Deactivate unusable business roles

Hi, colleagues
How to deactivate unusable business roles in Web UI?
We want to show only some of business roles, not all.
I know about parameter CRM_UI_PROFILE and about pfcg-roles.
But how to deactivate standard business roles, for example?
We need to use only created Z-roles and show only them for all users.
Denis.

Please check my document
http://scn.sap.com/people/monika.suchy2/blog/2013/07/25/restrict-access-to-business-roles-in-web-uiRestrict access to business roles in Web UI
It describes a way to restrict business roles using an own authorization object.
Monika

Similar Messages

Issue regarding Business Role assignment

Hi All,
1.
I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
In the infotype Business Role I have assigned IC_AGENT (standard) business role.
IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
2.
Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
Now when I run the application everything is visible (telephony, navigation bar and workarea).
Why is it not visible in first case?
I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
Regards,
Ashish

Hi Ashish,
As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
Refer pg 56 in CR580, it will clear your doubt.
Thanks & regards,
Suchita

Smartfroms in customed business role (my business role)

Hi experts,
I'm finding it difficult to embed or generate an smartform in my business role.....
as we can download the output list in excel form ....how to make it come as a pdf....
can any one help me.....

Hi Jaya,
The transaction types you see is based on the authorizations set for your id.What you can do is,
1. Run tcode STAUTHTRACE and set it for your user.
2. Click on cerate quotation.
3. Deactivate the trace.
4. Display trace and see what authorization you are missing.
5. Take the authorization object in the trace.
6. Got to SUIM tcode->Roles->By authorization object.
7. You will get a list of PFCG roles who has this authorization object.
8.Now you can tell your basis team to assign this role to your SU01 or you can assign yourself if you have auth.
Now you will see more transaction types.
Thanks,
Faisal

Business Roles configuration for ARM

Hi Gurus,
We have implemented ARM piece of AC but now we have a requirement to map our security technical roles to business roles. Can we create and use business roles without using BRM ?
Example: Create/maintain single roles in backend (ECC/BW etc) and import in GRC then map single roles to Business roles for requestors to select.
Regards,
Salman

Yes Salman,
You can use BRM to create business roles to group roles as per your requirement. You need to confirm the check box for connection group as Business, as below:
As you mentioned, I assume you have defined the Methodology Processes and Steps for role maintenance then under NWBC, you would be able to see role type as Business.
Hope you completed the action for: Deactivate Role Types
Let us know if you need more info on this or for any issues.
Regards,
Ameet

Increase transaction types in a Business role

Hi Folks,
I currently am logged into business role SALES-PRO .When I want to create a quotation I can see two transaction types(Say ZEQT,ZEQ1),If I want to include two more transaction types for example credit memo request etc in create quotation itself can i do it functionally?
Pls tell me what settings need to be done?
Regards
Jaya

Hi Jaya,
The transaction types you see is based on the authorizations set for your id.What you can do is,
1. Run tcode STAUTHTRACE and set it for your user.
2. Click on cerate quotation.
3. Deactivate the trace.
4. Display trace and see what authorization you are missing.
5. Take the authorization object in the trace.
6. Got to SUIM tcode->Roles->By authorization object.
7. You will get a list of PFCG roles who has this authorization object.
8.Now you can tell your basis team to assign this role to your SU01 or you can assign yourself if you have auth.
Now you will see more transaction types.
Thanks,
Faisal

Error while creating Business Role

Dear Frnds,
I am working on webclient , am trying set a Business Role of my own .But it say "You Cannot Assign one PFCG role to different business roles" .As when i copy the standard business role to that role there is no PFCG role assigned. Here i tried copying IC web Manager and do .
Can anyone guide me to solve this.
Appreciate your Help and Thanks in Advance.
Cheers
Ram

Guys,
I got resolved , Follow the Note :-1077251.
Thnxs
Ram

Assigning Business Roles - No such task exists

I am trying to create a user ID and assign a Business Role in the process. The attribute that I am using is MXREF_MX_ROLE. It is defined as a multivalue system attribute with a data type of entry reference and the reference type in MX_ROLE.
From my workflow task, I can select the role from the selection window but when I click OK to save to the identity store, I get an error "You have tampered with the params". From the Monitor UI, I see the message "Failed setting value for attribute Member of Role. No such task exists"
I have a Modify User task that uses the same attribute. When I attempt to use it, I get the "Failed setting value for attribute Member of Role. No such task exists". But I do not get the "you have tampered with the params" message.
I am only trying to set this in the identity store right now. I am not yet ready to provision to my ABAP system.
Any assistance is appreciated.

Hi Lori,
in case you have linked privileges to your role, SAP NW IdM searches for tasks in the related repository (as stated in the attribute MX_REPOSITORYNAME of your privileges). Type in the ID of some test tasks in the repository constants MX_DEPROVISIONTASK, MX_PROVISIONTASK and MX_MODIFYTASK and see if it works.
Otherwise, there could be a missing relation the other way round from the role to the user. See if there is a MXMEMBER_MX_PERSON attribute in your role.
Best regards,
Nils

Individual Account Creation in IC_AGENT business role.

Hi,
After system got upgraded from 6.0 to EHP1, marketing attributes are not working as expected.
When i create an Individual Account type in ZIC_AGENT business role, it gets created successfully but its marketing attributes are not getting set when i check in the Account overview.
There is a BADI implementation of "BUPA_GENERAL_UPDATE", i debugged and found that in FM "CRM_MKTBP_READ_KSSK_AUSP", system is trying to get the attributes from table "ausp"
      select * from ausp into table et_ausp
          where partner_guid = lv_guid
          and klart = 'BUP'.
I think, somewhere configurations are not done correctly. But i am aware where i check all these configurations for markting attributes corresponding to BP. If you know then please let me know.
Thanks
Raman.

Hi,
You can check it in ,
MARKETINGPRO ( business role ) -> Marketing ( work center ) -> attribute Sets
search for the specific attribute/attribute set. go to OV page ..there will b check box for person and organization.
Regards
Sandeep Kumar B

Getting error in IC agent business role while loading components.

The user has been allowed and access to all business role.user are using all business roles but when user click on the IC agent business role the following error arise.
Cannot display view CRMCMP_BPIDENT/BuPaMultipleLayoutVS of UI Component CRMCMP_BPIDENT
An exception has occurredException Class CX_CRM_GENIL_GENERAL_ERROR - Component set CRMIC_DEFAULT cannot be loaded with BP_APPL+EMPTY+IC_ACCT_ID since multiple object definitions exist for component SO2
Method: CL_CRM_GENIL_INTERNAL_MODEL=>LOAD_COMPONENT_SET
Source Text Row: 124
Initialization of view CRMCMP_BPIDENT/BuPaMultipleLayoutVS of UI Component CRMCMP_BPIDENT failed
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View BPConfirmedPartners.MainWindow in component CRMCMP_BPIDENT could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Cannot display view CRMCMP_BPIDENT/BuPaMainVS of UI Component CRMCMP_BPIDENT
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View BPConfirmedPartners.MainWindow in component CRMCMP_BPIDENT could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Initialization of view CRMCMP_BPIDENT/BuPaMainVS of UI Component CRMCMP_BPIDENT failed
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRMCMP_BPIDENT/BuPaMultipleLayoutVS in component CRMCMP_BPIDENT could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Cannot display view MainWindow of UI Component CRMCMP_BPIDENT
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRMCMP_BPIDENT/BuPaMultipleLayoutVS in component CRMCMP_BPIDENT could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Initialization of view MainWindow of UI Component CRMCMP_BPIDENT failed
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRMCMP_BPIDENT/BuPaMainVS in component CRMCMP_BPIDENT could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Cannot display view CRM_UI_FRAME/WorkAreaViewSet of UI Component CRM_UI_FRAME
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View BPIDENT.MainWindow in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Initialization of view CRM_UI_FRAME/WorkAreaViewSet of UI Component CRM_UI_FRAME failed
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View BSPWD_BASICS/WorkAreaHostViewSet in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Cannot display view CRM_UI_FRAME/MainWindow of UI Component CRM_UI_FRAME
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View BSPWD_BASICS/WorkAreaHostViewSet in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Initialization of view CRM_UI_FRAME/MainWindow of UI Component CRM_UI_FRAME failed
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRM_UI_FRAME/WorkAreaViewSet in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
Cannot display view Root.htm of UI Component CRM_UI_FRAME
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRM_UI_FRAME/WorkAreaViewSet in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
An error occurred during initialization of the application
An exception has occurredException Class CX_BSP_WD_RUNTIME_ERROR - View CRM_UI_FRAME/MainWindow in component CRM_UI_FRAME could not be bound
Method: CL_BSP_WD_VIEW_CONTROLLER=>BIND_VIEW
Source Text Row: 165
I could not able to diagnose the error from where it is coming and I goggled lot but did not find anything about the above cited issue .
if any of you can help me to solve this soon it will be highly appreciated .

Hi,
I am not sure if this appies here. You might check
SPRO->CRM->crm cross-application components->
Generic interaction Layer/Object Layer ->
component-specific settings->
define simple objects
For these objects 2 rules apply:
1. 'search object name' can only be used once.
2. 'search object name' should not have the same name as any 'object
name'.
Do you have any entries, which break these rules?
If it is related to component enhancement, note 1122248 might help.
Best Regards,
Sigrid

Using fact sheet 'BP_ACCOUNT_FS' in IC business roles

Hi experts!
I have a requirement to customize the fact sheet in IC business role, where the 'ICCMP_AFS' fact sheet always opens. But I need all the assignment blocks and information that is in 'BP_ACCOUNT_FS' fact sheet.
So, is there any way to make that in IC Business Roles there was fact sheet 'BP_ACCOUNT_FS' but not 'ICCMP_AFS'?
This question is extremely important for me.
Thanks in advance,
Andrew.

Hi, Chimalwar!
What I've done:
1. Defined logical link 'ZIC_AFS' in transaction CRMC_UI_NBLINKS, by copiyng it from standard 'IC_AFS'. I only changed the parameter and put it 'BP_ACCOUNT_FS'.
2. Define Profile (choosed the profile I need) -> Define Generic OP Mapping
Choosed my navigation bar profile and made the following customizing:
Object type: FACTSHEET
Obj.Action: B Display
Use target: nothing checked
Target Id: nothing selected
Use Link: checked
LogLink ID: ZIC_AFS
3. Transaction 'BSP_WD_CMPWB', Component: BSP_DLC_FS -> Component structure browser -> Views -> BSP_DLC_FS/factsheet. I've created my own configuration, copying it from standard 'BP_ACCOUNT_FS':
Config key: my own, for my business role
Component usage: <DEFAULT>
Object Type: 'BP_ACCOUNT_FS'
Object Subtype: <DEFAULT>
After confirming Business Partner I can see the fact sheet I defined.
But my task was to see the fact sheet of the business partner when I select it in a call list, before I confirm it. And there was ABAP.
Regards,
Andrew.

Mapping between ICProfiles in CRM 5.0 VS Business role in CRM 7.0

We're upgrading CRM Webclient UI from CRM 5.0 to CRM 7.0. As per Upgrade Master Guide, there is listing of Migration activities. We're working on Migration Activities for IC Profiles in CRM 5.0 to Business Role in CRM 7.0.
Please advise us how to do mapping to set up Business Profiles on the basis of IC Profiles in CRM 5.0
Thanks,
Saeed

This issue has been resolved. MAy be closed.
This is manual mapping process

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Copied SALESPRO business role in CRMC_UI_PROFILE, but odd results show.

I have created an new role (Z_SALESPRO) using transaction CRMC_UI_PROFILE. The copied role had all objects copied and I can see that it has the Nav Bar profile of 'SLS-PRO', which is the same as the role 'SALESPRO', being the one that I copied from.
When I log in using the WebUI I can choose the new Z role, but it does not display the 'Create' section in the Nav Bar. This is section that displays next to the 'Recent Items' section of the Nav Bar and has option like 'Appointment, Interaction log, task,E-mail. contact, Lead,Opportunity and Quotation' shown within the boxed area.
If I use the SALESPRO role when logging into the WebUI I do get to see the 'Create' section, and yet the role and Nav Bar settings are IDENTICAL.
Could this be some kind of authorisation issue, or is this problem down to something else?.
Jason

1. go to crm>ui framework>business role>efine business role
2. select your Z business role
3 in the left panel choose option "Adjust direct link groups"
4. check if they are marked as visible (sometimes when coping business roles, this isnot copied)
5. next select direct link group and click in left panel on sub node "Adjust direct links"
6. check also for this level if they are marked as visible
reagrds.

Technical names in Business Role selection screen

Hello,
When I log on to the WebUI I get the selection screen for the Business Roles (correct because I'm assigned to multiple).
But in the selection screen the Technical Names of the Business Role is hown too and I don't want to show these to the users.
So does anybody know how we can disable showing the technical names in the business role selection screen?
Can it be done in BSP crm_ui_start > Page Fragments > selectBusinessRole.htm Selection of Business Role? If so, what do i have to change?
Thnx!
Regards,
Joost

Hi Joost,
This technical information is the tooltip that is comming from the following line.
crm_ui_start > Page Fragments > selectBusinessRole.htm
at line no 29
tooltip="<%= profile_detail %>"
If you can remove this line then technical information, that comes up when you do mouse over the role description, wouldn't come.
Regards
Ajay

Copied Business Role in Solution Manager ITSM

Hi All
This is eunhwa.
I have a question regarindg copied business role in Solution Manager ITSM.
To copy business role, I copied technical roles Navigation profile, configuration key and PFCT Role ID. And then I copied
a business Role. And assign copied technical roles to copied business role.
And I changed Direct link group UI. For example, in copied business role ZSOLMANPRO, There were many
direct links, I only left ‘incident’ and ‘problem.
However when I selected incident’ in direct link, there was no transaction ‘zmin’ assign. I couldn’t create a incident.
Why this error happened? Is there anything which I miss?
Thanks.
Best Regards,
Eunhwa Park

Hi,
Well, there are multiple things you can check.
1. If you are using IE
You have to add the page/pop-up to the compatibility mode of your Browser.
IE -> EXTRAS -> Settings for Compatibility Mode -> Add -> Refresh the CRM WEB UI
2. Check if you had assign SM-CREATE in the ZSOLMANPRO Navigation profile. (In Assigning the direct link groups to Nav. Bar profile.
3. Check whether you had authorizations for ZMIN in PFCG profile.
4. Additionally check
1905448 - How to restrict the suggested transaction codes when creating an ITSM
Incident using CRM Web UI - Solution Manager
5. In define transaction types corresponding transaction types are active. (In SPRO under solman ->Capabilities->ITSM-> Transactions)
6. Check the copy control whether they are fine. (In SPRO under solman ->Capabilities->ITSM-> Transactions)
7. Ensure that the transaction type's channel definition in customizing is set to 'CRM Web-Client UI'
If your issue is still not resolved yet, please paste the error/screen you are getting.
Regards
Rishav

Deactivate unusable business roles

Similar Messages

Maybe you are looking for