Maintaining WebUI Business Roles in PFCG/Infotype 1263

Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang

Similar Messages

  • Business Role and PFCG Role

    Hi all,
        I am new to CRM 7.0 Can someone explain  What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
       And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
    Thanks.
    Neha.

    Neha,
    Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely.  I'm locking this thread due to it fact that this question has been asked many times before by many different people.
    These threads explain the topic in more detail:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    Thank you,
    Stephen

  • Organizational Model - WebUI business role assignment

    We have created the organizational model in our system where we have the levels that are tied to a specific business role.   We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment.   I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
    Any help would be greatly appreciated. 
    Thanks,
    Darcie

    Hi Robert,
    maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
    for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
    for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
    pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
    regards.

  • 1 Business Role  = 1 PFCG role

    Hi,
    We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
    How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single  PFCG role?
    Regards,
    Nikhil

    Nikhil,
    The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
    Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
    Hope this helps.
    Amar.

  • How to add Task in the WEBUI Business role

    Hi,
    We have Interaction record as one work center in the agent business role.
    Now we are planning to add TASK for creating internal activities to employees.
    In spro, I created transaction type ZTAS (copy of 1003) for task with leading transaction category BUS2000125-TASK.
    For business role, what is the standard Work center ID/logical Link ID/target ID for task.
    (Currently  for INTERCATION RECORD we are using work center ID =  IC_BT_INR , Logical link ID= IC_BT_INR and Taget ID=IC_INR )
    Regards
    BABU

    Hi,
    Thanks for your reply and now Iam able to create TASK in webui.
    In the task, I am seeing a assignment block Org data and in which Sales and Service Org details are there.
    Since the TASK is meant for assigning some work to other employees/self, why we need this ORG data. 
    How TASK works in WEBUI.
    For ex,
    a)I can create a TASK to X person with start and end dates.
    b)Through Actions, I can send email about the task assigned to the employee
    c)Once employee searches his TASK in his agent Inbox,he can able to get it.
    d)Once he completes his Task, he will put the status as closed.
    How this will be communicated back to me or what is the standard process in TASK.
    pl suggest
    Regards
    Babu

  • Business Role replication from HR

    Hi there,
    We have recently implemented CRM 2007 and activated the interface with HR (SAP Enterprise 4.7).
    In CRM the Business Role is an infotype that is maintained at the position level and that must be present in order for a user to be able to use the new CRM WebClient interface.
    As the data for the CRM Org Structure is derived from HR, we are looking to maintain the Business Roles centrally in our source system (HR) for each position.
    Do you know if there is any provision in the Standard SAP System for doing that?
    If not, is there any guide I can follow to enhance to enhance the HR-CRM ALE Interface to transfer over a custom infotype from HR and get it assigned to infotype 1263 (Business Role) in CRM.
    Thanks in advance
    Manuel

    Hi John,
    HR replication from R/3 to SRM is carried out by following these steps:
    1.) setting up the distribution model in SRM and R/3 for message type HRMD_ABA. You can set up  number of filters in this message type, where you define HR infotypes, subtypes, object type and so on.
    2.) Once you set up the distribution model, distribute the model.
    3.) Report RHALEINI is used to replicate the distribution model from R/3 to SRM in the insert mode. (You can also use transaction code PFAL).
    4.) Ongoing replication if performed in the update mode from R/3 to SRM will cause problems of users being broken in sporadic cases. It is advisable to use change pointers from BD14 to perform the ongoing replication.
    There is an SAP docuemntation of EBP transports which explains in detail the replication. Hope this information helps.
    Please assign points for usefull answers !!
    Sundeep

  • Fact sheet not visible in new Z business role

    Hi all,
    On creating a new Z marketing professional role after copying from the standard role, I am not able to find the option of viewing the Account Fact Sheet under the link "More" in the customer master. i didnt find any customizing wherein I could assign the fact sheet to the business role.
    I've assigned the fact sheet to transaction types under Settings for activities but didnt work out. Any further settings ??
    Deserving points to be rewarded, Regards,
    Jacob.

    Jacob,
    check note 1040229.
    you have to maintain cluster view CRMV_BUIL_PRT (tx sm34)
    there you have to link your newly created business role (its PFCG role) to the form view CRM_ACCOUNT_OVERVIEW_PRN
    and to class/interface CL_UIU_PRN_ACCOUNT.
    should work this way
    regards,
    Ineke

  • CRM 7.0 How to create Business role & generate

    Hi Team,
    Can you please let me know some breif idea about CRM 7.0 security guide.
    How to created Business role is this part of functional activity?
    Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
    Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
    Thanks & Regards,
    Vyash Mishra

    Hello Viyash
    I will add the most important information for generation of business roles and assignment of authorizations to users.
    You must first create the PFCG roles. PFCG role is built based on the Business Role.
    Please see documentation in : SPRO
    SAP Implementation Guide =>  Customer Relationship Management
    UI Framework  > Business roles > Define Authorization Role
    Then the PFCG role can be assigned to the business role in 
    SAP Implementation Guide =>  Customer Relationship Management
    UI Framework  > Business roles > Define Business role
    Finally you must assign business roles to Organizations or positions in organizations in
    SAP Implementation Guide =>  Customer Relationship Management
    UI Framework  > Business roles > Define Organizational Assignment
    The users that are assigned to such organizations / positions will be therefore linked to the business role.
    With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
    Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
    I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
    Best Regards
    Luis Rivera

  • SAP CRM 2007 Business role assignment

    Hi all,
    We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
    1- We create a PFCG role : "pfcgrole1"
    2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
    3- assign the user to the PFCG role "pfcgrole1"
    We have two cases :
    CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
    RESULT : The user logs in  to CRM, the user gets error message  "Logon is not possible because you have not been assigned a business role"
    CASE 2:The user is not assigned to any  position in Org management.
    RESULT : The user logs in to CRM, everything works fine
    my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
    Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
    Thanks in advance.

    Please review these old threads first:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    There is a lot of technical background on how business role to PFCG role assignment works.
    Thank you,
    Stephen
    CRM Forum Moderator

  • Assign queries to authorization role via PFCG maintenace

    Hi,
    I would like to assign several queries to existing authorization roles.
    Therefore I am using the transaction PFCG > maintain the menu > add "other" SAP BW Query URL and fill in the name as well as object description.
    However, the new query will not be shown in the BEx Analyzer in the role folder.
    What do I have to administrate that the query will be shown in the role menu (BEx Analyzer)?
    Thanks!

    Dear Arvind,
    thanks for your reply.
    As an authorization administrator for SAP BI I do have the authorization for S_USER_AGR already.
    I am just testing in our development system.
    However, the query will not appear in the BEx Analyzer while selecting "Open Query" and search in "Roles".
    As far as I know queries could provided to authorization roles via BEx Analyzer.
    But does no possibility exists to maintain the authorization role via PFCG?
    Regards, Christian

  • Business Role - Link to PFCG role

    Dear all,
    When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
    What is the functionality of this PFCG role in relation to the Business Role?
    When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
    Is there some documentation available that explain this relationship between the PFCG role and the business role.
    Thank you in advance,

    Dear Ivan,
    To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
    Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
    CRM Business Partner Roles:
    http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
    Rights and responsibilities that a business partner can have in various business transactions.
    The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
    http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
    Each business partner role contains a predefined set of functions based on the business partner’s relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
    PFCG Roles:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
    The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
    To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
    Hope this will help.
    Regards,
    Naveen.

  • Multiple PFCG Roles to a user and one business role

    Hello SAP CRM Experts,
    we are facing a problem then I need your help.
    The external user can access the CRM through three distinct business roles.
    However, for each of these business roles, there are specific access
    rules configured in three different PFCG profiles.
    In the registration of the user (SU01), are assigned the three profiles
    PFCG because the user must have access to three different business roles.
    However, for one of the profiles the ability to modify the document
    service order is blocked and for the other is allowed to modify this
    document.
    Is there a customizing where I can associate the PFCG role to the
    business role, and then, when the user logs into the system, it
    identified the business role that he accessed the PFCG profile associated.
    However, this configuration is not working, and did not solve the problem.
    It seems to me that there is a merge of all the permissions that the user
    has, and is not being considered the PFCG role associated with the
    specific business role.
    This is really correct? The merge permissions occurs?
    Best regards,
    Diogo Lupinari

    Yes, thatu2019s correct.  When user is assigned multiple PFCG roles, all authorizations are in play.

  • Assignment pfcg-role to user and assignment pfcg-role to business role

    Hello, Gurus!
    What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
    As  I see authrizations from pfcg-role assigned to business role have no effect to user...
    Best regards,
    Artuк Litvinov.

    Artur,
    The business role assignment does not give a user that PFCG role.  Instead it is just a mapping table and does nothing more. 
    Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient.  In your scenario let's do the following:
    You have pfcg roles:
    RA
    RB
    You a have business role
    B1
    You have users:
    Joe
    Jack
    Business Role B1 is assigned to role RA which contains UIU_COMP.
    User Joe gets business role B1 and roles RB which does not have UIU_COMP.  This will not let him use the webclient.
    User Jack gets business role B1 and pfcg role RA.  This will work because everything is there.
    This means you need both the correct PFCG plus business role setup to make it work properly.
    Take care,
    Stephen

  • How to maintain cluisterview for new business roles in SAP CRM2007

    How to maintain cluisterview for new business roles in SAP CRM2007.
    Table - CRMV_UI_NB
    Regards,
    Biplab

    I also look forward to a 'solved' answer to your question.
    In the meantime, I'm curious to know if there are any organizations today running SAP B1 HANA for their production system.   Would you know of any?

  • Cannot modify an authorization object in pfcg role for a business role

    Hi Experts,
    I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL  lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow.  Am I doing anything wrong?
    Please help me.
    Thanks
    Ajith C

    Hi Leon,
    Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in  the code. The pfcg configuration, I am skipping it for now.  I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
    Thanks,
    Ajith

Maybe you are looking for