Campaign creation with authorisation group in crm_mktpl

Hi ,
Can anyone suggest me how to create a campaign in the marketing planner with an authorization given to it.
Whether I need to configure any authorization group inorder to display that particular authorization group in the marketing planner in the Tab field Basic data Authorisation group List box.
Please say the procedure how to maintain it.
Thanks in Advance.
Priya

Hi Priya,
If you want to use the authorization groups to restrict access to campaigns, follow these steps
1. Define the authorization groups in
IMG->Customer Relationship Management->Marketing->Marketing Planning and Campaign Management->General settings->Define Authorization Group
2. Use these values in the "Authorization Group" field of the "Basic Data" tab in Marketing planner.
3. Create a role and use the authorization object CRM_CPGAGR to restrict access to certain authorization groups for the user
This should help you to restrict the access to campaign based on the authorization groups.
Prakash
Assign points if this helps.

Similar Messages

Reasign authorisation group at table maintenance generator

Hi All,
I have a table, assigned with authorisation group as &NC&. Now I need to change to authorisation group created newly.
If i change with newly created authorisation group in table maintenance generator level.
My Qus:1. Need to generate the table maintenance generator for this again.
2. Will it affect the users assigned to authorisation group.
3. Wht i need to do to change this, and wht are its effects if i change the authorisation group.

Hi,
If the user is not assigned for the role he has to be assigned for that role.
one role is assigned to authorization group.
basis consultants will add the role of that group to that particular user.
otherwise he cant change the entries of the table.
so consult basis consultant for security role assignment.
Thanks
Parvathi

Where to see activities, which are created for the campaign with target group

Hi
I have created a Communication Method in SPRO -> CRM -> Marketing -> Marketing Planning & Campaign Management -> Campaign Executtion - Define Communication Method : Activity has been configured
Activities are not appearing after creation of campaign with target group.
Where to see activities, which are created for the campaign with target group?
Regards
Hamid

Hello,
alternatively to check table CRMD_ORDERADM_H directly you can use the related transactions search for the campaign:
This should bring all activities generated by the campaign. If this is empty first check the job log of the campaign execution job again:
This gives information if any target group members have business transactions created. If the log does not contain the required information you can debug from SM37. The business transactions (activities, leads, sales orders) are generated from function module CRM_MKTTGGRP_PROC_CREATE.
best regards,
Johannes

How to create cutom authorisation group for custom table?

Hi,
I created once custom table.
i want to allow only some users to create entries.
how can i achieve this?
if with creation of z authorisation group tell me procedure
thanks in advance.

Hi,
   See to this link it may help you.
   How to create Authorization group
   Custom Authorization Objects

Accounts being created with administrative group rights

Hello,
The server is a Windows 2003 R2 Enterprise fully patched used for Shared Hosting purposes. It runs Hsphere control panel. I am trying to identify how the following hack is happening.
1) There are users being created with Administrative group rights.   Below is the EventViewer log for the user creation:
User Account Created:
    New Account Name:    username
    New Domain:    PCNAME
    New Account ID:    PCNAME\username
    Caller User Name:    PCNAME$
    Caller Domain:    DOMAINNAME
    Caller Logon ID:   (0x0,0x3E7)
    Privileges       -
Attributes:
    Sam Account Name:    username
    Display Name:   <value not set>
    User Principal Name:   -
    Home Directory:   <value not set>
    Home Drive:   <value not set>
    Script Path:   <value not set>
    Profile Path:   <value not set>
    User Workstations:   <value not set>
    Password Last Set:   <never>
    Account Expires:   <never>
    Primary Group ID:   513
    AllowedToDelegateTo:   -
    Old UAC Value:   0x2DAB2B0
    New UAC Value:   0x2DAB2B0
    User Account Control:   -
    User Parameters:   <value not set>
    Sid History:   -
    Logon Hours:   <value changed, but not displayed>
There exists entries as well where the primary group ID is changed to the Administrative group, but I am omitting such.
2) I tried to identify what Caller Logon ID:   (0x0,0x3E7) means. I found out from here:
http://blog.joeware.net/2013/01/14/2667/ that I can use LogonSessions.exe to identify it.
Output from LogonSessions.exe is pasted below (snippet):
[0] Logon session 00000000:000003e7:
    User name:    DOMAINNAME\PCNAME$
    Auth package: NTLM
    Logon type:   (none)
    Session:      0
    Sid:          S-1-5-18
    Logon time:   9/11/2014 12:41:53 PM
    Logon server:
    DNS Domain:
    UPN:
        4: System
      316: smss.exe
      364: csrss.exe
      392: winlogon.exe
      440: services.exe
      452: lsass.exe
      628: svchost.exe
      756: LMAgent.exe
      840: svchost.exe
     1000: spoolsv.exe
     1252: avagent.exe
     1268: camWMIAgent.exe
     1324: cissesrv.exe
     1380: cpqrcmc.exe
     1404: vcagent.exe
     1440: svchost.exe
     1480: HsQuotas.exe
     1740: inetinfo.exe
     1780: EmailAgent.exe
     1856: snmp.exe
     1884: sysdown.exe
     1920: smhstart.exe
     2192: svchost.exe
     2388: cmd.exe
     2396: hpsmhd.exe
     2444: cqmgserv.exe
     2464: cqmgstor.exe
     2484: HSphere.exe
     2596: wmiprvse.exe
     2676: cmd.exe
     2684: rotatelogs.exe
     2692: cmd.exe
     2700: rotatelogs.exe
     2732: searchindexer.exe
     2812: hpsmhd.exe
     2824: cqmghost.exe
     2852: svchost.exe
     3044: cmd.exe
     3052: rotatelogs.exe
     3080: cmd.exe
     3088: rotatelogs.exe
     5452: svchost.exe
     5596: GravitixService.exe
     7392: csrss.exe
     7232: winlogon.exe
     6888: csrss.exe
     9832: winlogon.exe
    10388: wawrapper.exe
    10352: cpqnimgt.exe
     9496: msiexec.exe
     6068: w3wp.exe
     4748: webalizer.exe
3) I also learned from http://support.microsoft.com/kb/243330/en-us that Sid:          S-1-5-18 means:
SID: S-1-5-18
Name: Local System
Description: A service account that is used by the operating system
That is all great info, but I am not sure I can put together what I have learned to attempt and get closer towards identifying how in the world users are being created and then being assigned administrative group rights.
I am a Linux person mostly, but I am comfortable following a properly explained thread regarding windows 2003 R2 Enterprise issues.
The server is fully patched and it is running Lumension security product. What's more, Norman Malware tracker, tdskiller.exe (Kaspersky) and McAfee rootkitremover.exe have been run without any apparent Malware/Virus infection
Hope someone with advanced admin skills can advise.
Thank you

Hi,
You mentioned that, “I am trying to identify how the following hack is happening”, would you please tell us that why did you think the event represent a hacking behavior?
In a Shared Server Hosting environment, the underlying hosting control panel tool (Hsphere in this case) should be creating only virtual FTP users with a specific group. So no users with Administrative group should be ever created. If this happens,
it constitutes a breach of server security=positive hacking attempt.
>how in the world users are being created and then being assigned administrative group rights.
In addition, would you please be more specific about this question? Did you find the event message on a domain joined machine?
I want to be able to understand in full how/what process is allowing users to be created with Admin rights. In other words, I want to know what IP was used to issue the command, if ASP.net was used (abused in this case), or anything else related to
it so that we can patch this particular hole.
Best Regards,
Amy

Authorisation group

hai,
what is actually called authorisation group and how close open postinf period.

HI Dear ,
The authorization group is to restricted users, if you want to block the users to post documents it will be helpful to you.
In OB52 u find two periods i.e, a)From Period 1 b)From period 2 and the last column Auth Grp.
For example: If u want to restrict other users to post in period 1 then In From Period 1 range u can enter the period 1 to 1 to which u want to restrict the user & In From period 2 u can give the periods 2 to 2 which can be open to all users. Give any 4 characters in the Auth Grp field and ask your basis team to assign the same to your profile with user.
This make you to post the entries in both 1 & 2 period and leaving all other users to post only in period 2.
Please assign points..
Regards,
SANDEEP

AIA comms O2C PIP 11.2: Is creation of subscription group supported ?

HI AIA gurus
I am confused from documentation and source code of AIA comms O2C PIP 11.2. From documentation, it seems like Creation of Service group along with creation of services during order fulfillment. But, in the transformations for making input flistfor opcodes PCM_OP_CUST_MODIFY_CUSTOMER or PCM_OP_PURCHASE_SUBSCRIPTION_DEAL in composite ProcessFulfillmentOrderBillingBRMCommsAddSubProces do not have Field SUBSCRIPTION_OBJ field which indicates the Subscription parent of all services.
So, it is not clear if subscription group is supported in AIA comms O2C PIP 11.2. From research i found that AIA 2.0.1 did not support subscription groups. So, i am not sure if 11.2 or 11.3 PIPS support this feature.
Please help me to know if subscription group is supported or not. If supported, please help with Product configurations we need to do in Siebel to test subscription group creation.
Regards
Arun

Hi,
No, te AIAConfigurationProperties originally did not contain any section (nor Module Config or Service Config) describing AIA Session Pool Manager. how is it that the 11.2 documentation does not mention this composite as part of the "Verify Deployment" sections for both Comms AABC and O2C PIPs?
As a workaround we've currently took the composite project from $AIA_HOME/utilities/SessionPoolManager/V1/AIASessionPoolManager......, deployed it and also changed the AIAConfigurationProperties files by adding the Module config section for SessionPoolManager. That seemed to work after running the ant script for the update of the xml file and restarted the managed server.
Still curious as to why it was not deployed as part of the install.

Error during Creation of Product Group

Hi experts
I am getting below error during creation of Product Group MC84,
how to solve this
The field is defined as a required field; it does not contain an entry
Message no. MG144
Procedure
Transfer a suitable value.
If the field is the material group or unit of weight, and the field is not ready for input, check whether the material is locked. If it is locked, you cannot extend the Purchasing view or the Sales view. If either of these views needs to be extended, the material must first be unlocked. This can be done only by a user with special authorization. Contact your system administrator.
Note
For information on locking and unlocking material master records, see the SAP library documentation Material Master (LO-MD-MM) ->Locking Material Master Records.

Hi,
Please refer the below thread,
PRODUCT GROUP
Regards,
Senthilkumar

Creation of Authorization group

Hello All,
I have a requirement from FI consultant for creation of new authorization group. This auth. group we want to use in FI objects like F_BKPF_BEK. so that for few end users they should not change any vendor data in FK02.
I have gone through several posts, but not able to get / understand clear steps for creation of auth group and assignment.
One of the post i found is below:
[How to create Authorization group;
i tried to do few steps but not in right direction. Request you some one please suggest me the steps for cration.
Rgds,
Durga.

Julius,
Thanks for the update. As suggested by you i have inserted one entry of auth group in TBRG table against FI object with SE16.
Now how do we maintain the view of V_TBRG. Is it from SE11?, if yes then i should do this step from ABAP login.
But what i heard is, this activity is purely involved by Basis people.
Please suggest.
Rgds,
Durga.

Create ecatt script for one sales order creation with multiple line items

Hi ,
I want to create a ecatt script for one sales order creation with multiple line items. Preferably SAP GUI.
This selection of data will be from an external file/ variants which will have only one row of data in it.
Firstly: I have to sort the external file having same PO Numbers in an order.Group them together.
Second: I have to create sales order for those many line items having same PO Number.
Best Regard
Taranum

Hi Micky
Firstl you should upload the Line items for a particular sales Order in an Internal table
and then pass that internal table to your BAPI during your coding corresponding to a particu;lar sales order
In case of any issues pls revert back
Reward points if helpful
Regards
Hitesh

Can I filter search by authorisation group?

We have 5 sales orgs e.g. Z001, Z002, Z003, Z004, Z005. Each employee belongs to one sales org only. When the user searches on accounts I want to filter the search by the sales org the employee belongs to.
To test this I maintained the business partners and assigned the authorisation group Z001 to 5 of our customers in one sales org. I have also assigned the authorisation group Z002 to 5 of our customers in another sales org that I do not want displayed. For others I have left empty. I did this because it is not a practical solution for us to maintain an authorization group for every customer.
In transaction PFCG I have maintained the authorization group B_BUPA_GRP with the entry Z001 as this is the sales org I want displayed for this role.
When I search for the customers (with no search criteria) it does not appear to do any filtering at all as more than 5 records were found, which is not correct.
When I run the trace (ST01) I find that for the 5 customers that have the authorization group Z001, it is allowed. This is correct. For the 5 customers with authorization group Z002, it is not allowed. This is correct. However for the customers without any authorisation group assigned it is allowed. This is not correct.
How is it possible to not display customers without an authorisation group?
Regards
Declan

Well Declan..you have to note this thing before going for this solution.
The field you want to add as a hidden search parameter , should not be available on UI.
Otherwise controlling the user will be very difficult.(Nevertheless, you can achieve it, but have to take lot of pains.)
For example if you want to display partners belonging to a particular country say 'US',then add a record to GT_HIDDEN_PARAMETERS.
DATA: ls_params   TYPE genilt_selection_parameter.
    ls_params-attr_name = 'COUNTRY'.
    ls_params-sign      = 'I'.
    ls_params-option    = 'EQ'.
    ls_params-low      = 'US'.
    APPEND ls_params TO gt_hidden_parameters.
Implement this code in EH_ONSEARCH and then call super class. Standard code by default reads this gt_hidden_parameters.
This is proprietary to BP_HEAD_SEARCH Component. If you have to implement this for some other componet then you should create an attribute gt_hidden_parameters and then read this internal table manually and manipulate the search criteria as is being done in standard code of method EH_ONSEARCH of BP_HEAD_SEARCH/SearchHelp.
As I mentioned earlier COUNTRY attribute should not be available on UI.
If Country was available on UI, then imagine a case if user enters 'UK' as country and you have hard-coded inside to get only 'US'
Then the result list have partners of 'US' despite user entering 'UK'. I mean to say the hidden parameters should not be available on UI.
This way you can any valid hidden attributes by looking at the search object of the serach page in Model Browser.
Cheers,
Masood Imrani S.

Authorisation group and document type

Dear Experts
I want our users who are using transaction F.14 to be able to process document type ZF only. I have created a role and in the authorisation object F_BKPF_BLA
i can see field authorisation group and activity. What value i should put in the authorizatuion group object which will allow me to restrict users to work in document type ZF only
<removed_by_moderator>
Edited by: Julius Bussche on Apr 30, 2008 4:53 PM

Hi All,
Didnt know whether to start a new post or continue this one. Basically I have the same problem but I seem to be missing something fundamental (and I think it must be obvious!).
Dev Team:-
1) New transaction code created ZF10 by which amongst other things should only process the newly created document type ZF.
Myself (Security Team):-
1) All of our document types are defined in OBA7.
2) The specific document type is ZF that we want to restrict access to.
3) In V_TBRG I have defined the custom authorisation group ZDTF against object F_BKPF_BLA.
4) In SU24 I have defined against the custom transaction code ZF10 the authorisation object F_BKPF_BLA to be inserted with Activity values 01, 02, 03; and Authorisation Group ZDTF.
5) Create new role and add ZF10 which then populates the auth object and values above.
What I cant see / understand is how the document type is then restricted to ZF in the role as it isnt defined anywhere that the authorisation group ZDTF only allows access to document type ZF.
Any help on this will be greatly appreciated. PS Should I have created a new thread for this ?
Cheers
Steve

Authorisation Group in transaction CV01N

Greetings,
I have created a new document type (AER) and status network.
I am now trying to create a new DIR to test my new document type.
In transaction CV01N on the Document Data tab - for the Authorisation Group field there is no value to select on the dropdown menu (it is blank) and I cannot proceed because this is a required field.
I have looked at other document types and I see that there are two choices when it comes to Authorisation Group i.e. "Management Restricted" and "Company Restricted".
Please advise on what I have to do to enable the selection choice of "Management Restricted" and "Company Restricted" in the Authorisation Group dropdown menu when I try and create a new AER DIR.
Regards,
Keith
Edited by: Keith Kibuuka on Feb 15, 2010 12:40 PM

Dear Keith
In transaction CV01N on the Document Data tab - for the Authorisation Group field there is no value to select on the dropdown menu (it is blank)
It'll not show. It's SAP standard feature.
and I cannot proceed because this is a required field.
Because in DC10, for Document type AER you have set, Authorization Group as Required Field ( Double click on AER document type in DC10, you can see your configuration for details of your configuration )
Just Follow the steps mentioned below:
1. Decide whether you want to set Authorization group mandatory field or optional.
2. If you decide to make mandatory/ optional, then In DC10, for Document type AER you configure, Authorization Group according your decision/ requirement
3. Next in PFCG , Go to Authorizations tab & change authorization data. Under Document management define/ enter the Authorization code of your choice ( maximum 4 chars ) in C_DRAW_BGR object. Then define your document type in C_DRAW_DOK object. Save & assign this role to the user whom you want to give access. ( The user must remember this authorization code, as there is no F4 help for authorization group field in CV01N )
4. Now in CV01N, create the DIR with doc type AER, enter the authorization code you defined in PFCG.
That's all. You are done.
Good luck
Amaresh Makal

SQL batch doesn't work; How to fetch related objects with fetch group?

I have two questions:
1. SQL Batch doesn't seem to work. I have tested some batch object creation
with BatchLimit set to -1, 0, 1, 25, 100. They all have similar
performance.
kodo.jdbc.DBDictionary: BatchLimit=25
2. How to use custom fetch group to fetch related objects? The example of
custom fetch group only show how to fetch different attributes in different
groups. I have a test cases where I would like to pre-fetch related objects
to save round trip.
Enviroments:
* Kodo 3.1.0 RC1
* Oracle 9i release 1
Thanks for any help!
Qingshan Luo
Senior Software Engineer
Open Harbor
1123 Industrial Road
San Carlos, CA 94070
Phone: 650-413-4251
Fax: 650-413-4298

try poracle 10g driver. At least they fixed terrible CLOB bug may be batch
to. BTW 9.2.x has problem with batching with deferred constraints so be
careful
"Greg Campbell" <[email protected]> wrote in message
news:c3dmnu$rmj$[email protected]..
>
"Qingshan Luo" <[email protected]> wrote in message
news:c3dg7q$mdl$[email protected]..
Hi,
I have two technical questions with Kodo.
1. SQL Batch doesn't seem to work. I have tried batch size of -1, 0, 1,25.
But the performance from batch creating objects is not affected by batch
size.
kodo.jdbc.DBDictionary: BatchLimit=25You may be running into a bug in the Oracle 9.2 driver. That driverdoesn't
reliably give update counts when using batching and prepared statement
caching. By default, Kodo will turn off batching. You can manuallyenable
batching by setting the BatchLimit on your DBDictionary, as you've done.If
you do this, though, you may want to turn off prepared statement cachingby
setting MaxCachedStatements to 0 (see
http://www.solarmetric.com/Software/Documentation/3.1.0RC1/docs/ref_guide_dbsetup.html#ref_guide_dbsetup_builtin).
>
2. How to use custom fetch groups to eagerly fetch related persistable
objects? Example only showed attributes, not relationships.You can find information on setting up eager fetching of relations at
http://www.solarmetric.com/Software/Documentation/3.0.3/docs/ref_guide_
perfpack_eager.html
Basically, you'll need to add the relations to your fetch group, and
set the eager fetching mode.
Enviroment:
* Kodo 3.1.0 RC1
* Oracle 9i release 1.
Qingshan Luo
Senior Software Engineer
Open Harbor
1123 Industrial Road
San Carlos, CA 94070
Phone: 650-413-4251
Fax: 650-413-4298

PR release strategy with material group

Hi Experts,
Release strategy for Purchase requisition already configured with characteristics Document type and Total net order Value.
For fulfill new requirement we have created New character with Material group.Our requirement is for Two material groups separate release strategy has to be trigger and remaing other material groups old release strategy has to be trigger.For exple if X and Y are two material groups ,which require seperate release strategy.Other than X and Y material groups requir old release strategy.
all the material groups assigned to character.Blank material group also assigned to the character.In release strategy level in classification view we have assigned two material groups( X and Y ) for separate release strategy and remaining material groups and Blank material group to old release strategy.
   At the time of creation of PR if i give two material groups ( X and Y)for different line items, seperate release strategy is not triggering, where as old release strategy is triggeringIf i create PR with single material group( X) for all line items it is triggering seperae release strategy properly.
   For other material groups (other then X and Y )with different line items it is triggering old release strategy properly.
      Kindly help me to resolve the problem.

Hi,
Please add Blank material group to the new release strategy also.
Maruthi

Campaign creation with authorisation group in crm_mktpl

Similar Messages

Maybe you are looking for