Opportunity authorization

Hi,
Currently i could able to restrict the editing of opportunities for the partner function employee responsible using object crm_ord_op.
If i want to create a super user role which allows group of people to edit the opportunities, what objects i should use and what configuration change should be done for determination.
Regards
John

Hi John,
Will you be adding the group of people as some partners in the Opportunity document ?
If you see the Definition of this object "crm_ord_op", it tells that
If an user has a partner function of a specific partner function category in a document, this authorization object defines which activities can be carried out in this partner function.
Only partner function categories 'Employee' = 0005 and 'Person responsible' = 0008 are taken into account.
This authorization check controls other checks, for example, the authorization check for the transaction type, so that a user may process a document when the above criteria are met, even if he has no authorization for the corresponding transaction type and activity.
Defined fields
The authorization object checks the following fields:
u2022PARTN_FCT Partner function
u2022PARTN_FCTT Partner function category
u2022ACTVT Activity
Also You may want to check this link to see Authorization Objects and Authorization Fields
http://help.sap.com/saphelp_sm40/helpdata/EN/f6/57fa3ab5573919e10000000a114084/content.htm
Looks like the Authorization object "CRM_OPP (authorization object CRM transaction u2013 business transaction category opportunity) with authorizatin field "ACTVT" might help you.
rgrds,
Randhir

Similar Messages

Authorization Issue in Visibility of Lead and Opportunity Documents

HI,
I have 4 sales Org in my Project.
When an user from Sales Org 1 is searching a lead he was able to see all the leads
when I tried to change Lead or opportunity of other sales org with my user id, system says that "You have no authorization to execute action Change " the reason is "The authorization check for object CRM_ORD_OE has sent back the return code 12. The activity executed was Change. Return code 12:
I understand it as the system can't find necessary authorization . In my project they want to restrict the document visibility to other users. How can i restrict by which i can see only my documents.
With Regards,
Selvam T

To see only your transactions use auth. object CRM_ORD_OP.

Authorizations for Opportunity searches in CRM/EP?

Need help restricting user results in Opportunity searches.
Our authorizations scheme defines users by their sales group, but when doing searches in CRM/EP User 1 can see results for users 2 and 3 when doing an opportunity search which are defined outside of user 1's sales group. Does this require any additional config enhancements such as Account or Territory management?
Does this need to be solved by authorizations at field level, or is there a table where these restrictions can be maintained? So far I have been trying to restrict values via CRM_ORD_LP and B_BUPA_BZT.
Not sure if this is the correct forum to post in, if not, is there a forum on here specifically for CRM Authorizations or configuration?
<removed_by_moderator>
Edited by: Julius Bussche on Aug 7, 2008 3:10 PM

Hi Ram,
The way we ended up resolving this was by adding the authorization object B_BUPA_ATT to each sales user role. Each user had a secondary role which defined their particular sales group in the org model.
It involved some programming (which required an outside resource) on our development side, but it worked.
We basically had the consultant write code to perform a check against custom Z values in the AUTHTYPE field, and then the variables were the data placed in
the AUTHVAL1 and AUTHVAL2 fields. And obviously ACTIVITY was whatever the specific user was allowed to do with items in that sales area (postal code, country, etc)
SAP's preferred solution is something called ACE which creates an extra layer of authorizations, however we didn't have the time and resources to properly implement that. You may want to look into that if you have the time.
Hope this information helps!

Authorization - Sales Manager: Lead Management / Opportunity Management

Hi Portal Gurus,
As per our requirement, in the 'Sales Manager' role, under 'Sales Cycle', we need to provide only 'Lead Management' for one set of users and 'Opportunity Management' for another set of users and both for other set of users.
What would be the best way to do that. Thanks in advance for your help!
- Jas

Hello Jasendu,
The best way to implement this is to maintain a single Sales Role with all the sub catagories ('Lead Management' , 'Opportunity Management' ) and apply role filtering concept according to the users. That way you need to maintain a single Sales role. Check out the below blog for more details abour role filtering.
Filtering Role Content by User Attributes
Or else, you can create three different roles, one for each 'Lead Management' , 'Opportunity Management' and other containing both of them and assign to users accoedingly.
Regards
Deb
[Reward Points for helpful answers]
Message was edited by:
Debasish Sarkar

Authorization to Display product item in Sale Opportunity

Hi, Expert.
I use SAP CRM4.0
In transaction display business opportunity , when I display .
Can I customize the system to display product item for each user.
Any suggesion will be appreciate
Best regards
Siriporn T.

Hello Amber,
We had a similar requirement wherein we implemented a partner determination BADI and provided that BADI in an access sequence.
In this BADI, write the code to determine the partner based on the product or product hierarchy entered by the user. Assign this BADI to the access sequence in the partner determination procedure at the item level.
Reward with points if this helps.
Regards,
Gaurav Gera

Authorization in Webclient on Sales Office for Opportunity and Activity

Hi all,
I am trying to set up ou authorization scenario in CRM 2007 Webclient.
I would like to restrict the access to Opportunities and Activities based on the Sales Office of the user.
I have set up the following objects:
CRM_ORD_LP and CRM_ORD_OE.
The USER is assigned to a Business Partner (Employee) which is assigned to a Position which is assigned to a Sales Group -> Sales Office -> Sales Org.. etc.
In SAP GUI this is working fine but in the Webclient I am able to create/edit and display opportunities and activities for all Sales Offices.
Please let me know!
BR,
//Anders
Edited by: Anders Grönwald on Dec 4, 2008 12:49 PM
Edited by: Anders Grönwald on Dec 4, 2008 12:55 PM

Hi Anders
Were you able to resolve this issue
If so could you indicate how this was achieved
Regards
Eddie

How do I authorize my computer? I can not find the "Authorize This Computer" option anywhere.

PLEASE READ ALL EMAIL. ANYONE THAT CAN HELP WOULD BE GREATLY APPRECIATED. As you read through the emails, you will see that "C" the customer service person responds the same way. All the emails are from the same thread. I would reply to his email, he would, I guess, copy and paste an answer, and the response is the same. He never pays attention to the previous emails. HELP PLEASE!!!
This is very frustrating to me. If you read back through your emails, you state the SAME INFO 4 times. If you would read my email AND see thescreen shots attached you would see. Why do you continuously state the same info..(SEE RED HIGHLIGHTS BELOW).I NEED HELP ASAP TO GET THIS TAKEN CARE OF...Do you have any other info EXCEPT for what is listed below??????
IT DOES NOT GIVE THE OPTION TO AUTHORIZE COMPUTER!
I HAVE NOT CHANGED ACCOUNT NAME
IT DOES NOT REPEATEDLY ASK TO AUTHORIZE COMPUTER BECAUSE IT DOES NOT GIVE THE OPTION TO START WITH.
I TRIED EVERYTHING AT http://support. apple.com/kb/TS1389, 3 TIMES NOW. (ATHORIZING PURCHASES, HAVE THE CORRECT NAME, REMOVING THE SC INFO FOLDER).
I NEED HELP! IS THERE A PHONE # I CAN CALL??? CAN THIS BE FORWARDED TO YOUR SUPERVISOR SINCE YOU ARE UNABLE TO HELP?
From: iTunes Store <[email protected]>
To:
Sent: Sunday, January 13, 2013 5:00 PM
Subject: Re: EL : (en_US) Connecting & Downloading; Follow-up:
Dear
Thank you for replying. It's C from iTunes Customer Support.
Addressing your concern is really important for me. I will do my best to answer your question.
S, if your computer is not currently authorized to play your account's purchases, when you try to play an iTunes Store purchase, the authorization dialog will appear. You will see the name of the account that purchased the item. If you've changed your account name, replace the old account name with the new name, then enter your password and click Authorize. This authorizes your computer to play the account's purchases.
If you are repeatedly asked to authorize your computer to play your purchases, you may find this article helpful:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
If you still cannot authorize your computer, please include a screen shot of any error received, as well as any additional details about the error itself.
Thank you for contacting the iTunes Store.
Have a great day!
Sincerely,
C
iTunes Store Customer Support
http://www.apple.com/support/itunes/ww/
I work Friday to Tuesday, 10:00 AM to 07:00 PM CST.
Thank you for allowing me the opportunity to assist you.
I do not get an error, I do not even get the authorization dialog. I have sent 2 screen shots, they are attached.
When I try to play an iTunes store purchase, a bubble pops up and states that this computer is not authorized. It does not pop up account name or password. I have also completed everything stated in the http://support.apple.com/kb/TS1389 link.
This is very frustrating.
S
From: iTunes Store <[email protected]>
To:
Sent: Friday, January 11, 2013 3:22 PM
Subject: Re: EL : (en_US) Connecting & Downloading; Follow-up:
Dear S,
Thank you for replying. It's C from iTunes Customer Support.
I understand that you have been unable to play some of your iTunes Store purchases. Addressing your concern is really important for me. I will do my best to answer your question.
S, if your computer is not currently authorized to play your account's purchases, when you try to play an iTunes Store purchase, the authorization dialog will appear. You will see the name of the account that purchased the item. If you've changed your account name, replace the old account name with the new name, then enter your password and click Authorize. This authorizes your computer to play the account's purchases.
If you are repeatedly asked to authorize your computer to play your purchases, you may find this article helpful:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
If you still cannot authorize your computer, please include a screen shot of any error received, as well as any additional details about the error itself.
Thank you for contacting the iTunes Store.
Have a great day!
Sincerely,
iTunes Store Customer Support
http://www.apple.com/support/itunes/ww/
I work Friday to Tuesday, 10:00 AM to 07:00 PM CST.
Thank you for allowing me the opportunity to assist you.
Please see the attached document. I am unable to authorize computer.
S
From: iTunes Store <[email protected]>
To:
Sent: Saturday,
January 5, 2013 5:36 AM
Subject: Re: EL : (en_US) Connecting & Downloading; Follow-up:
Dear S,
Thank you for replying. It's C from iTunes Customer Support.
S, I understand that you have been unable to play some of your iTunes Store purchases, and I'll be happy to help you with this.
If your computer is not currently authorized to play your account's purchases, when you try to play an iTunes Store purchase, the authorization dialog will appear. You will see the name of the account that purchased the item. If you've changed your account name, replace the old account name with the new name, then enter your password and click Authorize. This authorizes your computer to play the account's purchases.
If you are repeatedly asked to authorize your computer to play your purchases, you may find this article helpful:
iTunes repeatedly prompts to authorize computer to play iTunes
Store purchases
http://support.apple.com/kb/TS1389
If you still cannot authorize your computer, please
include a screen shot of any error received, as well as any additional details about the error itself.
Thank you for contacting the iTunes Store.
Have a great day!
Sincerely,
C
iTunes Store Customer Support
http://www.apple.com/support/itunes/ww/
I work from Tuesday-Saturday, 8.30 AM to 5.30 PM CST.
Thank you for allowing me the opportunity to assist you.
I try to play an iTunes store purchase, but it just gives the box that is shown in page 2. How can I authorize my computer?
From: iTunes Store <[email protected]>
To:
Sent: Friday, January 4, 2013 1:47 AM
Subject: Re: EL : (en_US) Connecting & Downloading;
Follow-up:
Dear S,
Welcome to iTunes Store Customer Support. My name is C.
I understand that you were unable to authorized your computer. I know how eager you must be to have this issue sorted out. I will be happy to resolve this concern today.
S, if your computer is not currently authorized to play your account's purchases, when you try to play an iTunes Store purchase, the authorization dialog will appear. You will see the name of the account that purchased the item. If you've changed your account name, replace the old account name with the new name, then
enter your password and click Authorize. This
authorizes your computer to play the account's purchases.
If you are repeatedly asked to authorize your computer to play your purchases, you may find this article helpful:
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases
http://support.apple.com/kb/TS1389
If you still cannot authorize your computer, please include a screen shot of any error received, as well as any additional details about the error itself.
Thank you for contacting the iTunes Store.
Have a great day!
Sincerely,
C
iTunes Store Customer Support
http://www.apple.com/support/itunes/ww/
I work from Tuesday-Saturday, 8.30 AM to 5.30 PM CST.
Thank you for allowing me the opportunity to assist you.
Details:
I am trying to authorize my new computer. I do not see AUTHORIZE MY COMPUTER anywhere. I see COMPUTER AUTHORIZATIONS, but not an option to authorize.

There's a couple of ways to get through to the authorisation controls in the 11.0.x versions.
The control is still in the Store menu, but first (if you're using iTunes versions 11.0.x) you might need to bring up the menu bar to see the Store menu.
If you're using 11.0.x, click on the wee boxy icon up in the top-left corner of your iTunes to see the "Show Menu Bar" control, as per the following screenshot:
Then you'll find the control in the Store menu:
Alternatively, if you don't want to bring up the menu bar, it's still possible to get into the authorise controls via nested menus accessible from the wee boxy icon. Here's a screenshot of where to find them:

Used PCUI navigation to follow up a new opportunity, but it doesn't work.

Hello,
We faced a authorization problem with PCUI Navigation. We have configured a navigation for following up other opportunity.
If the user has the SAP_ALL and SAP_NEW authorization, the navigation can work. But we changed the user authorization, the navigation doesn't work.
If we used the user at GUI, the user can follow up a new opportunity successfully.
Symptom:
Open an opportunity and click 'Create opportunity'. The EP open a new window for following up a new opportunity. But the new window is blank(If the user has sap_all and sap_new, the new window can show the new opportunity which was created by navigation).
BSP authorization setting:
BSP_APPL Authorization for BSP Applications
Application CRMD_BUS2000111, CRMD_BUS2000111_F4
View for Display in the People *

Assign the Roles to Object type will solve the issue...

Can't Resolve Issue via Phone/Genius Bar/iTunes E-mail-iTunes Authorization

Issue with iTunes authorization - Full Conversation with iTunes tech support. ( Top : Most Recent - Less confusing if you read bottom to top )
*This is still not working, I followed the instructions as well as called Apple Support on the Phone. I visited a Genius Bar today and they too could not fix my issue.*
*When i try to authorize the 'other email address' I get this : "your apple id or password was incorrect". I tried to recover the password and i get: "This apple id doesn't exist."*
On Jan 24, 2009, at 6:27 PM, iTunes Store wrote:
Hey Zach,
Liz here! I now see that you had already tried that. I am sorry about my initial misunderstanding. I have gathered some information, and I will be happy to further troubleshoot this with you!
I found an article for you on the iTunes support website. I am sending you a link to this article, which I believe may help. Please review the article using the link below to troubleshoot this authorization issue, and remove the SC folder from your computer.
iTunes repeatedly prompts to authorize computer to play iTunes Store purchases:
http://support.apple.com/kb/TS1389
If you are still asked to authorize your computer after following the instructions in the article above, please let me know. I will be happy to help Zach!
I want to thank you once again for being such an extremely valuable member of the iTunes family. I really hope you will continue to be an active iTunes customer. Have a great weekend Zach!
With warm regards,
Elizabeth
iTunes Store customer Support
Thank you for allowing me the opportunity to assist you. You may receive an AppleCare survey email; any feedback you provide would be greatly appreciated.
*I do not believe you answered my question correctly, I said in my*
*question how i tried to authorize my music when a differnt email*
*address was in the apple Id field. I changed it to my current apple id*
*and I get the responce from the system with this computer is already*
*althorized, yet the song is still locked*
On 24/01/2009, at 5:00 PM, iTunes Store <[email protected]>
wrote:
Hello Zach,
I understand that you have been unable to authorize the purchases on
your iTunes account "[email protected]" due to three previous
account names not authorizing for you. I am sorry to hear about this
Zach. I can certainly appreciate how eager you must be to have this
resolved. My name is Liz, and I will be more than happy to help you
with this today!
If your computer is not currently authorized to play your previous
account name's purchases, when you double-click an item you
purchased before you renamed the account, the authorization dialog
may show the old account name. If this happens, you will need to
remove the old account name from the account name field, type the
new account name, and click Authorize. This authorizes your computer
to play the account's purchases.
If you are unsure about which account was used to purchase a
particular item, follow these steps:
1) Control-click (or right-click) the item in your iTunes Library.
2) Choose Get Info from the menu that appears.
3) Click the Summary tab. The account name will be listed on the
right.
If you need further assistance in locating the current account name,
please reply with the account name listed in your items' Summary
tab. In addition, please include the order number for those items if
possible.
You can locate order numbers by following these instructions on
reviewing your purchase history:
Seeing your iTunes Store purchase history and order numbers
http://support.apple.com/kb/HT2727
I sincerely hope that this helps. Please do not hesitate to let me
know if you have any further questions or concerns. I will be happy
to help. I appreciate your patience.
I want to thank you for being a valuable member of the iTunes
family. I hope you will continue to be an active iTunes customer.
Have a great weekend Zach!
With warm regards,
Elizabeth
iTunes Store customer Support
Thank you for allowing me the opportunity to assist you. You may
receive an AppleCare survey email; any feedback you provide would be
greatly appreciated.
*Customer First Name : Zach*
*Customer Last Name : xxxxx*
*email : [email protected]*
*Web Order # :*
*Support Subject : Authorization*
*Sub Issue : I can't authorize my system to play purchases*
*iTunes Account Name : [email protected]*
*Platform : Mac OS X 10.5*
*Country : United States (English)*
*Comments: I have contacted Apple's Phone Support and they could not*
*help me with my issue and referred me to this email address.*
*Problem : I currently have iTunes' Latest Version with a apple id*
*of : [email protected]*
*I've had iTunes for over 3-4 yrs. and over the time i've had changes*
*of email addresses and therefor I would update my itunes info to the*
*new current email address. I noticed how my Apple ID changed to my*
*new email address and proceeded thinking this was normal. Now when I*
*moved my iTunes with the migration assistance built in to Apple's OS*
*- Utilities, I can only play songs with my current apple ID - [email protected]*
*. If i were to play a song i purchased with :*
*"[email protected]" or even recover the password to this Apple*
*ID I get the response telling me "This apple ID does not exist." -*
*After reading online I tried replacing the field with "[email protected]*
*" with my current apple ID : "[email protected]". Once i click*
*'Authorize' the operation goes through and comes back with "This*
*computer is already authorized [ to that Apple ID*
*'[email protected] ]. I still try to play that song and it still*
*requires a authorization.*
*Previous E-mai; / Apple IDs :*
[email protected]
[email protected]
[email protected]
[email protected]
*Current Apple ID and E-mail Address :*
[email protected]
*TrackID: 7152211*
Message was edited by: dirty ankle

I also found, finally, that selecting "manually manage" for the device on the summary page in iTunes for the helped.

Possible to reset authorization limit?

Would one of you be kind enough to help a geezer? I'm flummoxed by this "authorization / deauthorization" business.
I know that you're supposed to deauthorize iTunes before getting a new computer. However, I've never had the opportunity to do this because every one of my laptops died suddenly and without warning.
This past week I had to send my laptop to Dell for repairs. When I got the laptop back, iTunes wouldn't synch with my iPod until I reauthorized the laptop. So I reauthorized.
Afterwards, iTunes spit up a message saying that I was now authorized on FOUR out of a permissable FIVE computers. Mind you, I've never owned more than one laptop at a time, and since all my other authorized laptops are dead and gone, there's no question of deauthorizing them.
So my question is:
With only one authorization left before iTunes stops authorizing, is there a way to reset iTunes so that I can continue authorizing beyond my five-computer lifetime limit? What if I live to be 80? That's four more laptops!
Thanks kindly for your help.
Brooks
iTunes 9.2.1.5
Windows XP Pro

After digging through the forums, I found this link:
http://support.apple.com/kb/HT1420
Sounds like I can "deathorize all computers associated with my Apple ID," thereby resetting my authorization limit.
Will give it a shot, and come back if I have any problems.
Thanks anyway!

Error when trying to create Opportunity

Hi All,
When I am trying to create opportunity in CRM 2007 getting an error as mentioned below
1) An exception has occurred during program processing
2) You have no authorization for organizational level for the transaction
Can some one please explain why this error is coming?
Component in which I have to check for analysis.
Thanks,
Srinivas

Hi,
Try to figure out which action/event triggers the auth check in your create oppt screen. Set the an external break-point to start the debugger and while the debugger is on set a break-point at statement 'AUTHORITY-CHECK'. This will set a break-point at all the the auth check statements automatically. Execute the program, the system stops at the statement 'AUTHORITY-CHECK'. Now check that auth check passed or failed based on SY-SUBRC value.
Add the authorization to your user role based on this information.
Regards
Prasenjit

Maintenance of Authorization for transactions in CRM 5.0.

Hi Experts .
We are using CRM 5.0 with PCUI.
TheBusiness requirement is to maintain authorization for own transactions.the users who is involved in transactions should only be authorized to Open & see the transactions.Other users who are not involved in partner function like "Assigned to" & "Account responsible " should not be able to open & see the transactions like Activity .Lead , Opportunity ,Sales orders.& Service orders.System should give error message saying no authorizations.
We tried with below authorization objects to achieve this
CRM_ORD_OP (your own documents)
- CRM_ORD_LP (organization levels)
- CRM_ORD_PR (transaction type)
- CRM_ORD_OE (sales area/service Org).
- CRM_ORD_RL
- CRM_ORD_RS
But still system allows to open transaction belong to others.
Is there any alternative to control this.
Helpful answers would be rewarded max points.
Thanks in Advance.
Regards,
Basavaraj Patil

Hello
in order to check authority object CRM_ORD_OE,
CRM_ORD_OP and CRM_ORD_LP must not give authority. Please see
online documentation for detailed information:
http://help.sap.com/saphelp_crm40/helpdata/en/e9/
b29a39e7aee372e10000000a11402f/frameset.htm
Under the chapter 'Process Flow of Authorization Check in Business
Transactions' you will find detailed explanations.
I hope that I could be of help with that information.
Gerhard

ITunes Asking for Authorization to Play Downloaded Song

I am having a problem I've never had before. iTunes won't play a song I downloaded 11.0.4 won't play a song I downloaded from the iTunes Store as part of an album. It asks to authorize the computer to play the song. When I enter my name and password, it says my computer is already authorized. But then it wil not play the song! I've tried the troubleshooting tips on the webpage (ie deleting my SC folder, etc) to no avail. The "Info" section on the song, oddly, doesn't indicate that the song was downloaded from the iTunes store (the rest of the songs on the album list me as the downloader). But I also can't re-download the song, because the store thinks I've already downloaded it. The store offers me the opportunity to play the song, but then the same authorization problem happens.
Any help would be much appreciated.

Delete it and then redownload it.
(86043)

Control authorization of mass change functionality via PCUI

Hi,
We are having the following issues with the Opportunity iview, com.sap.pct.crm.opp.opportunities_s.(Business package for CRM 5.0 and contains functionality CRMD_BUS2000111).
Once the user clicks Go..he has the list of Opportunities. He can select some or select all and use "Mass Change".
We would like to control the functionality of "Mass Change" attribute in the backend CRM System so that only a few people can be authorized to do this. However we are not able to find any CRM authorization
object that controls the mass change activity for opportunities and pursuits in the backend CRM System.
What is the backend CRM Authorization object that controls this functionality in the backend CRM System ?
Regards,
Rajan.K

Frank,
In IW38/IW3N we added our own Mass-Change button (in addition to the standard option) via Enhancement Spot ES_EAM_LIST_ENHANCEMENTS_EXT. This was required to perform functions that don't exist in the standard mass-change function e.g. mass-add/delete operations, mass-un-TECO, mass-un-CLSD, etc.
This Enhancement Spot may work for IE05 too.
PeteA

Opportunity is not showing In IC Webclient Profile Screen

Dear all,
I have called a Opportunity Transaction type in IC Webclient Profile by assigning Business Transaction Profile to ICWC Profile.
Now I can see that opportunity in navigation bar profile, but when I click on it, system is giving an error message saying
" Execution not possible; data flow errors".
and some times opportunity screen is opening in display mode.
I don't know why this problem is coming. Any of you please help me to resolve this problem.
Your help will be highly appreciated.
Thank you
Raghu ram.

Hi,
Opportunity screen is opening in display mode because you may have configured it to open in display mode in Transaction Launcher wizard. If you change the same to "Change" mode it will open in change mode.
Besides, the security authorizations suggested by Glenn. You should also ensure your Internet Explorer security settings are also appropriate. You need to add the relevant website to Trusted site also.
Regards,
Deepak

Opportunity authorization

Similar Messages

Maybe you are looking for