Mass Upload of PFCG Roles and Transactions

Hey Guys,
I have done the recording of PFCG.
i have given
1)Role Name
2)Desc
3)MENU tab ADD Transaction
pop up opens for entering the Transactions
4)i have added 2 transactions in my recording.
vl02n
vl03n
i have DOwnlaoded the Template From Test Configuration.
I have modified the Template and Saved it in Tab Delimit Format.
Now when iam Uploading the Data in foreground.
it accepts the Role Name,Desc,Goes to menu Tab,Add transaction now the Pop up Opens.
it Accepts All this from my test File.
Now Problem is it Does accept the First Record Transaction from My test File va01 but when
the cursir goes to 2nd line it shows the previous entry just entered.i.e va01.
where as in 2nd position va02 is supposed to be accepted.
how do i Clear this..
while looking at the processing code.
I get this
ID WND[1]/USR/TBLSAPLPRGN_WIZARDCTRL_TCODE/CTXTS_TCODES-TCODE[0,0] "VA01
ID WND[1]/USR/TBLSAPLPRGN_WIZARDCTRL_TCODE/CTXTS_TCODES-TCODE[0,1] "VA01
Now wht do i do so that it picks other tcode from my test file and not the previous record.
Any one who could be of Help.
can anyone leave in his/her Cell No so that I could Call and make u Understand the situation.
it has been 4 days and iam still Stuck with this.
Thanks Awaiting,
Essam

Hello,
I had a similar requirement & looking at the tree display i had decided no BDC :-D
I debugged PFCG & found SAP uses the FMs of the func. group PRGN to read/write data to the tables AGR_1251 & AGR_1252.
The FMs are:
1. PRGN_1251_SAVE_FIELD_VALUES & PRGN_1252_SAVE_ORG_LEVELS to prepare the tables for the update.
2. Call the FM: PRGN_UPDATE_DATABASE to make the database changes & write the change pointers too !!!
Hope this helps you.
BR,
Suhas

Similar Messages

Report to view all the Roles and Transactions assinged to a particular user

Hi,
I need to develop a report to view all the Roles and Transactions assinged to a particular user along with the Authorization values. So, if provide the Username, the report should be able to give Roles, Transaction Codes and the fields and thier authorization values for that TCodes..
Regards,
Sreenivas Raju

Try this FM once - SUSR_USERS_LIST_ALV . It provides a list with Roles, Profiles, and also a detail button to check the authorization values etc.
Also try this FM - SUSR_USER_DISPLAY_WITH_AUTHS, SUSR_USER_AUTH_FOR_OBJ_GET , SUSR_USER_DISPLAY_WITH_S_TCODE

Mass upload of Portal roles

Hi,
I need to upload ESS and MSS roles to all my uesrs at one go.
I have created all the users but now wanna assign only roles and group.
Please guide for template or where can i do this mass upload.
Regards,
Brijesh Kumar
do not put email addresses in your posts*
Edited by: Michael Nicholls on Mar 16, 2009 10:37 PM

Hi,
I want to upload Portal roles ess and mss to all my 150 user id's at one go. for that i need a way out, can it be possible through a BDC or any format so that can be impoerted directly.

Can anyone help me understanding the links between Launchpad roles, PFCG roles, and portal roles!?!

Hi experts,
I am looking at the newer EhP5 and EhP6 functionality for ESS and MSS, specifically the WD ABAP portal applications. I've turned on all the business functions and services I think our team wants, however I'm confused on how to move forward in using them. For a little tech info, we are on EhP6 for the backend, but our portal is 7.02.
My first step was to assign the com.sap.pct.erp.ess.wda.Employee_Self_Service_WDA portal role to our test ESS user group in our sandbox environment. The ESS user got a new ESS tab in the portal and it's linked to the Launchpad role ESS, Instance MENU. I'm comfortable with ESS at this point, still need to learn more about customizing the menu for different employee groups without creating additional Launchpad or SAP roles.
Question 1: Correct me if I'm wrong, but is the Launchpad roll ESS, instance menu linked to the PFCG role SAP_EMPLOYEE_ESS_WDA_2?
Next, I was looking to see if there was a similar portal role for MSS, but it seems I can't find one. I implemented the MSS Addon 1.0 for ABAP and the portal and got a new MSS portal addon role, but it doesn't seem to be connected to any MSS Launchpad role.
Question 2: Is there a portal role to assign to users/groups that is linked to one of the MSS Launchpad roles? If yes, what business function or service is it a part of?
I'd like to use of the existing MSS Launchpad role to test some of the new portal functionality, but I'm not sure how to do it.
Question 3: How is a Launchpad role assigned to a SAP role in PFCG? Anyone have some documentation they can point me too?
Kind regards,
Garrett Meredith

Thank you Samuli, this was very helpful in connecting many of the pieces.
For now I have a very good understanding of how the new ESS is controlled and modified.
It appears that FPM_LAUNCHPAD_UIBB could be used to develop a similar component to call a custom launchpad role for MSS containing a customized list of WDA applications.
Is a MSS Launchpad a good way to pursue since we use a SAP enterprise portal?
I found a PAOC_MSS package containing other MSS embedded packages.
Could I use one of the embedded packages in there and by creating a Component configuration in the FPM_LAUNCHPAD_UIBB for one of the MSS WD applications?
Based on the documentation link above, PFCG roles are for NWBC HTML or Desktop versions.
Kind regards,
Garrett

CRM Architecture: relations between business roles and transaction

Hello Experts!
I am dwelling on the topic of the relations between Business Roles, Transactions, Transaction Types etc. Do you know if there is any architectual diagram to make clear how these objects are related, and how they depend on each other?
Thank you for help!
Karolina

Hi Javier,
As far as I understand you want to restrict transaction types per business role.
You can achieve this by customizing. You can create a transaction profile in customizing for each business role and assign the transaction types you have created to this transaction profile.You can find this customizing activity in spro transaction.
Then you can assign transaction profile you have created to your business roile by assigning function profile 'transaction profile' to the business role in crmc_ui_profile tcode.
In this way when you login with the business role the transactions you have maintained in transaction profile will only be shown up in the pop up.
I hope this helps yiour requirement. Let me know if you require any further information. Thanks.
Regards
Yogesh

Authorisation roles and transaction codes for users(MTO--PPmodule)

Hi !!!
GURUS !!!!!!!!
I am working here on live project for make to order scenario.
We are using only batch management.
Could you give me transaction codes for users for authorisation roles.
All codes from start to end scenario.
Regards,
Nitin

Dear,
You have to do the JRM - Job role mapping. The list of transactions cannot be decided commonly across all implementations, as per your Business process definition you have to list the transactions invovlved and which business roles are required for that.
One example: PP_Planner is a Role, this is applicable for the planning person, he will be given transactions related to SOP, DM and MRP, he will not be given transactions related to SFC. Its vice versa for a operations person.
Thanks & Regards,
Vijaya Bhaskar A

Roles and transaction authorizations for XI developer

Hi All,
Can anyone validates my requirements to Basis gui in SAP-XI installation.
Transactions authorizations needed are:
SXMB_IFR
SXMB_MONI
SXMB_MONI_BPE
SXI_Monitor
SXI_Cache
IDX1
IDX2
ALERTCATDEF
SM59
WE21
WE20
Do we require any other transactions as a developer.
2) During File-XI-Idoc scenario, we need to place Idocs in one SAP directory with read/write and delete permisions
Can any one suggests howmuch size should be allocated for this directory.
Regards,
venu

HI Venu
As a developer you need to have also the authorization of SE80..SE38..etc which are there in ABAP
There is predifined Authorization Group for Developer ..Just ask him to add you into that group...You will automatically gain those authorization...
Regarding
File-XI-Idoc Scenario...
You need not to place any IDOC in any of You directory..
You just place a text file which contains all the required information in such a format that can be easily converted into XML using File Adapter...Once You will convert that text file into XML format after that you need to MAP this XML Formated Data to Your IDOC Message Type.
Also Check out these links
it could be helpful for your scenario...
/people/anish.abraham2/blog/2005/12/22/file-to-multiple-idocs-xslt-mapping
/people/prateek.shah/blog/2005/06/08/introduction-to-idoc-xi-file-scenario-and-complete-walk-through-for-starters
http://help.sap.com/saphelp_nw04/helpdata/en/b9/c5b13bbeb0cb37e10000000a11402f/content.htm
Cheers:-)
Mithlesh

Business Role - Link to PFCG role

Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,

Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen.

Download role and trasacktion

hi guys,
can you help me how to download all transaction and role on R3 or BW to SAP EP.
thanks for your help
rgds
echo

Hi Echo,
The tool you are looking for to upload roles and transactions from an SAP system can be found Under the System Administration tab in the portal. Under the Transport menu, you will see an entry in the detailed navigation called role upload.
You will have to have your SAP systems already defined in the portal. Then you select the system and pick the object type. Then follow through the rest of the wizard.
With that said, I'd caution you on trying to bring over all the roles and transactions. It could become a big maintenance problem in the portal. First there are thousand and thousands of transactions in an R/3 system. Many of them never get run. Also, depending on how your R/3 system is configured, there may be many roles in R/3 that would be meaningless in the portal.
My suggestion is instead of pulling everything over and having a maintenance nightmare later would be to spend some time now and only bring over the roles and transactions that are necessary.
Hope this helps,
John

Personas and PFCG Roles

Hello community,
I am working with a team to help deploy Personas for our production systems. I was wondering if there was a way to provide access through PFCG roles in SAP? I know about the admin transaction and how to give access there, but we are trying to make gaining access to personas an automated process. Could there be a way to automically give access to everyone in SAP without ever having to look at the /persos/admin_ui transaction?
If both answers are no, here is one more thought: Could personas access be given through automatic user provisoning in IDM?

hi terrance,
Using PFCG roles, you can create groups (under mass Group Maintenance) and then provide PERSONAS authorization to that group.
For sync-up of users in that role on regular basis, check Tamas reply above.
Best Regards,
Sushant
Sorry, my update over assigning personas role directly to a group was incorrect.
Message was edited by: Sushant Priyadarshi

Business Role and PFCG Role

Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.

Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen

Relation between OOSB and a PFCG Role?

Hi folks,
Is there a link between OOSB and a PFCG role?
I would like to avoid inputting a person through OOSB. Basically, my aim is to link a profile created in OOSP to a profile (or role) created in PFCG.
The final objective is to assign Admin people in a single role and, depending their company codes assigned in the org. struc., see only the people from those companies when using BBPUSERMAINT transaction.
Any feedback or others solution?
Thanks
Regards - chris

Hi
Which SRM version are you using ?
I have not tried this ever yet... so difficult to comment on this.
Anyways, I guess, this will affect to all levels down the line wherever inherited. Be careful while doing this.
<b>Please go through the related links -></b>
Re: SRM 4.0 Security Concept
Re: Manager is not able to change attribute
SRM 4.0 & structural authorizations
Do let me know.
Regards
- Atul

Role Maintenance Transaction PFCG

Hi.
I have a question (as many others in here) regarding transaction PFCG functionallity from an ABAP program.
I would like to generate derived roles from the master role, and I have made a recording of PFCG and used it as Call Transaction, without any luck, as it is an Enjoy transaction.
I have searched for BAPI's, function modules, even tried to build my own program (based on ) and I am stucked - no further ideas.
Can you supply me with a BAPI, Function module etc. which does the same as PFCG Generate derived roles?
Thank you in advance,
Best Regards.
Søren Holmen, March IT

Hi again - I found the solution myself - and wants to share it with you.
    SUBMIT suprn_regenerate_dependent
      WITH top_agr = gw_agr_time-agr_name
      WITH gen      = 'X'
      AND   RETURN.
Standard program "suprn_regenerate_dependent" is perfect for this issue!
Best regards.

Job role design - transaction role and auth object role

Hi all, please kindly comment following job role design:
(1) transaction role:
Keep transactions in single job role to represent business processes in different application areas, e.g.MM: maintain PR, PO, OA. CO: maintain cost center, internal order HR: maintain org structure, personnel management.
The single job role will only keep role menu, object S_TCODE and inactivated all other application related authorization objects.
(2) authorization role
Keep application component related authorzation objects except S_TCODE in single job role by different application area, e.g. Objects of MM_B, MM_E, MM_G in MM role. Objects of K_CCA, K_CSKS_SET in CO role. Objects of HR in HR role.
Then maintain org level of MM, CO, HR roles for different companies, e.g. Company A MM role, company A CO role, company A HR role, company B MM role.;....
User will be assigned transaction role + auth object role. For example, user of company A to perform MM and CO functions will be assigned
with MM transaction role + company A MM role + company A CO role.
Please let me know the pros and cons of above design. Thanks.
Regards,
Donald
* I can see the disadvantage of this design is during SAP upgrade (SU25), revised of authorization object will not reflect in authorization role

Brent Van Dyck wrote:
Keep in mind the project was for an HCM implementation where there's already hardly any connection between tcodes and authorization values so it may have made more sense in that context than it would in a classic SD/MM.
That is correct - but it still exceeds "horrible" beyond imaginable boundaries if you try to split the fields of the objects into different roles and expect it to work or that there will be less roles.
In the case of HCM and also BW the auths admin needs to know more about the data and organization than what classic ERP auths admins can get away with. That is why they take longer to migrate away from manual profiles and have a greater tendency to have manual authorizations inserted into roles - which could however also be achieved by maintaining fields proposed without values and at least proposing those (such as activity type fields) which are known.
But splitting cube / characteristics / key figures or infotype / personel group / auth code into different roles can only go wrong.
Another mistake some "value role experts" sometimes make is that they don't want Su24 proposals in PFCG because they don't understand them. So what they do is that they clean out the SU24 tables completely... Well... the side affect of that is that all SU24 check indicators flagged as "no check" suddenly become alive in their system although there are mostly good reasons not to have the checks active.
Cheers,
Julius

Uploading PFCG Roles - BP_CRM_ROLES.ZIP

Hi all,
We are following the Building Block C04 to set up the CRM 2007 WEB UI.
According to the documentation we are supposed to upload predefined roles. These predefined roles are included in the file BP_CRM_ROLES.ZIP.
Anyone who knows from where I can download this file?
Thanks,
//anders

Hi Anders,
I believe that C04 describes to create Authorization Objects for the PFCG roles based on your Business Role.
E.g. Business Role: ZSALESPROFESSIONAL
PFCG role:Z_PFCG_SALESPRO (You assigned this to your Business Role. At this point PFCG role is an empty Role)
Now you can generate Authorization Objects based on your Work Centers and Navigation Bar profile defined in Business Role. To do this:
1. Execute the report CRMD_UI_ROLE_PREPARE. It will generate the txt file with the name of you Business Role in SAP Work directory. e.g. ZSALESPROFESSIONAL.txt
2. In edit mode, Under Menu in PFCG select Import from file and load this from SAP Word Directory.
3. It will generate all the required Auth. Objects .
Hope it helps. If not revert me with more details.
Regards,
Bobby

Mass Upload of PFCG Roles and Transactions

Similar Messages

Maybe you are looking for