CRM 2007 Territory Authorizations

Hello,
We are implementing CRM 2007. The standard Authorization objects are CRM_TERRMA, CRM_TERRDY, & CRM_ORD_TE.
Business requirement is as follows:
ZIP codes 00000 - 20000 is assigned to Territory 'A'
ZIP codes 20000 - 40000 is assigned to Territory 'B'
Territory 'A' & 'B' falls under Sales manager 'X'
Territory 'A' is assigned to 'Y'
When user 'Y' logs in, he should be able to see only the sales orders he created, he should not be allowed to create/display/delete sales orders in Territory 'B'
When user 'X' logs in, he should be able to create/change/display sales orders created by himself and user 'Y' because he is assigned to Territories 'A' & 'B'.
Need help to know, to achieve this do we need to maintain any other authorization objects. What additional
information do we need form CRM functional guys to fulfill this requirement?
Thanks in advance,
Purna

Hi Rao,
You need to implement ACE to fulfill this requirement.
You get info on ACE at the blogs below.
The concept and implementation of CRM-ACE
Configuration & Implementation of CRM Access Control Engine (ACE)-Part 1
Hope this helps.
Amar.

Similar Messages

CRM 2007 MClient Authorizations

Hello All -
I am new to CRM 2007 Mobile Client tech.
I am looking for your help in authorization's with respect to MC
Thanks in advance.
VJ
Edited by: sapsec vj on May 25, 2008 11:30 AM

Hi,
the following link in the SAP help portal will surely help you:
[http://help.sap.com/saphelp_crm60/helpdata/en/06/f6248c39694225a9d0ab59155a1ca8/frameset.htm]
Regards,
Wolfhard

Authorization Check in Business Transactions in CRM 2007

Hi everybody, I have a problem whit the authorization check in CRM 2007.
This link help me to follow the steps
http://help.sap.com/saphelp_crm60/helpdata/en/e9/b29a39e7aee372e10000000a11
I follow this steps:
1.- Created a new single role on the PFCG
2.- On the Menu tab add the transaction BSP_CRMD_BUS2000108 (Trax for LEADS)
3.- On the authorization tab create a new profile and in the authorization data set the values for CRM_ORD_OP: PARTN_FCT 00000012, PARTN_FCTT *, ACTVT '02,03
4.- Generate the authorization.
5.- Set my user "TESTUSER" on the user tab
6.- Save the profile
Then, I login to CRM whit TESTUSER and I see all the leads. I miss something, what could be the problem ?
Thanks for your help

Hi Shaji, Pankaj and Jushan, thanks four your answers.
I still have the same problem, I want to see only my leads that I´am the responsible, after I generated the authorization and assign the role to my user from tcode PFCG and SU01, I logout and login again and no changes, I still see all the leads.
Another test I made, I changed the authorization data and set the values for CRM_ORD_OP: PARTN_FCT , PARTN_FCTT 0008, ACTVT ' (person responsible) and the results was the same, see all the leads.
How works the User Comparisons and how can I check for errors in my pfcg role ?
Thanks for your help.

Authorization restriction for CRM 2007

Dear Experts,
We are in process of defining the authorization matrix for CRM 2007 for end users who will be using Web UI.
Here my requirement is the service orders created by USER1 should not be displayed by USER2 and vice-versa when they do a search in both Web UI and GUI in Tx CRMD_ORDER for service orders.
Please let me know how can I acheive this and what is the auth. object for the same.
Thanks & Regards,
Sharath

Dear babu,
If I understood your request, you want that, only one user will be able to access the document. If you want to do that, this is the answer:
At tcode PFCG you shoud set:
First you must set what type of document will be avaible to the user, in this case Z020.
CRM_ORD_PR: PR_TYPE 'Z020',ACTVT '*'
Next you must set which activities they will be able to do (notice, you must set the same field in the previsou object(
CRM_ACT: ACTVT u2018*u2019
And then you set which partner function or partner category are able to access the document, here is the main point !
In this example I set that only users who has Partner Category (not partner function) Employee Responsible (std partner category 0008) are able to access the document
CRM_ORD_OP: ACTVT '', PARTN_FCT '', PARTN_FCTT '0008'
Here you can notice again field ACTVT, here you will set what user are able to do, "*" means everything, "1" = create, "2" = modify, etc. (I can see the list at PFCG, adding the auth. object to the PFCG profile).
I notice only std partner function or partner category works with this object. I sent a message to sap support, and they confirm that, so if your user has Z partner funcition or category it is not possible to do that.
Summary, your user must be present in the partner list of the document, and they must have a partner function or partner category std. It is possible to set together both values PARTN_FCT and PARTN_FCTT, but I think it is not necessary.
The easy way to do that is, user who will be able to access the document, must be the employee responsible.
This help is very usefull
http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm
Regards,
Lalas
ps.: As you should know, only one partner function must have partner category Employee Responsible, in the partner det. procedure, otherwise, you will get error message in your application.

Sap CRM 2007 Security related issue

Hi All,
I am working on SAP CRM 2007 security.
I have scenario, which we are trying to fix.
There are two users A and B.
A is assigned to role X
B is assigned to role y
Business Partner 123 is created for user A
Business Partner 456 is created for user B
These Business Partners are assigned to Authorization Groups.
See below:
1)Authorization Group (LK01) is assigned to Business Partner --123.
2) Authorization Group (LK02) is assigned to Business Partner --456
3) Authorization groups LK01 is assigin to user A in PFCG role X
4) Authorization groups LK02 is assigin to user B in PFCG role Y
a) User A assigned with PFCG role X>Authorization Group (LK01)>BP 123.
b) User B assigned with PFCG role Y>Authorization Group (LK02)>BP 456.
Note:
1) Authorization Groups are assigned to BPs under the Control tab.
2) These Auth Groups are assigned in Authorization Object in PFCG role.
Now, USER 'A' should not be able to work under the BP 456 as this BP is assigned to authorization group LK02.
The issue is when we open the WEB UI and login with user A role X, He can search for the BP 456 assigned to Auth Group LK02.
User A can open the Interaction History and edit the Service Order created using the BP 456.
He can Edit the following in Service Order details:
1) General Data Status (from created to complete), Contact person, Sale Rep name.
2) Organization Data like Sales Office, Sales Org Unit, Distribution Channel
3) Business Partner.
However, one good thing is he cannot edit the Account details like Account ID, House No, Employee Resposible, the message he get is "No authorization to change partner with authorization group" which is a
good thing.
I have tried to be precise, please let me know if you require more information.
Regards,
Dave.

I suggest the following:
Please, check whether the system works if you activate the implementation BUPA_F4_AUGRP.
In addition check the notes 559662, 674869 and 782927. Maybe the notes are already implemented but you can try then the implementation of the BADI (SE19). It should resolve your issue.
I have implemented this Badi solution before, and after activation; the search help ; nor search result list did NOT show any Business partners anymore that had an authorization group I was not allowed to see.
kind regards
Davy Pelssers
SAP CRM/Security consultant

Add extra Business Objects to model CRM 2007: Web Client Records

Hello,
Could anyone tell me how I can add more Reference Objects in Case Management?
I copied the model CRM 2007: Web Client Records and added a new node (with for example Business Object Service Order) just like product and installations (which are visible under the reference objects)
I created a new element type under SCMG_SP_CASE_RECORD --> Z_CRM_SPS_CASE_RECORD and in the customizing we attached the model to the case type under Case Management --> Extended Customizing --> Process Actions --> Assign Action Profile to Case Type.
Still the new Business Object in the model isn't visible under Case Management in de WebUI.
Could anyone tell me if I'm missing something or is there a config guide available how to add more business objects?
Looking forward to your replies.
Kind regards,
Joost Christenhusz

Eddie,
Are you familiar with Access Control Engine (ACE)?
Go through this -> http://help.sap.com/saphelp_crm50/helpdata/en/04/0177f9bb67ac4cafb84bb4d4c1d8fc/content.htm.
and https://websmp205.sap-ag.de/~sapdownload/011000358700002121742006E.
Authorizations in CRM are controlled through ACE.
Hope this helps.
Amar.

LAUNCHING URL BY CLICKING ON BUTTON(USING TRANSACTION LAUNCHER) IN CRM 2007

Hi,
I am working on the object which requires configuring transaction launcher so that when button is clicked,URL is open. This development need to be implemented in CRM 2007.
Kindly suggest.

We are working in a sandbox environment on CRM 2007 and trying to launch a transaction in an ECC 6.0 system. We get a login box into the ECC server which executes fine but after a few seconds we are returned back to the CRM server without displaying the transaction. All authorizations are correct but it seems that the container is not being populated with the requested transaction. Has anyone else seen the same behavior? We are about to put in a note to see if we can get assistance. We have implemented latest Support Packs and Enhancement Pack 3 was recently installed in the ECC environment. We have implemented all the appropriate notes (1029777) to make sure that we are using the recommend functionality.

Configurations required for PME and SCE in SAP-CRM 2007

Hi Friends
How to configure the PME and SCE in SAP-CRM 2007.
If u have any documentation avilable for those two topics regading the implementation of e-Commerce application.
Waiting for ur reponse..
Regards
Satish.

Hi Mia,
Authorization group is available in the old versions and basically this help in defining new authorization groups and you can define what can be done with these authorization groups as what can be edited and what cannot be and this is done on SPRO. These authorization groups are entered in the authorization group and the user who has this authorization object will be able to work on the account.
So the business role in CRM 2007 has a PFCG role and the authorization profile that you created are assigned to the business role and users are assigned to the business role.
There are also few authorization objects to maintian the BP relationship and see if you can use these combination to check if it meets your requirement.
Hope it clarifies and if useful please reward points
Thanks
Srini

Geographic Information System (GIS) functions in SAP CRM 2007

Dear all,
I am currently working on a SAP CRM 2007 implementation project that consists in replacing an old customer service application.
Currently this application is managing service technicians' territories with embedded GIS functions (it relies on latitude and longitude data to assign the closest technicians to a service order).
I would like to know if SAP CRM 2007 is covering the following:
- GIS functions;
- Ability to assign a technician based on this;
- Ability to visually see the map and draw technician territory changes on it;
- Ability to optimize technician route (mileage).
I cannot find insights about this in the SAP Help.
So, where can I find some details / documentation about this?
A third party tool would be necessary and also its integration to SAP CRM?
Thanks for your help.
Brice.

Brice,
So basically I don't see this being out of the box functionality, however you could build something for this.
1. You need to store the geo co-ordinates for the customer on the customer master or be able to "bolt out for this".
2. Create a new "partner determination rule" that would make a call to the external system to propose a technician on the service order.
3. Have a punch out on the service order screen that links into a web like GIS application where you could visualize this and send change data back into the CRM service order.
Now if someone else knows that CRM 2007 can do what you described out of the box, I would love to see the demo. We have a similiar requirement, where we need to keep track of the mapping, but no need to perform the routing logic.
Take care,
Stephen

SAP Easy Access CRM 2007 menu

Dear friends,
Pls let me know one thing abt CRM 2007: Can we do all transactions ( T-Code ) on SAP Easy Access CRM menu or just some on the menu and the others on web?
To make u understand clearly abt my situations: I have one IDES CRM 2007 server but the SAP CRM menu dont have enough transactions even though the basic team gave me full authorization.
If any of u can help me, pls explain me clearly,
Thanks in advance!
Nghi Do

The list of business roles for CRM 2007 can found in the IMG under:
CRM->Business Roles->Define Business Role
For Marketing the standard role delivered is: MARKETINGPRO
Other common roles:
SALESPRO - sales
SERVICEPRO - service
TPM_PRO - trade promotion management
IC_AGENT - interaction center agent
IC_MANAGER- interacation center manager
Those roles cover almost all the standard non-industry specific functionality of CRM 2007.
Take care,
Stephen

How to get a Custom View in CRM 2007

Hi,
I have created a new view (SrvTLocation) and I want to replace Service Level Agreements view with the SrvTLocation.
In the old version, I followed this approach to get the location view
1. Add SrvTLocation to the SrvTViewSet under the view area "SrvTActionSLA".
2. Redefine the method "DO_REPLACE_INITIAL_VIEW" of the controller class of "SrvTViewSet", so that it will replace the "SrvTSLA" with "SrvTLocation"
I dont know how to do it in the new system.
Please advice me. I will reward points.
Sreekanth

Hi Sreekanth
Have you checked the new CRM 2007 Cookbook.
I believe it's available from SAP Marketplace. Haven't checked myself but do believe it's there.
Regards
Arden
Reward with points if helpful

Changing the mountain picture in CRM Web UI(CRM 2007)

Hi All,
I am trying to change the mountain pic in crm web ui just below the SAP CRM logo. I am on CRM 2007.
I have already changed the pic in se80 as we do for the company logo in place of the SAP CRM logo.
se80>>BSP Application>>THTMLB_STYLES>>MIMEs>>sap_skins>>default>>styling>>Ishape>>mountain.gif>>right click>>Upload/Download>>Upload and Replace>> xxx.jpg(custom pic)
I have done this DEV client 100 and when I run the scc1 transaction in DEV 200 to bring the changes via the workbench request created in DEV 100, there's an error:
Table SDOKLOREPR is not client-specific
Table SDOKLORIPR is not client-specific
Table SKWF_TRANS is not client-specific
Table SMIMCONT1 is not client-specific
Table SMIMLOIO is not client-specific
Table SMIMLOIOT is not client-specific
Table SMIMLOPR is not client-specific
Table SMIMLORE is not client-specific
Table SMIMLORI is not client-specific
Table SMIMPHF is not client-specific
Table SMIMPHHR is not client-specific
Table SMIMPHIO is not client-specific
Table SMIMPHPR is not client-specific
Table SMIMPHRE is not client-specific
Table SMIMPHRI is not client-specific
Error in object R3TR1 SMIM2 3
Selected tables           :             15
Processed tables          :              0
Storage required (KB) :              0
Program ended with error or warning, return code: W
Runtime (seconds)         :              2
End of processing: 14:11:24
Can you please let me know what's the problem, if I am missing something?
Thanks and Regards
Varun Taneja

Hi Bhushan,
Yes I did check DEV 200 after transporting the request. If I goto se80 in Dev 200 and navigate to the mountain.gif inside the BSP Application and click on the file, I do see my custom picture but the same is not reflected in Web UI. Over there, the mountain still reigns !!!
Any other thing that I need to try?
Regards
Varun

SSO from CRM 2007 to ITS of R/3 4.7.

Hi Experts,
We are using CRM 2007 interaction center.
We have provided some links to R/3 transaction using transaction launcher.
Now we need to implement SSO to the R/3 system.
We are using Standalone ITS 6.20 system to connect to R/3 from Interaction Center.
Please help us with configuration steps for SSO.
Is there any way to achieve this without using PAS?
Systems:CRM 2007.
ITS :ITS 620
R/3 :4.7 EE
Please advice.
Thanks,
Adi.

Dear Tob,
yeah You are right.
I am using R3 4.7 EE (i am using SAP IDES) and It's Server is 6.20.
so this version does not have Internal ITS ?
Are u suggesting me to go for Standalone ITS then ? Pls give me elaborate reply.
If u have any documents for both the ITS , it wud be a great help if u send those to my mail id. [email protected]
regds
Message was edited by: kanth

Installation problem in CRM 2007 Server

Hi All,
Installation of CRM 2007 IDES giving the trouble at importABAP phase. The installation is going on Windows 2003 server 64 bit, on Oracle 10.2.0.1.0 and J2SDK-1.4.2_17..
It finished 17 steps out of 19, 1 failed and 1 is waiting..
I done some changes, still it is directly going to the failed step(old installation). How can i start from 16th phase of importABAP.
Otherwise is there any way to solve this, I tried from <SID>adm account also still it is giving the problem..
Thanks & Regards,
Sridhar.

This is the sapinst.log
INFO 2009-03-05 14:46:30.328
Connection request to guiengine backend by host 192.168.1.124.
INFO 2009-03-05 14:46:38.296
Copied file 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/inifile.8.xml'.
INFO 2009-03-05 14:46:38.359
Copied file 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/inifile.xml' to 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/inifile.9.xml'.
INFO 2009-03-05 14:46:40.687
Execute step
Component W2K_ServicePack_Check|ind|ind|ind|ind
Preprocess of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_First_Steps|ind|ind|ind|ind|0|0|W2K_ServicePack_Check|ind|ind|ind|ind|2|0
INFO 2009-03-05 14:46:57.203
Copied file 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/keydb.xml' to 'C:/Program Files/sapinst_instdir/CRM2007/SYSTEM/ORA/CENTRAL/AS/keydb.5.xml'.
INFO 2009-03-05 14:46:57.375
Execute step runMigrationMonitor of component |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CreateDBandLoad|ind|ind|ind|ind|10|0|NW_ABAP_Import_Dialog|ind|ind|ind|ind|5|0|NW_ABAP_Import|ind|ind|ind|ind|0|0
INFO 2009-03-05 14:47:02.671
Switched to user: crmadm.
INFO 2009-03-05 14:47:02.718
Creating file C:\Program Files\sapinst_instdir\CRM2007\SYSTEM\ORA\CENTRAL\AS\import_monitor.java.log.
INFO 2009-03-05 14:47:02.734
Switched to user: crmadm.
INFO 2009-03-05 14:47:02.734
Working directory changed to C:\Program Files\sapinst_instdir\CRM2007\SYSTEM\ORA\CENTRAL\AS.
INFO 2009-03-05 14:47:02.750
Output of C:\j2sdk1.4.2_17-x64\bin\java.exe -classpath migmon.jar -showversion com.sap.inst.migmon.imp.ImportMonitor -dbType ORA -importDirs D:\cd1\Export1\EXP1;D:\cd2\Export2\EXP2;D:\cd2\Export2\EXP3;D:\cd2\Export2\EXP4 -installDir "C:\Program Files\sapinst_instdir\CRM2007\SYSTEM\ORA\CENTRAL\AS" -orderBy "" -r3loadExe C:\usr\sap\CRM\SYS\exe\uc\NTAMD64\R3load.exe -tskFiles yes -extFiles yes -dbCodepage 4103 -jobNum 3 -monitorTimeout 30 -loadArgs " -stop_on_error" -trace all -sapinst is written to the logfile import_monitor.java.log.
WARNING 2009-03-05 14:47:02.937
Execution of the command "C:\j2sdk1.4.2_17-x64\bin\java.exe -classpath migmon.jar -showversion com.sap.inst.migmon.imp.ImportMonitor -dbType ORA -importDirs D:\cd1\Export1\EXP1;D:\cd2\Export2\EXP2;D:\cd2\Export2\EXP3;D:\cd2\Export2\EXP4 -installDir "C:\Program Files\sapinst_instdir\CRM2007\SYSTEM\ORA\CENTRAL\AS" -orderBy "" -r3loadExe C:\usr\sap\CRM\SYS\exe\uc\NTAMD64\R3load.exe -tskFiles yes -extFiles yes -dbCodepage 4103 -jobNum 3 -monitorTimeout 30 -loadArgs " -stop_on_error" -trace all -sapinst" finished with return code 2. Output:
java version "1.4.2_17"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.2_17-b06)
Java HotSpot(TM) 64-Bit Server VM (build 1.4.2_17-b06, mixed mode)
Required system resources are missing or not available:
DDL control file 'C:\Program Files\sapinst_instdir\CRM2007\SYSTEM\ORA\CENTRAL\AS\DDLORA.TPL' does not exist.
ERROR 2009-03-05 14:47:02.937
CJS-30022 Program 'Migration Monitor' exits with error code 2. For details see log file(s) import_monitor.java.log, import_monitor.log.
ERROR 2009-03-05 14:47:03.0
FCO-00011 The step runMigrationMonitor with step key |NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CreateDBandLoad|ind|ind|ind|ind|10|0|NW_ABAP_Import_Dialog|ind|ind|ind|ind|5|0|NW_ABAP_Import|ind|ind|ind|ind|0|0|runMigrationMonitor was executed with status ERROR .
INFO 2009-03-05 14:47:22.0
An error occured and the user decide to stop.\n Current step "|NW_Onehost|ind|ind|ind|ind|0|0|NW_Onehost_System|ind|ind|ind|ind|1|0|NW_CreateDBandLoad|ind|ind|ind|ind|10|0|NW_ABAP_Import_Dialog|ind|ind|ind|ind|5|0|NW_ABAP_Import|ind|ind|ind|ind|0|0|runMigrationMonitor".

Displaying custom BI queries on CRM 2007 WEB UI

Hi,
I would like to know the process involved in displaying a custom BI query in CRM 2007 WEB UI. Can someone please advise ?
Regards

Hello,
there is SAP documentation available for this on service.sap.com/crm-inst
It is in the CRM 2007 -> Webclient UI folder.
cheers Carsten

CRM 2007 Territory Authorizations

Similar Messages

Maybe you are looking for