Question regarding Authorizations in SAP CRM 7.0

Hello,
The problem is this:
We have a client who will use two ways of accessing SAP CRM 7.0 data -
1. CRM Web UI
2. Mobile devices via standard SAP CRM BAPIs
Now the situation is that the client wishes to control display authorizations based on the Business Role. Certain Business Roles can allow its User to see Accounts where the User is also Employee Responsible and certain other Business Roles can allow its User to see all those Accounts that are associated with that Role. In summary Business Roles control what an User can see.
This has already been implemented for the CRM Web UI using the Access Control Engine (ACE).
Now the questions are:
1. How do we implement this for BAPI Access?
2. Should we recreate what has been achieved by ACE, via PFCG Authorization Profiles?
3. Can we not reuse what has been done by ACE?
4. What are the runtime APIs that allow somebody to use the authorization checks of ACE?
5. Does the standard Function Module CRM_ORDER_CHECK_AUTHORITY_ACE help in this regard?
Any help here will be greatly appreciated. Please let me know if you need any clarifications.
Thanks in advance.
Best regards,
Sudhi

Hello,
Normally, some notes are recommended in addition to the current support package implementation because they were developed to solve any known issues. These known issues occurred as side effect of any note which belongs to the implemented support package.
If you take a look at older release notes, you will see the same.
This is a part of implementation stack.
1345085 SAP SRM 7.0 SP Stack 04 (09/2009):Release & Information Note
1365574 SAP SRM 7.0 SP Stack 05 (12/2009):Release & Information Note
1436687 SAP SRM 7.0 SP Stack 06 (03/2010):Release & Information Note
Kind regards,
Ricardo

Similar Messages

ICSS: authorization in SAP CRM 7.0

Hello Experts,
Is it possible to restrict via authorization acces to diffrent types of transaction in ICSS in SAP CRM 7.0? For example some clients can have acces to complaints, some to service request and some for both.
Regards
Piotr

Of course, you can. If you are creating the Z: roles for SAP_CRM_ECO_ISE_WU_B2B, then in this role, in the CRM Component, there is an authorization object called CRM_ORD_PR and a field name PR_TYPE. You can go an change the individual users with access to different transaction types or create Z: object or Z:role for each group as you wish. Use the field name ACTVT to control the access to the transaction type.
Please note, there may still be some discrepancies in the search selection in the ICSS. Though you may want to restrict the user to not to access "Complaints", the restriction may work at the transaction level, but not at the search level. You may still see "Complaint" object in the Search dropdown list. I am not sure if SAP has covered all the features of ICSS to abide by this role.

Help needed regarding BADI in SAP-CRM 2007.

hi all,
i need some help regarding BADI for new creation and enhancement.
plz help, you will be rewarded accordingly.
regards.
raman.

Hi Raman,
visit this link
http://help.sap.com/saphelp_nw70/helpdata/en/32/a83942424dac04e10000000a1550b0/content.htm
http://help.sap.com/saphelp_crm40/helpdata/en/c3/69bf4abf1045e0966badb60d6160dd/content.htm
Regards
Anup.

Authorizations SAP CRM 7.0

Hello experts,
I have doubts about the authorization in SAP CRM 7.0.
The issue is, our commercials in the system should see only their customers, the system will know who are their customers by the relationships.
So we want user to see only BPs who have a relationship with the user.
I have been investigating and I have found the ACE functionality ( Access Control Engine) It seen ACE meets our requirements but I am not sure.
It is possible to use ACE in CRM 7.0? I ask it because I have read lots of information about the use of ACE in CRM with EP (CRM in portal) and I know it is not possible to use ACE on SAP Gui, so I am not sure if it is possible to use it on CRM 7.0.
Also I am not sure whether I can covert requirements ( showing BP base on relationship with the employee), by using other functionality of CRM such as PFCG authorization?
Thank you very much in advance.

Hi Luis,
You need to create a authorization object with 'sales rep' ou 'sales office' key.
Your commercials are linked with these objects in master data? If no, create the link.
After, in PFCG, create the key, as I said above, and done.
Rgs,
Fábio

Sap CRM 2007 Security related issue

Hi All,
I am working on SAP CRM 2007 security.
I have scenario, which we are trying to fix.
There are two users A and B.
A is assigned to role X
B is assigned to role y
Business Partner 123 is created for user A
Business Partner 456 is created for user B
These Business Partners are assigned to Authorization Groups.
See below:
1)Authorization Group (LK01) is assigned to Business Partner --123.
2) Authorization Group (LK02) is assigned to Business Partner --456
3) Authorization groups LK01 is assigin to user A in PFCG role X
4) Authorization groups LK02 is assigin to user B in PFCG role Y
a) User A assigned with PFCG role X>Authorization Group (LK01)>BP 123.
b) User B assigned with PFCG role Y>Authorization Group (LK02)>BP 456.
Note:
1) Authorization Groups are assigned to BPs under the Control tab.
2) These Auth Groups are assigned in Authorization Object in PFCG role.
Now, USER 'A' should not be able to work under the BP 456 as this BP is assigned to authorization group LK02.
The issue is when we open the WEB UI and login with user A role X, He can search for the BP 456 assigned to Auth Group LK02.
User A can open the Interaction History and edit the Service Order created using the BP 456.
He can Edit the following in Service Order details:
1) General Data Status (from created to complete), Contact person, Sale Rep name.
2) Organization Data like Sales Office, Sales Org Unit, Distribution Channel
3) Business Partner.
However, one good thing is he cannot edit the Account details like Account ID, House No, Employee Resposible, the message he get is "No authorization to change partner with authorization group" which is a
good thing.
I have tried to be precise, please let me know if you require more information.
Regards,
Dave.

I suggest the following:
Please, check whether the system works if you activate the implementation BUPA_F4_AUGRP.
In addition check the notes 559662, 674869 and 782927. Maybe the notes are already implemented but you can try then the implementation of the BADI (SE19). It should resolve your issue.
I have implemented this Badi solution before, and after activation; the search help ; nor search result list did NOT show any Business partners anymore that had an authorization group I was not allowed to see.
kind regards
Davy Pelssers
SAP CRM/Security consultant

SAP CRM 7.0 WebUI: change history is not working

Hi specialists
Our change history is working - but only in SAPGUI.
I found no way to activate / customize it for the WebUI. The corresponding Assignment Block is simply blank.
On the other hand - in the SAPGUI its working like it is mentioned to do.
But it is getting better:
On our test system its working even in the WebUI.
On our prod. system not.
Does somebody of you have any advices/hints for me?
With best regards
Thomas
System: SAP CRM 7.0
2-Tier (test and productive system)
Problem occurs only on productive system in WebUI

Hi,
We are facing same problem for change history on webIC except that all changes to
business partner are visible only changes to contract account are not coming in change history.
for e.g if we changed incoming payment method using tcode CAA2 on ISU change is replicating
on CRM but change history is not showing changes made to incoming payment method.
i have already posted question but got no reply's
[change history is not updating on CRM webIC 7.0]
Following are the components & views which are being called for change history functionality on WebIC.
Component :
BP_HEAD
BP_DATA
View :
BP_HEAD/BPHEADOverview
BP_DATA/AccountChangeHistoryOV
Above view's are as per SAP standard and not modified or enhanced by us.
Thank You,
Sidh

Needed SAP CRM Data model with Object, Entity and Attribute level details

Hello all,
We are working on a huge IS-U / CRM implementation and we are still in the data gathering phase. The client has a whole load of legacy systems that will be replaced with IS-U and CRM. Right now we are in the process of developing data models using Excel first and then presenting them to the client to go forward from there. For this we need to have all the business objects, entities and their attributes.
I know about the SD11 transaction, but we don't have a CRM system yet. My colleagues have access to a German ERP system and they were able to get models for HR, FI and Asset management. I tried for the Business partner / customer in there, but the models were not proper.
So, once again, I need the specific data models out of SD 11 for CRM business partner. If anybody has the information, please do pass it on to me as I need them urgently. It would be a great help if somebody can do so.
Regards
Rajesh

I suggest the following:
Please, check whether the system works if you activate the implementation BUPA_F4_AUGRP.
In addition check the notes 559662, 674869 and 782927. Maybe the notes are already implemented but you can try then the implementation of the BADI (SE19). It should resolve your issue.
I have implemented this Badi solution before, and after activation; the search help ; nor search result list did NOT show any Business partners anymore that had an authorization group I was not allowed to see.
kind regards
Davy Pelssers
SAP CRM/Security consultant

SAP-CRM 5.0

Hi All
Could you please tell me when sap-crm 5.0 likely to be launched offically?what will be the difference between crm4.0 and crm 5.0?
Regards
Gareth

Hi Gareth,
SAP CRM 5.0 will be officially released on 24th October 2005. The ramp up will begin and will continue till the end of this year. From the begining of next year, it will be available for customers.
Regarding the new functionality in CRM 5.0, there is a lot to be mentioned.
-> The customers can create their own event triggers which was possible only with BAPI's in 4.0 .
-> There is a whole new range of activities and actions which enables the Sales Reps to plan their customer visit better.
-> Seamless intergration with Outlook and Microsoft Visual Studio.
->Lots of new functionality for Pharma industry will be available in Industry specifc solution.
->Claim and warranty management is a cool new feature.
In addition there is a lot more.
Regards,
Ankur

Data flow from E-commerce to SAP CRM 7.0 , ECC and third party system

Hi,
I have a requirement like the customers are created in E-commerce website of the company. When a customer is created the data should be synch to CRM , ECC and thrid party system ( price data from CRM for the customer ).
How do we transfer the data from E-commerce to CRM.?.andn ECC. Is it transferred first to CRM and then to ECC. Can we acheive all the systems synched at a time.
Can anyone explain with some design.
Thank you,
Regards,
Prashanth.

Hi
SAP CRM E-Commerce (called as WEB CHANNEL) works as per the below options (in CRM 7.0 and ECC 6.0)
1. SAP CRM Web channel with CRM back end where CRM will be a leading system for order creation. From E-Commerce channel, the order is saved in the back end CRM system and then replicated to ECC (through middleware settings).
In this scenario PRODUCT CATALOG will be created in CRM system. The use of TREX server will be used for product catalog replication.Also, the image server will be required for the display of product images in the PRODUCT CATALOG.
2. SAP CRM Web channel with ECC back end where ECC will be a leading system for ORDER CREATION. This is a new offering in CRM 7.0 where from E-Commerce web shop the order is directly created in ECC system. Hence no middleware settings are required for order replication.
In this scenario also PRODUCT CATALOG will be created in CRM system. The use of TREX server will be used for product catalog replication. Also, the image server will be required for the display of product images in the PRODUCT CATALOG.
3. For customer replication from E-Commerce > CRM > ECC, you need to maintain the middleware settings between CRM and ECC for business partner replication.
Hope this will clarify.
Regards

Documentation about SAP CRM 6 / 2007

Hello everyone.
Iu2019m looking for documentation about SAP CRM 6 / 2007, e.g. Best Practice, Cook Books, etc.
Iu2019ve worked versions 4 and 5, and now I would like to start to work with this new version.
If you have something and could share with me, please send to lalasbr_at_yahoo.com.br
Best regards,
Lalas

I found SAP CRM Best Practise at:
http://help.sap.com
-          SAP Best Practices
-          Cross Industry Packages
-          CRM

Questions regarding SAP CRM 4.0

Hi:
Does anyone have some past exam questions regarding the SAP CRM certificate exam? My e-mail is [email protected]
In addition, can anyone explain the differences between those code beings with "T" and those without, such as TSCM and SCM?
Thank you.

I would like to clarify on question 2): The filtering is not necessarily limited to only one of these items at a time; we could need, for example, filtering done by: customer number AND sales organization AND sales office.
The idea we came up with was to perhaps create the necessary extra attributes (if this is possible), and to have them automatically filled in by a routine (a user exit?); later, a simple search using these new attributes would filter the information accordingly. Would such a thing be possible?

S_DEVELOP authorization needed for CRM Web Client in SAP CRM 7.0?

We implemented an own WebUI component in SAP CRM 2007 and use it in others components (with USAGE).
After we transport the component in SAP CRM 7.0 we always got an error CX_BSP_DLC_CONFIG_GENERAL_ERR at loading the component. But if we set the permission to SAP_ALL all thing work fine.
In SAP Note Nr. 1367944 we read:
"It is not possible to run the CRM Web Client without the S_DEVELOP, activity=03
authorization because it is needed by the Web Client Framework.
The S_DEVELOP authorizatin is part of the SAP_CRM_UIU_FRAMEWORK PFCG role, which must
be assigned to every user."
"This dependency has been removed in CRM 7.0."
Do we need to install some other SAP Notes at SAP CRM 7.0?
Many thanks for advices!
Handri Gunawan

Hi Handri,
I asked my collegue here, who created the note.
The note is correct, in CRM 7.0 you do not need S_DEVELOP anymomre.
The error that you have might occur because of another reason.
Could you track the call stack of this exception?
And send me back the call stack?
Regards,
Steve

Regarding Extracting Data from SAP CRM

Hi,
1) What are steps to extract data fron SAP CRM? I heared that we get different types of errors while extracting data from SAP CRm to BW when compared to BW
2) From which tables BW system is getting data when we extract data from SAP CRM Lead management, Opportunities, Activities and CIC?
Can anybody please let me know the answers for these ..........
Thanks in Advance,
Sowji
[email protected]

Hi Sowjanya,
Pls ch this link:
regarding bw crm extraction
CRM extraction
CRM Extraction
http://help.sap.com/saphelp_nw2004s/helpdata/en/be/92fb3b28904f73e10000000a114084/frameset.htm
http://help.sap.com/bp_biv335/BI_EN/html/BW/SalesAnalysis.htm
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/f2910623-0c01-0010-de8f-d1926988a986
http://help.sap.com/bp_biv135/html/bw.htm
http://help.sap.com/bp_biv135/html/BW/SalesAnalysis.htm
http://help.sap.com/bp_biv235/BI_EN/index.htm
http://help.sap.com/saphelp_nw04/helpdata/en/af/ed833b2ab3ae0ee10000000a11402f/frameset.htm
http://help.sap.com/bp_biv235/BI_EN/index.htm
http://help.sap.com/saphelp_nw2004s/helpdata/en/af/ed833b2ab3ae0ee10000000a11402f/frameset.htm
http://help.sap.com/bp_biv235/BI_EN/html/BW/CRMAnalytics.htm
http://help.sap.com/saphelp_crm50/helpdata/en/1a/023d63b8387c4a8dfea6592f3a23a7/frameset.htm
Steps:
1) Activate the application component hierarchy (tcode RSA9). Changes made to the application component hierarchy in the CRM system can be transferred to the BW using the "Edit Application Component Hierarchy" (SBIW - Postprocessing of DataSources).
SAP Note 434886 must be implemented in CRM 3.0 before the application component hierarchy is activated.
2) Activate the Business Content DataSources (tcode RSA5).
Select/enter the application component and choose Execute (F8).
To compare the shipped and active versions, choose the 'Select Delta' pushbutton. If there is no active version of the DataSource, it is selected automatically.
To activate the shipped version, choose the 'Transfer DataSources' pushbutton.
3) Management of the versions of the BW-Adapter metadata (tcode BWA5). All DataSources are displayed that are managed by the BW Adapter.
As in transaction RSA5 (Service API Metadata Activation), the 'Select Delta' function can be used to select the inactive DataSources or compare shipped and active versions.
You can also go directly to the screen for maintaining DataSources that are managed by the BW Adapter.
The 'Compare Version' function makes a detailed comparison of the shipped and active versions.
All BW-Adapter metadata is considered when versions are compared:
Header information (Table SMOXHEAD)
Mapping information (Table SMOXRELP)
Global selection conditions (Table SMOXGSEL)
Attribute key fields (Table SMOXAFLD)
Datasources used in CRM-BW extraction are:
0crm_sales_act_1,
0BBP_STSMA_TEXT
0CRMFOCST_TEXT
0CRM_ACCPLN_ATTR
0CRM_ACCPLN_TEXT
0CRM_BILL_BLCK_TEXT
0CRM_CANC_PARTY_TEX
0CRM_CANRSN_TEXT
0CRM_CATEGORY_ATTR
0CRM_CATEGORY_TEXT
0CRM_CLASS_TEXT
0CRM_DECOTP_TEXT
0CRM_DECO_TEXT
0CRM_DIRECT_TXT
0CRM_ECROPT_TEXT
0CRM_FINCLASS_TEXT
0CRM_ITM_OBJ_TYPE_T
0CRM_ITM_TYPE_TEXT
0CRM_JRGUID_TEXT
0CRM_OBJ_TYPE_TEXT
0CRM_OPGUID_TEXT
There many more!
Check the datasources in rsa6 of crm system under CRM node. Documentation is available in SAP help.
*pls search SDN For more info*
*pls assign points if info is useful*
Regards
CSM reddy

Regarding Analytics component in SAP CRM

Hi,
Currently I am working on CRM analytics and we are using SAP BI system for all the reporting.
We also have a BI component in built in the SAP CRM system which has all the necessary tools for all types of CRM relevant analysis.
Has anybody got a chance to use this component. If so then can you explain how is it different from the analytics work which we are doing and wat are the capabilities of this component as a standalone for CRM analytics without using the SAP BI?
Any relevant document link will be a great help.
Thanks
Varun

Hi Keshav,
Please find the following details , may be it will be helpful to you.
1) Service notification is created in case of emergeny shutdown , equipment malfunction scenarios.We can create follow-up documents for service notification like service orders as well.
2) It is created independently or a service order can be created as follow-up document.
3) Yes service notification gets replicated to IS-U and we can see the same in IW53.
Regards,
Manjeet.

Some question regarding requirements in context of SAP XI

Hello!
I have few questions regarding Relational Database, Network Archtecture and Platform Support requirements in context of SAP XI. Can someone help by answering the questions, if possible with Yes/No (and short explanation)
<b>a) Does your system run native to the Oracle 10g RDBMS (RAC) and database tools? If not, please explain the databases and tools supported (Yes/No)
b) database accept binary-large-objects (BLOBs) and be referenced via the relational engine (Yes/No)
c) Deployable without using any fixed IP addresses (taking advantage of DHCP address resolution) (Yes/No)
d)software supported on HP-UX 11.i V2 (r6) on Itanium. (Yes/No)
e) Software supported on OS clustered servers (If mutliple products, please indicate if all are support or list areas where clustering may not be recommended and why) (Yes/No)</b>
Thank you very much!
Regards
A. Henke

Hi Axel,
I've just found your question by accident and would like to know whether you have already implemented 10gRAC in SAP environment?
regards
Barthez

Question regarding Authorizations in SAP CRM 7.0

Similar Messages

Maybe you are looking for