Organizational Model - WebUI business role assignment

We have created the organizational model in our system where we have the levels that are tied to a specific business role.   We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment.   I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
Any help would be greatly appreciated. 
Thanks,
Darcie

Hi Robert,
maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
regards.

Similar Messages

  • Business Role Assignment to User by Organizational Model

    We have created the organizational model in our system where we have the levels that are tied to a specific business role. We have been manually assigning all of our users to these organizational model levels in order to have the business role assignment. I am curious if there is a program or easier way to do this than to have to create the assignment to the employee record manually in the org model.
    Any help would be greatly appreciated.
    Thanks,
    Darcie

    Hi Robert,
    maintaining the user profile directly may be easier with only a few employees but for large companies this method will end up being more maintenance intensive.
    for Org you only have to maintain it on the Org unit or position and all employees underneath will inherit the role; whether it's 2 individuals or 2000. and if the person is moved into a different position laterally or through promotion there would be no maintenance required as the information would replicate from HR (if you use/have the system) and the person would inherit the new position and role automatically.
    for User parameter if you only have 2 individuals it is easier but 2000 is too much to maintain. there is some automation but would require you to create them and run them yourself.
    pfcg at most companies do not fall under general master data maintenance and would require involvement from the security group and they often do not want to generate empty or unnecessary security/authorization profiles - the maintenance workload is shifted to them also in this case.
    regards.

  • Maintaining WebUI Business Roles in PFCG/Infotype 1263

    Hello there,
    we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
    As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
    Does anyone have an idea? Or have tried this before?
    Thanks and regards,
    Jodi
    Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

    Hi Jodi / Ghayss,
    I think you should be interested in the business role determination logic:
    The system finds the business role in the following sequence:
    1. check if there is any business role assignment in SU3
    2. check if there is any business role assigned in the organizational hierarchy
    3. check whether the pfcg role assigned to the user is asscociated to any business role
    So basically what you need to do is:
    1. assign the PFCG role to the business role
    2. assign the PFCG role to user in su01
    Then the system will find the business role accordingly.
    Cheers,
    David Wang

  • SAP CRM 2007 Business role assignment

    Hi all,
    We are using CRM 2007. and we are trying to assign Business roles to users using the PFCG ROLE ID attribute.
    1- We create a PFCG role : "pfcgrole1"
    2- We create a Business Role "Businessrole1" and put PFCG Role id = "pfcgrole1"
    3- assign the user to the PFCG role "pfcgrole1"
    We have two cases :
    CASE 1:The user is assigned to a position in Org management but the position does not have any Business roles assigned.
    RESULT : The user logs in  to CRM, the user gets error message  "Logon is not possible because you have not been assigned a business role"
    CASE 2:The user is not assigned to any  position in Org management.
    RESULT : The user logs in to CRM, everything works fine
    my interpretation : org management has precedence over business role assignment using PFCG roles and blocks Business role assignment even if the position has no Business roles assigned
    Anyone has any idea how to assign business roles using PFCG ROle ID even if the user is assigned to a position without any business roles
    Thanks in advance.

    Please review these old threads first:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    There is a lot of technical background on how business role to PFCG role assignment works.
    Thank you,
    Stephen
    CRM Forum Moderator

  • Business role assignment get lost

    Hello *,
    from time to time single users report logon problems due to missing business role assignment.
    In these cases business role was assigned via user in tx su01 directly. Whenever it happened the affected user itself is shown for last modifier of user record. But the users of course are not authorized to edit this data.
    We assume that maybe the personalization in web ui could be the reason but up to know the behaviour was not reproduceable.
    Does anyone know this issue?
    Kind regards
    Thomas

    Hi Thomas,
    Sorry but maybe I've explained myself poorly. You said that business roles that were missing are normally assigned directly in SU01. Then, in order to try to understand how they are remove, in SU01 transaction there is a functionality that allows you to see the change history for every add/removal of a role. This will tell you the user that performed the action and which tcode he used.
    Check this functionality that it's available as a menu option in SU01. Maybe it can give you some good clues about what's happening.
    Kind regards,
    Garcia

  • Report alle Business Roles assigned to Position

    Hello,
    I'm looking for a report wich brings a coomplete Objectdescription of an incorporate position in a organizational Model. Very important is the information which business role (we use CRM 2007) is assigned to the position.
    I checked already report rhstru00 but I don't know which structure parameters I have to take to get out the required information.
    There must be a way to get this information.
    Thanks a lot in advance!
    Best Regards
    Stephan Jung

    Step1
    U should know the Personnel number of the person u want to assign role.
    Step2
    PA20 to do Org assignment
    Info type = get the position number
    Step3
    Go to PO13 for Position number
    You assign the position number to Role (basically you create a relationship b/w Position number and Role here)
    Define relationship “B   007” Relationship type (Always select this Relationship type)
    Step4
    Go to SU01; create a user ID for THAT Personnel number ( If the user don't have one)
    Step5
    Go to PA30 you define relationship between Personnel # and User ID
    Create Info Type 105, Subtype 0001
    In ID/Number = User ID and save
    For personnel number
    Step6
    Run PFUD
    To update user master record i.e. to enter the role that is assigned to that position in org level. Put the Role name and select Reconcile User Master Data and execute.
    Or
    In SE38 Run report   “RHPROF0”

  • How to add Task in the WEBUI Business role

    Hi,
    We have Interaction record as one work center in the agent business role.
    Now we are planning to add TASK for creating internal activities to employees.
    In spro, I created transaction type ZTAS (copy of 1003) for task with leading transaction category BUS2000125-TASK.
    For business role, what is the standard Work center ID/logical Link ID/target ID for task.
    (Currently  for INTERCATION RECORD we are using work center ID =  IC_BT_INR , Logical link ID= IC_BT_INR and Taget ID=IC_INR )
    Regards
    BABU

    Hi,
    Thanks for your reply and now Iam able to create TASK in webui.
    In the task, I am seeing a assignment block Org data and in which Sales and Service Org details are there.
    Since the TASK is meant for assigning some work to other employees/self, why we need this ORG data. 
    How TASK works in WEBUI.
    For ex,
    a)I can create a TASK to X person with start and end dates.
    b)Through Actions, I can send email about the task assigned to the employee
    c)Once employee searches his TASK in his agent Inbox,he can able to get it.
    d)Once he completes his Task, he will put the status as closed.
    How this will be communicated back to me or what is the standard process in TASK.
    pl suggest
    Regards
    Babu

  • Business Role Assignment

    Hello All
    Where do we assign Business Roles to Org Unit / Position. Can somebody please provide the navigation.
    I am in training and actually I want to get the business role created by me displayed when I log to CRM Web Client. How to do ...
    Thx
    DM

    Hi DM,
    by using tnrx PPOMA_CRM, Click on the Position which you have created. And then click 'GOTO --> Details Objects' on the top of the GUI page.
    Select the tab Business Role and then create a new infotype.
    Choose your Business Role in the Field 'Business Role' and save.
    Now you have assigned your Role with your org.
    Let me know in case you need any more specific explanation.
    VS
    Edited by: VS on Aug 7, 2009 2:42 PM
    Edited by: VS on Aug 7, 2009 3:06 PM

  • Business Role assignment now working as Expected

    Hi All,
    We have a User A, B and C , all these users have Business Role X, when these users were logging in they were gettings screens as per the configuration.
    However now all of sudden Only User A ,though still has same Business Role X , is getting different Work centers,Logical links Mostly standard(Claim management, worklist, calendar,Email Inbox) .
    User B and C who have the same business role are getting correct UI screens.
    We are unable to find what went wrong all of sudden.
    Thanks in advance for your suggestions
    Regards,
    Chandu.

    Chandu,
    If the CRM_UI_PROFILE is set to some UI Profile, this takes more priority(than the UI Profile assigned to the Business Role)
    and shows the Navigation Bar and Work Centre configured for this UI Profile.
    The normal Business Role configs wont work at that time.
    Remove this entry and see, it will solve the issue.
    Regards,
    Masood Imrani S.

  • Business Role assignment to user

    Hi all,
       I am learning about the concept of  business roles in CRM. In the forum discussions I see that the business role has to be assinged to the user even though we assign the PFCG role (linked to the business role) to the user. Like SU01 where we assign pfcg role to the user, what is the transaction code to assign the business role to the user.
    Thanks.
    Neha.

    I'm going to chime in and say this question has been discussed to the detail in this forum.  If you would have done a search you would have a pretty good discussion on this topic.
    Re: Reg: Business Role
    That thread covers all your options in detail.
    Thank you,
    Stephen

  • Issue regarding Business Role assignment

    Hi All,
    1.
    I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
    In the infotype Business Role I have assigned IC_AGENT (standard) business role.
    IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
    But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
    2.
    Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
    Now when I run the application everything is visible (telephony, navigation bar and workarea).
    Why is it not visible in first case?
    I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
    Regards,
    Ashish

    Hi Ashish,
    As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
    PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
    PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
    In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
    Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
    In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
    This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
    If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
    Refer pg 56 in CR580, it will clear your doubt.
    Thanks & regards,
    Suchita

  • Refreshing business role assignment to org. structure

    Hi Experts,
    I am trying to change the assignment of business role in org. structure but the changes are not coming into effect.
    i.e. initially i have assigned servicepro to my org. strcuture & i am getting the relevant screen on login into WEB UI.
    Now i have changed it  to marketingpro still i am getting the same screen.
    Can any one of you suggest that how i can refresh such changes.
    & can anyone also suggest how i can assign business role directly to users.
    Thanks & regards
    Nanda Kumar

    Hi Nanda,
    I assume the reason for Business Role change not refelecting can be
    1. A Profile assigned in SU3 or
    2. You are trying to open the Web UI from same browser session using a new tab in IE7 (internet explorer), you need to create a new browser session.IE7 tabbed browser does not recognize the changes in SAP GUI, you need to open in a new browser.
    Regards,
    Masood Imrani S.

  • Users assigned to CRM Business Roles

    Is there a report that can show what users are assigned to what Web UI business roles. We have business roles assigned to positions and not PFCG roles. If not, what table to show business roles assigned to positions numbers so I can atleast query names on positions that have specific business roles.
    Thank You,
    Alex

    Hi Alex,
    Normally the AGR_USERs table through SE16 can give you this output
    in AGR_USERS table go and set the ORG_FLAG and COL_FLAG to get the output, you could also do this just for roles
    AGR tables.
    also if you have a proper naming convention please search by   "UIU" string most of the WEBUI roles supplied by SAP has this key word "UIU"
    Also you can go through SPRO ("UI Framework")  to see the default business roles assigned to the "UIU" roles supplied by SAP.

  • Assignment pfcg-role to user and assignment pfcg-role to business role

    Hello, Gurus!
    What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
    As  I see authrizations from pfcg-role assigned to business role have no effect to user...
    Best regards,
    Artuк Litvinov.

    Artur,
    The business role assignment does not give a user that PFCG role.  Instead it is just a mapping table and does nothing more. 
    Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient.  In your scenario let's do the following:
    You have pfcg roles:
    RA
    RB
    You a have business role
    B1
    You have users:
    Joe
    Jack
    Business Role B1 is assigned to role RA which contains UIU_COMP.
    User Joe gets business role B1 and roles RB which does not have UIU_COMP.  This will not let him use the webclient.
    User Jack gets business role B1 and pfcg role RA.  This will work because everything is there.
    This means you need both the correct PFCG plus business role setup to make it work properly.
    Take care,
    Stephen

  • Fix Business Role / Technical Role assignment in Pending or Failed status

    Hi,
    We are facing issues with few users where Business role assignment or technical role assignment is going into Pending or failed status.
    None of the jobs are failing or throwing any error related with the changes.
    We are running IdM 7.2 version with SP8.
    Is there a way to fix this issue other than removing and reassigning or recreating ID.
    Regards,
    Manish

    Hi Manish,
    If technical role (priv) in failed status, please check Tero's reply in the below post. You can set a periodic job to read users and privs in failed status and use uRetryPrivilegeAdd() function to retry the assignment.
    Failed AD privileges
    I was able to find a document on how to set up the periodic job.
    Retry failed assignments (Privilege)
    You should try searching the forum and wiki for answers. Most of the issues are addressed by our community experts already. Thanks.
    Kind regards,
    Jai
    Message was edited by: Jai Suryan

Maybe you are looking for

  • Apache Plug-In: PathPrepend doesn't work?

    Hello All, I've run into a problem at a customer site with the WLS 5.1 Apache Plug-In with Apache 1.3.12 on Solaris 6: the PathTrim parameter does not work. Could somebody look at my httpd.conf file and tell me what I'm doing wrong: <Location /weblog

  • Can't get the itunes version 8 to uninstall the older version

    Does anybody know how to get around uninstalling the older version of itunes so that the version 8 will install?

  • Rescheduling of Production Orders using COHV

    Hi, My Client Requirement is:- There are more production orders . I have to reschedule that production order one after the other. When I change 1st production order by 2 days in future then all the production orders are reschedule after 1st productio

  • Progress bar completion function

    How do we control the progress bar completion functions @ the end of the pages, so they reflect reasonably correct amounts?

  • Variables in Query Designer

    Hi Friends,     I'm using Query Designer 7.0 ... i need  to create one variable...on charecterstic... norma analyser i'm  getting  normally.. but   in query designer... iwas create the  variable.. but  i'm  unable to  take that variable.. because.. i