    We are on GRC 5.3 SP9 and I am trying to assign  default roles based on the request type
    I want default roles to be assigned only for certain request type
    these are the parameters I have configured
    Consider default roles: YES
    Request Type: NEW Hire
    Default roles level: request
    user attributes: Company
    So I am forced to choose default role user Attribute Company.
    I was expecting that whenever a request is created for a new hire I wanted such and such role to be assigned by default!
    but now whenever  a company( for which i mapped the default roles) is selected its putting default roles in all the request types
    I would expect its only puts default roles for my request type NEW HIRE
    for the respective company !
    Any thought? I am missing something?
    Regards
    MK

    Hello Alpesh,
    SAP has come  back saying that the application is designed that way always works with the comibation of  user attributes
    to me its clearly user attributes are taking over the request type ( clearly ingorning ) i dont see a point why they have field in default role configuration  for request type ( Request type  might as well be simply CUP)
    they have asked me try with user attribute  as system  instead of company , looks like it works !
    I will give you more info
    Best Regards
    MK

  • CRM business role

    Hi all,
           how to create business role and how to assign 5 business roles to an organizational unit.

    Hi pramela
    Follow the  below SPRO path in CRM system
    Customer Relationship Management->UI Framework->Business Roles.
    Take any standard business role (say for example SALESPRO) and copy the business role change accordingly as per your requirement.
    once this is changed go to transaction PPOMA_CRM (Organization unit maintainance) from here search for relevant  organizationunit  under the organization unit   you will found the positions under the positions you will see the Assignment of either users or Business partners as Central persons.
    Here you have to remember two points either you can assign ROLE to Organization unit or Position. If you assign it at organization unit level the sub organization units and positons will get that assigned role.
    if you assign at position level , the users only assigned to that position will get that rolee.
    How to assign the role. Doube click on any organization unit or position that you want to assign the role, From the menu path
    GOTO->DETAILOBJECT->ENHANCEDOBJECTDESCRIPTION after going here you will see Maintain object screen under ACTIVE TAB search(scroll) for the infotype with name BUSINESS ROLE , select the business role and click on create button (on top you will see the create button) in the create screen specify your role.
    if you assign five users to the same position then you have to carry this only once, if they are assigned to several positions under differnt organization units you have to assign those many times.
    Thanks & Regards
    raj

  • Transaction launcher not working for custom business role in WEB UI

    Hi Experts,
    we have maintained a link for activity reports in web Ui which triggers a program Z_CRM_TIME_REPORT . we have maintained the logical links and assigned them to the custom business role. when we run the program in SE38 in GUI its working fine but we are facing the problem when we click the link in WEB UI we get a different screen related to BP and not the activity report.Kindly suggest what are the configuration need to be tested.
    Thanking you,
    Deepa

    My guess would be that the parameter stated in the logical link (navigation bar customizing) that you use is incorrect. This should be the name of the transaction launcher definition you have maintained.
    Otherwise, check the transaction launcher wizard to see that the report is maintained correctly.
    Hope this helps.
    Regards,
    Pieter Rijlaarsdam

  • Invalid configuration for catalog/Web dispatcher (Fiori Smart Business Cockpit)

    Hi all,
    For our smart business cockpits, we have following issue in our administration (launchpad):
    Invalid configuration for catalog/Web dispatcher
    Title
    SAP: KPI Catalog for SAP Smart Business
    ID
    X-SAP-REMOTE:SAP_KPIFRW_TC_R
    Remote ID
    HANA_CATALOG
    System alias
    HANA
    Base URL
    /sap/hba/apps/kpi/s/odata/hana_chip_catalog.xsodata/
    Type
    REMOTE
    When I check our console client, the only error that we see is following message:
    2014-08-04 14:33:16 Base URL '/sap/hba/apps/kpi/s/odata/hana_chip_catalog.xsodata' already registered - sap.ui2.srvc.Factory
    Does someone already saw this issue before? I noticed that we only have those issues on REMOTE CATALOGS.
    Thx!
    Regards,
    Hans
    Tags edited by: Michael Appleby

    Use SAP_KPIFRW_TC_R role (I think you already did).
    (https://<WEBDISPhostname>:<port>/sap/bc/ui5_ui5/sap/arsrvc_upb_admn/main.html?sap-client=xxx&sap-language=EN#/Catalog/X-SAP-REMOTE:SAP_KPIFRW_TC_R)
    However, to be able to access this catalog, the HANA user needs the role sap.hba.apps.kpi.s.roles::SAP_SMART_BUSINESS_RUNTIME
    If the user has to model KPIs, they need sap.hba.apps.kpi.s.roles::SAP_SMART_BUSINESS_MODELER.
    Regards,
    Kiran

  • Business role for technical users

    Hi,
    Does SAP deliever a crm 7.0 business role for technical/consultant users? I need to get access to the configuration mode i the webclient where I can change and add new fields. Can anybody help me?
    Thanks,
    regards Camilla

    Hi Camilla
    Check Best Practice Guide C04.
    Create the Power User role as instructed in the document.
    This will enable to to complete configuration tasks.
    Regards
    Arden

  • Cannot modify an authorization object in pfcg role for a business role

    Hi Experts,
    I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL  lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow.  Am I doing anything wrong?
    Please help me.
    Thanks
    Ajith C

    Hi Leon,
    Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in  the code. The pfcg configuration, I am skipping it for now.  I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
    Thanks,
    Ajith

  • Telephony integration (CAD function profile for business role)

    Hi,
    1. What's the purpose of defining Contact Attached Data (CAD) profile, then assigning it to the business role?
    2. Have you got the step-by-step guidance in configuring that?
    Thank you.

    Lots of stuff posted in this forum over the last year you should be able to find to answer your question.
    What is Computer Telephony Integration (and Why Do I Need It?)
    IMG
    1. SM59 setup pointing to the vendor ICI product
    2. IMG Path: u2192 Customer Relationship Management > IC Web Client> Basic Functions > Communication Channels > Define Communication Management Software Profiles
    3. Assign to IC web profile as Contact Center (item created in 2nd step)
    non IMG (done manually in each client, dev, test, prd)
    4. CRMM_BCB_ADM, define name and point to step 1.
    5. CRMM_IC_MCM_CCADM add item from step 4, choose channles phones, and ques are phone 3. Set CAD handling to 4 (leave blank for SAP CCS).
    6. CRMM_IC_MCM_CCLNK step 2 to step 4.

  • Standard WebClient UI business role for the CRM 7.0

    Hello Gurus
    where can we get the below mentioned thing....i tried in service market place but i did not get
    The predefined authorization roles are provided as attachment BP_CRM_ROLES.ZIP to the collective note of this SAP Best Practices version. Download and unzip the roles to your local directory
    after dowloading we need to uplaod in to PFCG roles
    (The purpose of this activity is to copy a standard WebClient UI business role and to assign a new authorization role to it. The WebClient UI business role is designed to centralize the authorizations, navigations, and content of the CRM WebClient UI.
    The business roles will be adapted to the Best Practices scenario scope)
    i am struck of ove here
    regards
    Sreeram

    Hi Sreeram,
    The roles you want to assign to the user you have to select for your scenario. The best practice role assigned to an user to navigate to the webclient. The other roles you assign to the user to give authoraization for your scenario. If you will go to C04 document you can get the standard roles which will be assigned to one particular user. For the standard user let sal SALES_MAN we assign the standard roles as peer the best practice as SAP_CRM_UIU_FRAMEWORK ,SAP_CRM_OR_ADMIN, SAP_CRM_OR_USER and BP_SLS_MANAGER. If you need other authorization for the user then copy the standard role and assign the authorization manually in transaction PFCG.
    Hope this will help you.
    Thanx
    Chinmaya

Maybe you are looking for