PFCG role maintainenece: Query

Hi friends.I was just wondering if some can help me .
How can we use the 'Import from file' system from 'menu' option for role maintainence.

Hello Rahul,
I think you need the same what was discussed in PFCG Roles in Favorite menu.
Regards
Gregor

Similar Messages

  • Business Role and PFCG Role

    Hi all,
        I am new to CRM 7.0 Can someone explain  What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
       And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
    Thanks.
    Neha.

    Neha,
    Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely.  I'm locking this thread due to it fact that this question has been asked many times before by many different people.
    These threads explain the topic in more detail:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    Thank you,
    Stephen

  • How to search roles by Query in SAP BW?

    how to search roles by Query in SAP BW?

    Use SUIM with option roles with Auth object and put S_RS_COMP or S_RS_COMP1 here u can put the query for which u want role.

  • BAPI or Function Module to change PFCG role of an User from Background

    Hello Experts,
    I have a requirement to change PFCG role assigned in User from background and I need a BAPI , FM or any other method to do the same, I have gone through BAPI_BUPA_ROLE_REMOVE and BAPI_BUPA_ROLE_ADD_2 but as per my understanding , these are related to business role not PFCG.
    Please help!!!
    regards,
    Arnab.

    Resolved by myself.
    regards.
    arnab

  • ABAP User Roles and Query for accessing particular T- codes and Reports

    dear Gurus
    I have one problem, i want to know about ABAP User Query ,i have one requirement my user wants to Lock all the HR Std versus Customized reports in T- code SQ01,other department peoples also see the Payslips and Hr personal reports which is harmfull to the dept so i want to Lock all the reports in Std T- code in SQ01 and i have created one Customized User Roles or Query in which the T-codes and Reports are assigned only those particular user can access the T-codes and Std reports .how can it be possible i dont have any idea about user roles and Queries .
    kindly help me out or send me some documents related to user roles and queries
    regards ritesh sharma

    Hi Ritesh,
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/103cafc2-7a64-2b10-14b3-eddb7d324561
    Regards,
    Flavya

  • Indirect pfcg role assignment - no roles in SU01

    Hi experts,
    I would like to assign PFCG roles via indirect assignment, this means i would assign roles with the organisational model (transation ppomw).
    I did the assignment and i executed the transaction pfud for user master data reconciliation. But the pfcg roles are not assigned to the user (see roles in transaction SU01). Usually the roles should be displayed (in blue and with xflag for indirect assignment).
    Are there any customizing configurations i have to keep in mind?
    Hope you can help as fast as possible.
    Thanks a lot and best regards,
    Natali

    Run PFUD if this is still an issue.

  • 1 Business Role  = 1 PFCG role

    Hi,
    We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
    How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single  PFCG role?
    Regards,
    Nikhil

    Nikhil,
    The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
    Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
    Hope this helps.
    Amar.

  • Business Role - Link to PFCG role

    Dear all,
    When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
    What is the functionality of this PFCG role in relation to the Business Role?
    When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
    Is there some documentation available that explain this relationship between the PFCG role and the business role.
    Thank you in advance,

    Dear Ivan,
    To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
    Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
    CRM Business Partner Roles:
    http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
    Rights and responsibilities that a business partner can have in various business transactions.
    The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
    http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
    Each business partner role contains a predefined set of functions based on the business partner’s relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
    PFCG Roles:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
    The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
    To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
    Hope this will help.
    Regards,
    Naveen.

  • Issues with New PFCG role

    Hi Experts,
    I have created a new Business role ZBP_MKT_MAN and PFCG role ZSAP_CRM_UIU_MKT_PROFESSIONAL. However the authorisations are not getting copied from SAP_CRM_UIU_MKT_PROFESSIONAL to ZSAP_CRM_UIU_MKT_PROFESSIONAL properly. Can someone guide me with the same.
    Thanks
    Leela

    Hi Maikel,
    Sorry type the infor incorrectly, i have creared a BP role ZBP_MKT_MAN for which i have created a PFCG role ZBP_MKT_MANAGER to the add the same to it. However, the new PFCG role ZBP_MKT_MANAGER is not getting displayed in the PFCG roles list and i am not able to add the same to the BP role ZBP_MKT_MAN. Can you plz let me know how to proceed further.
    Thanks
    Leela

  • Multiple PFCG Roles to a user and one business role

    Hello SAP CRM Experts,
    we are facing a problem then I need your help.
    The external user can access the CRM through three distinct business roles.
    However, for each of these business roles, there are specific access
    rules configured in three different PFCG profiles.
    In the registration of the user (SU01), are assigned the three profiles
    PFCG because the user must have access to three different business roles.
    However, for one of the profiles the ability to modify the document
    service order is blocked and for the other is allowed to modify this
    document.
    Is there a customizing where I can associate the PFCG role to the
    business role, and then, when the user logs into the system, it
    identified the business role that he accessed the PFCG profile associated.
    However, this configuration is not working, and did not solve the problem.
    It seems to me that there is a merge of all the permissions that the user
    has, and is not being considered the PFCG role associated with the
    specific business role.
    This is really correct? The merge permissions occurs?
    Best regards,
    Diogo Lupinari

    Yes, thatu2019s correct.  When user is assigned multiple PFCG roles, all authorizations are in play.

  • Assignment pfcg-role to user and assignment pfcg-role to business role

    Hello, Gurus!
    What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
    As  I see authrizations from pfcg-role assigned to business role have no effect to user...
    Best regards,
    Artuк Litvinov.

    Artur,
    The business role assignment does not give a user that PFCG role.  Instead it is just a mapping table and does nothing more. 
    Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient.  In your scenario let's do the following:
    You have pfcg roles:
    RA
    RB
    You a have business role
    B1
    You have users:
    Joe
    Jack
    Business Role B1 is assigned to role RA which contains UIU_COMP.
    User Joe gets business role B1 and roles RB which does not have UIU_COMP.  This will not let him use the webclient.
    User Jack gets business role B1 and pfcg role RA.  This will work because everything is there.
    This means you need both the correct PFCG plus business role setup to make it work properly.
    Take care,
    Stephen

  • Restrict creation of BP based on PFCG role

    Hi Experts,
    We are implementing CRM 7.0. In the IC AGENT business role we would like to restrict the user to only create contacts using the PFCG role SAP_CRM_UIU_IC_AGENT. We tried using authorisation object B_BUPA_RLT and  CRM_BPROLE. But it did not work. Do you know if we are missing anything else? FYI..We are not using ACE.
    Best regards,
    David

    In our system we had a similar problem but with Accounts or Prospects creation. This is how we resolved it: In CRM 7.0 each Customer/ Prospect BP Record has a field Employee responsible on it. This is set automatically on the BP creation page, if the User ID of the user creation the record is assigned to an Employee record.  If the user does not have access to create Employee relationships (BUR011) it will fail to complete the customer creation process. Authorization Object B_BUPR_BZT (Business Partner Relationships: Relationship Categories) controls this. You will need to add BUR011 to u201CRELTYP_fromu201D

  • Pfcg roles behind ic webclient profiles

    Hi,
    Can anybody tell what are PFCG roles behind for each IC Webclient profiles like SALES B2B, SALES B2C, SERVICE.... (tx: crmc_ic_main)
    thanks
    Tim

    Hi Tim,
    Again, PFCG roles are a combination of authorisations, that define what the person linked to the role can do.
    e.g. An authorisation is defined that th role can create/change/read sales orders. Within the same role there is an authorisation that indicates that the role cannot create Service Contracts. and so on...
    These are standard authorisations that are used by the system.
    Hope this is clear now.
    ps. Don't forget to reward points if the answers are usefull and when you question is answered reward points and put the question to answered.
    Kind regards,
    Micha

  • Can anyone help me understanding the links between Launchpad roles, PFCG roles, and portal roles!?!

    Hi experts,
    I am looking at the newer EhP5 and EhP6 functionality for ESS and MSS, specifically the WD ABAP portal applications.  I've turned on all the business functions and services I think our team wants, however I'm confused on how to move forward in using them.  For a little tech info, we are on EhP6 for the backend, but our portal is 7.02.
    My first step was to assign the com.sap.pct.erp.ess.wda.Employee_Self_Service_WDA portal role to our test ESS user group in our sandbox environment.  The ESS user got a new ESS tab in the portal and it's linked to the Launchpad role ESS, Instance MENU.  I'm comfortable with ESS at this point, still need to learn more about customizing the menu for different employee groups without creating additional Launchpad or SAP roles.
    Question 1: Correct me if I'm wrong, but is the Launchpad roll ESS, instance menu linked to the PFCG role SAP_EMPLOYEE_ESS_WDA_2?
    Next, I was looking to see if there was a similar portal role for MSS, but it seems I can't find one.  I implemented the MSS Addon 1.0 for ABAP and the portal and got a new MSS portal addon role, but it doesn't seem to be connected to any MSS Launchpad role.
    Question 2: Is there a portal role to assign to users/groups that is linked to one of the MSS Launchpad roles? If yes, what business function or service is it a part of?
    I'd like to use of the existing MSS Launchpad role to test some of the new portal functionality, but I'm not sure how to do it.
    Question 3: How is a Launchpad role assigned to a SAP role in PFCG?  Anyone have some documentation they can point me too?
    Kind regards,
    Garrett Meredith

    Thank you Samuli, this was very helpful in connecting many of the pieces.
    For now I have a very good understanding of how the new ESS is controlled and modified.
    It appears that FPM_LAUNCHPAD_UIBB could be used to develop a similar component to call a custom launchpad role for MSS containing a customized list of WDA applications.
    Is a MSS Launchpad a good way to pursue since we use a SAP enterprise portal?
    I found a PAOC_MSS package containing other MSS embedded packages.
    Could I use one of the embedded packages in there and by creating a Component configuration in the FPM_LAUNCHPAD_UIBB for one of the MSS WD applications?
    Based on the documentation link above, PFCG roles are for NWBC HTML or Desktop versions.
    Kind regards,
    Garrett

  • Cannot modify an authorization object in pfcg role for a business role

    Hi Experts,
    I have created two z pfcg roles from the standard business role CRM_UIU_SRV_PROFESSIONAL  lets say by names zagent and zmanager. My requirement is actually to map these two pfcg roles two a service professional agent and service professional manager custom business roles respectively( I have created these custome business roles from standard business role servicepro) . I have identified an authorization object by name CRM_CO_SE which is basically used to check whether the user is authorized to create service contract transactions. So, in the agent pfcg role, I need to de activate or deselect this particular authorization object so that the agent will not be able to create service contract. (This is not a real time requirement, but an internal assignment). When I change this object in the pfcg by deselecting 'Allow' check box and try to generate, it is not getting generated. I have selected all the options from the 'Expert mode for the profile generation' and still the traffic indicator for that authorization object is yellow.  Am I doing anything wrong?
    Please help me.
    Thanks
    Ajith C

    Hi Leon,
    Thanks for helping me, I have restricted the unauthorized user from creating a new order by disabling the 'New' button by checking the business role in  the code. The pfcg configuration, I am skipping it for now.  I have one mnore requirement. When one clicks on any items in the search result for the Service Contracts, it opens the details of that service contract with an 'edit' button. I can disable this button using do_output_preparation method for the some business roles. However, I want to disable this after checking a condition. The condition is that, edit button should be active, only if that service order was created by the employee who has currently logged on. I am relatively new to CRM and I could not figure how I can check it during run time. Could any one please help me with this?
    Thanks,
    Ajith

Maybe you are looking for