Maintaining WebUI Business Roles in PFCG/Infotype 1263
Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM
Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang
Similar Messages
-
Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen -
Organizational Model - WebUI business role assignment
We have created the organizational model in our system where we have the levels that are tied to a specific business role. We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment. I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
Any help would be greatly appreciated.
Thanks,
DarcieHi Robert,
maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
regards. -
1 Business Role = 1 PFCG role
Hi,
We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single PFCG role?
Regards,
NikhilNikhil,
The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
Hope this helps.
Amar. -
How to add Task in the WEBUI Business role
Hi,
We have Interaction record as one work center in the agent business role.
Now we are planning to add TASK for creating internal activities to employees.
In spro, I created transaction type ZTAS (copy of 1003) for task with leading transaction category BUS2000125-TASK.
For business role, what is the standard Work center ID/logical Link ID/target ID for task.
(Currently for INTERCATION RECORD we are using work center ID = IC_BT_INR , Logical link ID= IC_BT_INR and Taget ID=IC_INR )
Regards
BABUHi,
Thanks for your reply and now Iam able to create TASK in webui.
In the task, I am seeing a assignment block Org data and in which Sales and Service Org details are there.
Since the TASK is meant for assigning some work to other employees/self, why we need this ORG data.
How TASK works in WEBUI.
For ex,
a)I can create a TASK to X person with start and end dates.
b)Through Actions, I can send email about the task assigned to the employee
c)Once employee searches his TASK in his agent Inbox,he can able to get it.
d)Once he completes his Task, he will put the status as closed.
How this will be communicated back to me or what is the standard process in TASK.
pl suggest
Regards
Babu -
Business Role replication from HR
Hi there,
We have recently implemented CRM 2007 and activated the interface with HR (SAP Enterprise 4.7).
In CRM the Business Role is an infotype that is maintained at the position level and that must be present in order for a user to be able to use the new CRM WebClient interface.
As the data for the CRM Org Structure is derived from HR, we are looking to maintain the Business Roles centrally in our source system (HR) for each position.
Do you know if there is any provision in the Standard SAP System for doing that?
If not, is there any guide I can follow to enhance to enhance the HR-CRM ALE Interface to transfer over a custom infotype from HR and get it assigned to infotype 1263 (Business Role) in CRM.
Thanks in advance
ManuelHi John,
HR replication from R/3 to SRM is carried out by following these steps:
1.) setting up the distribution model in SRM and R/3 for message type HRMD_ABA. You can set up number of filters in this message type, where you define HR infotypes, subtypes, object type and so on.
2.) Once you set up the distribution model, distribute the model.
3.) Report RHALEINI is used to replicate the distribution model from R/3 to SRM in the insert mode. (You can also use transaction code PFAL).
4.) Ongoing replication if performed in the update mode from R/3 to SRM will cause problems of users being broken in sporadic cases. It is advisable to use change pointers from BD14 to perform the ongoing replication.
There is an SAP docuemntation of EBP transports which explains in detail the replication. Hope this information helps.
Please assign points for usefull answers !!
Sundeep -
Fact sheet not visible in new Z business role
Hi all,
On creating a new Z marketing professional role after copying from the standard role, I am not able to find the option of viewing the Account Fact Sheet under the link "More" in the customer master. i didnt find any customizing wherein I could assign the fact sheet to the business role.
I've assigned the fact sheet to transaction types under Settings for activities but didnt work out. Any further settings ??
Deserving points to be rewarded, Regards,
Jacob.Jacob,
check note 1040229.
you have to maintain cluster view CRMV_BUIL_PRT (tx sm34)
there you have to link your newly created business role (its PFCG role) to the form view CRM_ACCOUNT_OVERVIEW_PRN
and to class/interface CL_UIU_PRN_ACCOUNT.
should work this way
regards,
Ineke -
CRM 7.0 How to create Business role & generate
Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash MishraHello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera -
SAP CRM 2007 Business role assignment
Hi all,
We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
1- We create a PFCG role : "pfcgrole1"
2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
3- assign the user to the PFCG role "pfcgrole1"
We have two cases :
CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
RESULT : The user logs in to CRM, the user gets error message "Logon is not possible because you have not been assigned a business role"
CASE 2:The user is not assigned to any position in Org management.
RESULT : The user logs in to CRM, everything works fine
my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
Thanks in advance.Please review these old threads first:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
There is a lot of technical background on how business role to PFCG role assignment works.
Thank you,
Stephen
CRM Forum Moderator -
Assign queries to authorization role via PFCG maintenace
Hi,
I would like to assign several queries to existing authorization roles.
Therefore I am using the transaction PFCG > maintain the menu > add "other" SAP BW Query URL and fill in the name as well as object description.
However, the new query will not be shown in the BEx Analyzer in the role folder.
What do I have to administrate that the query will be shown in the role menu (BEx Analyzer)?
Thanks!Dear Arvind,
thanks for your reply.
As an authorization administrator for SAP BI I do have the authorization for S_USER_AGR already.
I am just testing in our development system.
However, the query will not appear in the BEx Analyzer while selecting "Open Query" and search in "Roles".
As far as I know queries could provided to authorization roles via BEx Analyzer.
But does no possibility exists to maintain the authorization role via PFCG?
Regards, Christian -
Business Role - Link to PFCG role
Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen. -
Multiple PFCG Roles to a user and one business role
Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo LupinariYes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.
-
Assignment pfcg-role to user and assignment pfcg-role to business role
Hello, Gurus!
What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
As I see authrizations from pfcg-role assigned to business role have no effect to user...
Best regards,
Artuк Litvinov.Artur,
The business role assignment does not give a user that PFCG role. Instead it is just a mapping table and does nothing more.
Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient. In your scenario let's do the following:
You have pfcg roles:
RA
RB
You a have business role
B1
You have users:
Joe
Jack
Business Role B1 is assigned to role RA which contains UIU_COMP.
User Joe gets business role B1 and roles RB which does not have UIU_COMP. This will not let him use the webclient.
User Jack gets business role B1 and pfcg role RA. This will work because everything is there.
This means you need both the correct PFCG plus business role setup to make it work properly.
Take care,
Stephen -
How to maintain cluisterview for new business roles in SAP CRM2007
How to maintain cluisterview for new business roles in SAP CRM2007.
Table - CRMV_UI_NB
Regards,
BiplabI also look forward to a 'solved' answer to your question.
In the meantime, I'm curious to know if there are any organizations today running SAP B1 HANA for their production system. Would you know of any? -
Cannot modify an authorization object in pfcg role for a business role
Hi Experts,
I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow. Am I doing anything wrong?
Please help me.
Thanks
Ajith CHi Leon,
Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in the code. The pfcg configuration, I am skipping it for now. I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
Thanks,
Ajith
Maybe you are looking for
-
How to include an image file in an email
Hi, I want to send an image file (jpeg) in an email. Could some one help on this? Regards, kIDMan.
-
Canon mf 3420 scanner not working
MF 3420 printer, photo copying is working, but when tried to scan it says scanned not connected
-
Hi I am wanting to install Adobe photoshop elements 8 disk on our imac. I have just uninstalled it from our imac as we were getting messages about it missing components. When I install the disk into the cd drive on our mac it doesn't fire up or appea
-
Change Starting File Number for Camera/Card
I am moving from one Sony camera to the DSC-HX5V. However, the file number starts at DSC-00001, just like my older Sony. So, when I import and take pictures over time, I will no longer have unique file numbers/names for my photos. Also, I think when
-
Iphoto is quitting unexpectedly when I double click a photo
iphoto is quitting unexpectedly when I double click a photo within iPhoto to enlarge it or scroll all the way to the top to the most recent pictures. Any ideas? I have the most recent version and all updates are done. HELP!