PFCG Field in Business Roles

Hi All,
Could anyone tell me what is the importance of PFCG Role ID field while creating a Business Role?
(IMG>CRM>Business Role-->Define Business Role).
Reply awaited.
Regards,
Sri..

Dear Sri,
this is regarding authorizations;
The authorization concept is, that the PFCG role contains exactly the
authorizations needed for a particular business role.
The authorizations are determined using the settings in the
business role customizing, the CRMD_UI_ROLE_PREPARE report and
the su22 (su24 at customer site) trace.
There is not strict connection between the business role and the
PFCG role. You could even assign a dummy PFCG role to the business
role and put all needed authorizations into on other pfcg role.
Regards, Gerhard

Similar Messages

How do I restrict view of other colleagues' calendars by business role?

Hello Gurus
I need to allow the area sales manager to view the calendars of his sales managers but I must prevent the sales managers from viewing the calendars of other sales managers in the organistion.
At the moment it appears there is no role specific authorisation and I can view any of my colleagues calanders. Please advise how I can implement this?
Regards
Declan

HI
one way to achieve this as per my knowledge is
we have authosrisation objects in our CRM..please create the AUTHORISATION Object for that particular view display and assign the same to PFCG role which can be assigned to business role.
for example
standard auth object
CRM_ORD_LP(to display service order) we can assign display or edit authorisations and same can be atached tpo pfcg and then business roles
the other way is in business role screen crmc_ui_profile ..u can assign particular config key..
so assign the twodifferent config key for the two roles
for example
configkey-zmployee assigned to business role zemp_bus
and config-key :zmanager assigned to zmang_bus
so in bsp_wd_config key
u can configure two views according to the config key..so define two configurations with two config keys one for manager and one for employee..
if iam wrong let me know i ll try some other

Business Role - Link to PFCG role

Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,

Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen.

Business Role and PFCG Role

Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.

Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen

1 Business Role = 1 PFCG role

Hi,
We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single PFCG role?
Regards,
Nikhil

Nikhil,
The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
Hope this helps.
Amar.

Multiple PFCG Roles to a user and one business role

Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo Lupinari

Yes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.

Assignment pfcg-role to user and assignment pfcg-role to business role

Hello, Gurus!
What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
As I see authrizations from pfcg-role assigned to business role have no effect to user...
Best regards,
Artuк Litvinov.

Artur,
The business role assignment does not give a user that PFCG role. Instead it is just a mapping table and does nothing more.
Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient. In your scenario let's do the following:
You have pfcg roles:
RA
RB
You a have business role
B1
You have users:
Joe
Jack
Business Role B1 is assigned to role RA which contains UIU_COMP.
User Joe gets business role B1 and roles RB which does not have UIU_COMP. This will not let him use the webclient.
User Jack gets business role B1 and pfcg role RA. This will work because everything is there.
This means you need both the correct PFCG plus business role setup to make it work properly.
Take care,
Stephen

Maintaining WebUI Business Roles in PFCG/Infotype 1263

Hello there,
we are migrating from CRM 4.0 to CRM 7.0 and have to maintain the Business Roles for our users in the organization modell (PPOMA_CRM). Usually we have to assign the business role to the position. All users under this position will get the Business Role assigned.
As we have a complicated organization modell, I was wondering if there is a way assigning the Business Role directly to the PFCG-Role in the PLOG/INFOTYPE (1263) authorization object.
Does anyone have an idea? Or have tried this before?
Thanks and regards,
Jodi
Edited by: Ghayss Tarraf on May 3, 2010 4:24 PM

Hi Jodi / Ghayss,
I think you should be interested in the business role determination logic:
The system finds the business role in the following sequence:
1. check if there is any business role assignment in SU3
2. check if there is any business role assigned in the organizational hierarchy
3. check whether the pfcg role assigned to the user is asscociated to any business role
So basically what you need to do is:
1. assign the PFCG role to the business role
2. assign the PFCG role to user in su01
Then the system will find the business role accordingly.
Cheers,
David Wang

Cannot modify an authorization object in pfcg role for a business role

Hi Experts,
I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow. Am I doing anything wrong?
Please help me.
Thanks
Ajith C

Hi Leon,
Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in the code. The pfcg configuration, I am skipping it for now. I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
Thanks,
Ajith

AET Custom fields across multiple business roles

Hi,
I need to create a custom field say "A" that needs to be visible for 3 business roles.
I have created the business roles and their respective role config. keys.
Please guide on the procedure.
Thanks,
Rinkal

Hi,
Two questions:
1. I have created a Z transaction type which is a copy of the standard SRVR.
I want to create common custom fields for this Z transaction type and make them available across say three business roles.
Currently I have defined three role config keys for three business roles.
Now, if I define a custom field using AET for using one role config key for one business role, then that field will be available only for that business role of the transaction type.
However, I want this to be available for the other three roles also.
So, should I redo the assignment of the custom field to various "Configuration views" for the three role config keys, or is there some other way out.
Thanks,
Rinkal

AC10 - Business role landscape field

Hi,
When I try to create a new business role, there is a mandatory field named "landscape".
There is no default value and I can't find where I can customize it.
somebody can help me please ?

Hi,
In IMG , "Governance, Risk and Compliance->Access Control->Maintain Mapping for Actions and Connector Groups"
for any of the connector group select 'Applivation Type' as 7 . This connector group will be automatically populated on UI.
Best Regards,
Aman

Pfcg and business roles

hi all,
we have the requirement where we have to create 4 businessroles and out of 4 a manager rolerequires authrization for all 4and customer rep requires authrization . for 3
how to achieve that?
i have crated 4 pfcg id s for 4 roles and assigned it to a business role(manager) which is copied from the standard.
since manager requires 4 roles i created 4 manager roles and assigned 4 pfcg ids
is this the correct approach?
please help out as i was new to crm 2007
thanks
madhuri

The business role is user for customazion of web ui screens, while authorization roles are used for security reasons. So you need 4 business roles only if you need to maintan 4 different types of screens. If not, use just one.
On the other hand I guess you need 4 authorization roles because you want to give 4 different types of authorizations to users.
So, if you need just one type of screen, create one business role and assign it to users simply by using parameter CRM_UI_PROFILE. and authorization role assign via pfcg.
But if you need 4 b roles and 4 a roles that are always in corelation 1:1 then you can do it also as you wrote.

Error while creating Business Role

Dear Frnds,
I am working on webclient , am trying set a Business Role of my own .But it say "You Cannot Assign one PFCG role to different business roles" .As when i copy the standard business role to that role there is no PFCG role assigned. Here i tried copying IC web Manager and do .
Can anyone guide me to solve this.
Appreciate your Help and Thanks in Advance.
Cheers
Ram

Guys,
I got resolved , Follow the Note :-1077251.
Thnxs
Ram

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Copied Business Role in Solution Manager ITSM

Hi All
This is eunhwa.
I have a question regarindg copied business role in Solution Manager ITSM.
To copy business role, I copied technical roles Navigation profile, configuration key and PFCT Role ID. And then I copied
a business Role. And assign copied technical roles to copied business role.
And I changed Direct link group UI. For example, in copied business role ZSOLMANPRO, There were many
direct links, I only left ‘incident’ and ‘problem.
However when I selected incident’ in direct link, there was no transaction ‘zmin’ assign. I couldn’t create a incident.
Why this error happened? Is there anything which I miss?
Thanks.
Best Regards,
Eunhwa Park

Hi,
Well, there are multiple things you can check.
1. If you are using IE
You have to add the page/pop-up to the compatibility mode of your Browser.
IE -> EXTRAS -> Settings for Compatibility Mode -> Add -> Refresh the CRM WEB UI
2. Check if you had assign SM-CREATE in the ZSOLMANPRO Navigation profile. (In Assigning the direct link groups to Nav. Bar profile.
3. Check whether you had authorizations for ZMIN in PFCG profile.
4. Additionally check
1905448 - How to restrict the suggested transaction codes when creating an ITSM
Incident using CRM Web UI - Solution Manager
5. In define transaction types corresponding transaction types are active. (In SPRO under solman ->Capabilities->ITSM-> Transactions)
6. Check the copy control whether they are fine. (In SPRO under solman ->Capabilities->ITSM-> Transactions)
7. Ensure that the transaction type's channel definition in customizing is set to 'CRM Web-Client UI'
If your issue is still not resolved yet, please paste the error/screen you are getting.
Regards
Rishav

PFCG Field in Business Roles

Similar Messages

Maybe you are looking for