Distribution of (PFCG) roles on several ERP systems

Hi experts,
let's assume we have 1 system where roles are beeing developed and distributed from (single source of truth) and we want to dsitribute it to several other ERP systems (including dev, quality assurance and prod systems). What possibilities do you see to more or less perform this process automatically ? Is it possible to distribute them via ALE ? I have not found an IDOC type for this. How would you distribute all Z-Roles on other systems ?
Thanks !
Regards,
Max

Hi Max,
The possible options for you are:
1. Download and upload the roles in each develoment system, re-generate the profile and transport the roles across the landscape.
2. Using the RFC function, read the role from a source system.
You can refer the below SAP help document that provides your mode information:
http://help.sap.com/saphelp_nw70/helpdata/en/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Raghu

Similar Messages

Which roles are needed to call a BAPI in an ERP system?

Hi,
in a scenario I use a SOAP Receiver adapter to call a BAPI in an ERP system. In the SOAP adapter I configured User Authentication.
The question is which role(s) does this user need that this scenario could work?
Thanks and regards
Patrick

Hi,
> I think this would be RFC Receiver Adapter )))
No I use the SOAP Adapter to call the BAPI
@ Siddhesh: I tried it with the roles given in your link
- SAP_XI_ADMINISTRATOR_J2EE
- SAP_XI_APPL_SERV_USER
- SAP_XI_DEVELOPER_J2EE
- SAP_XI_IS_SERV_USER
But it's not working with these roles
Regards
Patrick

Central contract distribution in two backend ERP system

Hello All,
I am implementing SRM 7.0 Contract management (SAPKIBKV07) with two backend ERP system.
We have a requirement where we will create a Global contract in SRM system. Upon distribution based on purchase organisation this contract should get distributed to two different backend system.
Q-1) Is this a standard featutre available with Contract management or de we need set up some configuration. If yes, then please let me know the details.
Q-2) Again here the master data for both the backend system is not synchronised hence if a Global contract in created in SRM system and distributed to two different countries then each contract in ERP should have the region specific vendor code ?
How this functionality can be achieved.
Thanks,
Yatin

Hello All,
Has anyone implemented contract management with two different backend system and with different master data set up
Thanks,
Yatin

Database distribution for several SAP Systems

Hi gurues, we have a very important concern about SAP on Z systems, it is possible/recommended to have on on Z system only one DB engine with several databases that correspond to several SAP Systems running on the machine?
Because we have AIX platform right now and we can not have that kind of database landscape, we only can choose between MCOD or one dataabase engine with one datase in one machine (we can not share db engine).
Hope this question is clear enoguh for you.
Regards
Gustavo

Gustavo,
Sadly yes. You'll have to forgive some of my terminology. I actually work on the Basis team at my company and I am not a DBA. We happen to be running DB2 z/OS and we are using datasharing. For a sandbox ECC system we might have SID SE1 and DB2 sub-systems SE11 and SE12. For another sandbox BI system we might have SID SB1 and DB2 sub-systems SB11 and SB12. Even if datasharing is not used (and hence the 12 member would not exist, SE12 for instance), I would strongly recommend against MCOD and instead suggest using a different DB2 system for each SAP SID.
We have spoken to at least 1 customer that implemented their ECC (ABAP only) and Portal (Java only) SIDs as MCOD in the same DB2 z/OS system. Unfortunately, DB2 z/OS has some somewhat arbitrary limits for things like thread storage which MUST exist under the "2gig bar" (apparently due to some 31bit code still in use). Effectively, this limits the number of threads (and in the SAP world the number of SAP work processes) that a single DB2 member can service. I believe the limit is around 800 threads. Of course, with datasharing you can spread the load to multiple instances (SB11, SB12, SB13, SB14, etc), but then you must also plan for extra resources to be available in a planned failover for maintenance type situation. This particular customer ended up needing to fine-tune some java database threads and ended up needing an extra DB2 instance or two to handle the load during maintenance using planned failover.
Brian

Cost rates maintained in ERP system and cost elements from PPM 5.0

Hello experts,
I will appreciate it if you could help me with this subject below.
I want to search in ERP system what cost rates are maintained for each approved worked hour in PPM system. But, I do not know where should I look for this.
I take a look on the report of the created internal order:
You can see, that the actual posting of 25.000 is booking in the ERP PROD system on cost element IT-HOURS
When I display the booked working times I find 5 Hours taht I booked on my personnel number on Internal Order :
I want to know where in the system is maintained the cost rate that calculates automatically the 5 hours booked on cost element IT-HOURS to 25.000 . So each hour costs 5.000. I want to change the amount of each hour from 5000 to 50.
I’m not an ERP expert so I don’t know where such rate can be maintained in ERP. I need your expert help!
Thanks a lot,
Ruxandra P.

Hi Ruxandra!
You have to distinguish plan costs from actual costs. By doing time confirmation (e.g. via CATS) on your internal order the system posts actual costs.
Using the Role concept of PPM (role-based or task-based) you are dealing (generally spoken) with plan costs. Derived from your entry message I suppose you are already using accounting integration.
Accounting Integration is a big topic, that is very difficult to generally describe in a posting. Please have a look to the general information in help.sap.com => General Information About Accounting Integration - SAP Portfolio and Project Management - SAP Library
Please beware: There are many accounting integration scenarios, therefore there are several aspects and places to maintain cost/revenu rates. On the PPM UI you have the possibility to maintain differing cost/revenu-rates per role/task.The rates in general (plan and actuals) are maintained in KP26.
Also have a look to your business partner (role-based scenario), if there is a cost/revenu rate.
For time confirmation you can have a look to PA30 => infotype 0315 for your CATS suggestion values (activity type, costcenter, etc...).
Please come back with any detailed questions, you would like to have answered.
Regards,
Peter

PPF: automatically Putaway WT creation after distribution of the inbound delivery from ERP

Dear Experts,
I'm trying to test the PPF in order to create a putaway WT for an inbound delivery in EWM-System directly after its distribution from the ERP-System.
1. I’ve chosen the action profile (PDI_01) and did an assignment to the doc type PDI
2. I’ve created the determination procedure to the action profile:
3. I’ve created a condition records:
After this I try to disribute an inbound delivery from ERP to EWM, but as after distribution as after saving of the inboun delivery nothing happens.
Could you, guys, give some hits, what I missed and where I should define the whrehouse process type for the putaway WT?
Thank you in advance
BR
Denis

Hi Petr,
thnaks for the help once again,
I did some settings you and Alex proposed and now I can see than my action will be found when creating Outbound Delivery Order:
But even I have only one condition record to my action "PDO_01_WT_CREATE" it will not be fulfilled...log says
I also changed the GM status to NSNS...can I somehow find out which conditiontion the programm is claiming about?
BR
Denis

LORD: ERP Quotation passing custom fields to ERP system

Hi Gurus
I extended the ERP quotation screen with custom fields which are same like ERP fields using AET and generated the setter and getter and methods for those fields in CRM system , but after entering the values into the custom fields and pressing enter the values are not getting retained , I mean after pressing enter it will communicate with ERP system using RFC call and return back to the CRM systme after that the custom fields are becoming empty, how can I track those values after coming back to the crm system .
Thanks & Regards
Madhu

Hi Madhu,
I am facing same problem.
Could you please share your ideas?? It will be helpful to several guys.
Thanks in advance,
S.Meganadhan.

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

How to integrate a sales process across multiple ERP systems with SOA?

Over time we have merged with multiple companies that used to run on their own ERP system. In the past we concerted them to our own R/3 instance. Having recently upgraded from R/3 4.6 to ERP 6.0, we want to transition to a SOA architecture for integrating stand-alone ERP systems. We are looking for best practices on how to start this transition; i.e., how to use SOA to implement an Order-to-Cash process across separate ERP systems.
Here is our scenario:
The same products are sold through ERP system A and ERP system B. However, each system represents a different company code with its separate manufacturing plants. Both systems evolved independently and presently have separate master data. How do you enable a sales process that dynamically (depending on inventory availability) gets the product either from a plant on system A or B? How do you implement a triangular sale that covers both ERP systems?
I am looking forward to learn from your experiences and your advice.

Hi Bernard,
Like most SOA scenarios, first your scenario requires a detailed fit gap analysis to see which of your existing ERP systems best meet which business process that you want to accomplish at an organisation level. It is only after that, that you can decide which capabilities of SAP SOA can you leverage and how.
Broadly speaking, SAP's SOA paradigm provides several approaches which you could use depending on your scenarios. For example, if you only need a brokerage between two or more systems (updating or retrieval of data) either synchronously or asynchronously, your best bet is PI (preferably 7.1 because of its ESR and Services Registry). On the other hand, if you require a new application that acts as a controller of flow or processing across various systems, you could use the Composition Environment which provides you with a toolset to build composite applications across various systems (for instance, by registering services from multiple systems on the Services Registry, and then consuming it from say a WebDynpro application).
The following document might provide you with more insight on this:
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/809db91f-9bdf-2910-93be-ca4f0853f929
Hope this helps!
Regards,
Romit

PFCG Role Upload Issue

Hi all,
we are performing an upgrade from SAP 46C to ECC 6.0 and I download one Role from PFCG (46C).
I use a sandbox system ECC 6.0 for testing PFCG Upload but I obtain the popup message:
Incorrect release; see long text
Incorrect release; see long text
Message no. S#388
Diagnosis
The system release does not match the release in which the role was saved to the file.
Main Program: SAPLSHL2
Any ideas???
Thanks,
GB

Hi,
Best approach would be copy roles from 4.6C system into a 4.6C sandbox system and then upgrade the 4.6C sandbox system into 6.0. This method will ensure a consistent conversion of the 4.6 profiles and objects to ECC 6.0.
You can run SU25 after the upgrade to update your roles to include new auth objects/field/values/transactions of ECC 6.0 and also remove 4.6 C auth objects that are no longer in use.
This approach will definitely save lot of manual effort to upload roles into new ECC6.0 system and avoid any inconsistencies/ authorization errors in the upgraded system.
You can easily search this forum for more information on SU25
[Upgrade 46C to ECC 6 0 STEP BY STEP ---Developing;
Hope this helps!
Sandipan

Setting in ERP system required: replicate Inbound/Outbound delivery to EWM

Hi Experts.
I have done all primary Configuration Settings for the ERP System and EWM system (using SPM setting, bcez its is ecc 6.0 sr2 ench pack 2 or 3)
Suppose, plant is 0001, storage location 0001 is mapped to warehouse number EW1 in ERP
Warehouse numbers are mapped ERP (EW1) and EWM system (EWM1)
ERP system. For Inbound delivery processing in VL60
1)My question how to configure new Vendor with receiving point should be< EWM1> and warehouse number should be <EW1> ( to replicated inbound delivery in EWM SYSTEM )
For outbound setting for VL01N.
2) How to configure
Shipping to <EWM1>
Delivery type & Sales area ( sales org, Distribution channel , division ) .let me know any configuration required for delivery type & sale area. ( to replicated outbound delivery in EWM SYSTEM).
Waiting for your reply .
Thankyou

ERP system. For Inbound delivery processing in VL60
1)My question how to configure new Vendor with receiving point should be< EWM1> and warehouse number should be <EW1> ( to replicated inbound delivery in EWM SYSTEM )
There is no relation between a vendor and the receiving point. Actually, you may not require a 'receiving point' to be able to transmit the ECC inbound delvy to EWM. The setting that will drive is the assignment of ECC 'dummy' Warehouse to Plant/storage location and the assignment of this ECC 'dummy' warehouse to EWM Warehouse, in ECC. Similar setting is to be made in EWM where the assignment of business system is made with ECC dummy warehouse and EWM warehouse, in EWM.
In addition to this, you'll need to have the mapping of ERP document type to EWM document type along with the mapping ot ERP item category to EWM item type.
For outbound setting for VL01N.
2) How to configure
Shipping to <EWM1>
Delivery type & Sales area ( sales org, Distribution channel , division ) .let me know any configuration required for delivery type & sale area. ( to replicated outbound delivery in EWM SYSTEM).
The above note is the same for this as well.

Logon is not possible because you have not been assigned to a business role; please contact your system administrator

Hi experts,
I'm having a problem when our project approaching the end.
If I assigned the business role in parameter CRM_UI_PROFILE and PFCG role in SU01.
It works fine,and the user can logon the web ui.
Now I created a new organization model and position,assigned the business role and user to the position.
A PFCG role was also assigned to the business role:
Then I removed all the roles and profiles in user master in SU01.
The user can not login CRM WEB UI and the system raised "Logon is not possible because you have not been assigned to a business role; please contact your system administrator".
Can anybody suggest what the problem is? Is there any other settings I should make?
I suppose that,since the user was assigned to the position the organizational model, the system can determine the user's business role, and through the business role, the corresponding PFCG role can also be determined.
Am I correct?
Thanks.
Jerry

Jerry, yes, you're right.
Let me point you to pretty good explanation right here: Logon is not possible because you have not been assigned to a business role; please contact your system administrator
So business role determination is taken in three steps (you can observe them in class CL_CRM_UI_PROFILE_DETERM method LOAD_PROFILES):
1. From user's parameter CRM_UI_PROFILE (method LOAD_FROM_USER_PARAMETER);
If CRM_UI_PROFILE = * then the user needs to have S_DEVELOP authorization object with OBJTYPE = 'DEBUG' (debug authorization).
2. If not found on previous step: From organizational management (method LOAD_FROM_ORG_MANAGEMENT)
3. If not found on previous steps: Based on PFCG roles (method LOAD_FROM_PFCG_ROLE);

Business Role - Link to PFCG role

Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,

Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen.

Multiple PFCG Roles to a user and one business role

Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo Lupinari

Yes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.

Restrict creation of BP based on PFCG role

Hi Experts,
We are implementing CRM 7.0. In the IC AGENT business role we would like to restrict the user to only create contacts using the PFCG role SAP_CRM_UIU_IC_AGENT. We tried using authorisation object B_BUPA_RLT and CRM_BPROLE. But it did not work. Do you know if we are missing anything else? FYI..We are not using ACE.
Best regards,
David

In our system we had a similar problem but with Accounts or Prospects creation. This is how we resolved it: In CRM 7.0 each Customer/ Prospect BP Record has a field Employee responsible on it. This is set automatically on the BP creation page, if the User ID of the user creation the record is assigned to an Employee record. If the user does not have access to create Employee relationships (BUR011) it will fail to complete the customer creation process. Authorization Object B_BUPR_BZT (Business Partner Relationships: Relationship Categories) controls this. You will need to add BUR011 to u201CRELTYP_fromu201D

Distribution of (PFCG) roles on several ERP systems

Similar Messages

Maybe you are looking for