Role for CRM HTML Administration

Hi,
Can you please tell me the Role that needs to be assigned to a person in order to enable creation of User Types, Roles, Enrollments, etc.?
Currently, we are assigning every single Role out there, in order to enable users to perform such setups. We would like to assign only the specific Role that enables users to perform such setups.
Thanks in advance for your help.
Regards.

From the user guide:
http://download.oracle.com/docs/cd/A99488_01/acrobat/jta115ug.pdf
Roles are groupings of permissions, which are page level or function level granular
privileges used to maintain application security. A single user can be granted
several roles, each of which separately determines access rights to the user interface
details, the ability to perform certain transactions and the ability to access certain
data sets. During the registration process, users are granted the appropriate set of
roles that map to their job function. Although Oracle User Management contains the
following predefined roles, users with the appropriate access privileges can also
create and customize their own roles.
49.7.3.1 JTA_UM_DELEGATION_ACCESS
The JTA_UM_DELEGATION_ACCESS role is assigned the
JTA_UM_DELEGATION_ACCESS permission and provides users with all of the
access privileges associated with this permission.
49.7.3.2 JTA_UM_SETUP_ADMIN
The JTA_UM_SETUP_ADMIN role is assigned the JTA_UM_SETUP permission and
provides users with all of the access privileges associated with this permission.
49.7.3.3 JTF_APPROVER
The JTF_APPROVER role is assigned the JTF_APPROVER permission and provides
users with all access privileges associated with this permission.
49.7.3.4 JTF_PRIMARY_USER
The JTF_PRIMARY_USER role is assigned the JTF_PRIMARY_USER_SUMMARY
permission and provides users with all access privileges associated with this
permission.
49.7.3.5 JTF_SYSTEM_ADMIN_ROLE
The JTF_SYSTEM_ADMIN role is the global system administration role and
contains all permissions required to access and operate the System Administration
Console including JTF_SECURITY_ASSIGN_ROLE and JTA_UM_SETUP.

Similar Messages

  • CRM HTML Administration - Creating New Permissions

    Hello friends,
    I was wondering if there are ways to create new Permissions through CRM HTML Administration. I tried to create a new Permission, but was only asked for a Name and Description. I am sure there must be some code behind it. Is there any way to deploy new Permissions in 11.5.10.2? If there is documentation around it, kindly point me to it.
    Thank you in advance.
    Wishes for a happy and safe 4th of July and long weekend,
    Regards.

    Hi,
    Please refer to "Oracle Applications CRM System Administrator's Guide" manual, Chapter 3 (Managing Permissions).
    Oracle Applications CRM System Administrator's Guide
    http://download.oracle.com/docs/cd/B25516_18/current/acrobat/115jttug.pdf
    Thanks,
    Hussein

  • Developer Role for CRM Functional Team

    Hello,
    I would like to have your inputs on creating a developer role for CRM Functional Team in Dev system.
    I found a standard role SAPCRM_DEVELOPER , does it has sufficient Authorisations to carry out the config work in CRM or do we need any more additional Auth.
    The team members also have IC AgentIC ManagerSrv Pro roles as well.
    Thanks in advance
    regards
    sam

    Hi,
    You don't need a role to development team. You can assign the auth. in dev system and perform the tests in the specifics roles.
    Best regards,
    Caíque Escaler

  • API for CRM Html Roles

    Hello,
    *(1)*
    how to deallocate/revoke CRM html roles using API?
    I found following API for assigning CRM roles:
    jtf_auth_bulkload_pkg.assign_role(username, role)
    Now I am unable to find API for deleting role assigned to particular user.
    Please suggest the way to find any API related good reference and also API for revoking role.
    *(2)*
    what is functionality of jtf_auth_principals_pkg's delete_role function?
    from where it is called?
    Thank You.
    Swati Thakkar
    Edited by: Swati on Dec 30, 2011 3:49 AM

    From the user guide:
    http://download.oracle.com/docs/cd/A99488_01/acrobat/jta115ug.pdf
    Roles are groupings of permissions, which are page level or function level granular
    privileges used to maintain application security. A single user can be granted
    several roles, each of which separately determines access rights to the user interface
    details, the ability to perform certain transactions and the ability to access certain
    data sets. During the registration process, users are granted the appropriate set of
    roles that map to their job function. Although Oracle User Management contains the
    following predefined roles, users with the appropriate access privileges can also
    create and customize their own roles.
    49.7.3.1 JTA_UM_DELEGATION_ACCESS
    The JTA_UM_DELEGATION_ACCESS role is assigned the
    JTA_UM_DELEGATION_ACCESS permission and provides users with all of the
    access privileges associated with this permission.
    49.7.3.2 JTA_UM_SETUP_ADMIN
    The JTA_UM_SETUP_ADMIN role is assigned the JTA_UM_SETUP permission and
    provides users with all of the access privileges associated with this permission.
    49.7.3.3 JTF_APPROVER
    The JTF_APPROVER role is assigned the JTF_APPROVER permission and provides
    users with all access privileges associated with this permission.
    49.7.3.4 JTF_PRIMARY_USER
    The JTF_PRIMARY_USER role is assigned the JTF_PRIMARY_USER_SUMMARY
    permission and provides users with all access privileges associated with this
    permission.
    49.7.3.5 JTF_SYSTEM_ADMIN_ROLE
    The JTF_SYSTEM_ADMIN role is the global system administration role and
    contains all permissions required to access and operate the System Administration
    Console including JTF_SECURITY_ASSIGN_ROLE and JTA_UM_SETUP.

  • Standard authorization role for CRM implementation team member

    Hello,
    We are starting SAP CRM implementation project (7.0) and I would like to avoid giving sap_all authorizations to functional consultants in development environment. Unfortunetly I can't find standard customizer profiles like the ones in ERP system exists.
    So the objective is to have quite broad role or profile with no restrictions in customization and functional area. However it's important not to have Basis authorizations in this role/profile. Hope that someone can give me a hint in this direction.
    Thnak you,
    Jahoo

    Hi,
    as soon as the implementation team member should also do developments my experience is that without SAP_ALL you will have much trouble. Therefore in our dev-system each consultant will have SAP_ALL authorization. Of course only in the DEV-System.
    Kind regards
    Manfred

  • CRM HTML Administration "  You don't have sufficient privileges "

    Hi
    Login with Sysadmin , cant able to user Enrollments /User Types/Templates. Error "You don't have sufficient privileges" appears
    Sysadmin user has all roles and permission still error .... what is missing ?

    Please post the details of the application release, database version and OS.
    Login with Sysadmin , cant able to user Enrollments /User Types/Templates. Error "You don't have sufficient privileges" appearsWhat is the reponsibility name?
    Sysadmin user has all roles and permission still error .... what is missing ?What are the roles that you have granted to the user?
    Thanks,
    Hussein

  • To know the user has roles for developer and administrator

    Hi,
    How to know the user id has roles SAP_XI_DEVELOPER and SAP_XI_ADMINISTRATOR?
    Thanks.

    Hi,
    Go to SE38. Execute report RSUSR002.
    Enter the role SAP_XI_DEVELOPER  and execute.
    You will find out the list of users with the above role.
    Your question was a little confusing. If you meant something else let us know.
    Regards,
    Sumit
    Edited by: Sumit Khetawat on Jan 3, 2008 2:10 PM

  • Administrative roles for one of several clusters in SCVMM 2012 R2

    Hello!
    I have a SCVMM 2012 R2 server in my infrastructure. There is 4 Hyper-V clusters managed by VMM. One of them situated in another city (for example, call it as "Cluster4").
    Cluster4 has own host group in VMM. 
    Can I give administrative privileges only for this cluster to its administartor?
    When I tried to create user role for host group, administrator of "Cluster4" could change configuration of other 3 clusters and its VM in other host group. But he's shouldn't do this!
    So, can I delegate privileges only for one of cluster in VMM?

    The user role you are looking for, is "Delegated administrator". This role let you specify user permissions at the host group level, so you can move your virtualization hosts and/or clusters to different groups in order to isolate the administration.
    Before you create new hosts groups and move your hosts, please make sure that logical network mapping is correct to support the workloads running there.
    -kn
    Kristian (Virtualization and some coffee: http://kristiannese.blogspot.com )

  • Oracle Role for User Administration

    Hello,
    I am a DBA. We have a separate group that maintains oracle user accounts within an oracle database. We would like that group to maintain users (add/remove users from database, add/remove roles, etc.) but we do not want to give them the 'DBA' role for security reasons. Ideally, we want to grant them a role that gives them the ability to administer users but not do anything else.
    Does a role like this exist within Oracle? If not is there a workaround to obtain this type of functionality?
    Thank you!

    Do you have this actually working? I have it complaining about permissions on the line that tries to create the user. I thought oracle restricted doing this for security reasons. I am creating this as a user with the 'DBA' role and then when I try to execute it as the same user (which can create users normally) I get this error:
    SQL> exec system.create_user('troy1','troy1');
    BEGIN system.create_user('troy1','troy1'); END;
    ERROR at line 1:
    ORA-01031: insufficient privileges
    ORA-06512: at "SYSTEM.CREATE_USER", line 4
    ORA-06512: at line 1
    And here is the code (based off of the example)...
    CREATE OR REPLACE PROCEDURE create_user( p_username IN VARCHAR2, p_password IN VARCHAR2 )
    AS
    BEGIN
    EXECUTE IMMEDIATE 'CREATE USER ' || p_username || ' IDENTIFIED BY ' || p_password || ' DEFAULT TABLESPACE users ';
    END;
    Any ideas?

  • WebGUI / GUI for HTML for CRM

    Hi @ all,
    I recently start to work with sap and Ive no idea where to get the needed information. I hope somebody here can help me.
    Does somebody know where I can get a well-explained documentation about webgui for crm?
    Further Ive got questions and maybe somebody can answer them:
    What exactly is the difference between WebGUI and PCUI?
    Does a technical difference exists between WebGUI for CRM and WebGUI for other moduls (e.g. SCM, HR).
    thanks in advance

    Firat
        Apart from the IC Web , we have  IC WinClient.
      The Interaction Center (IC) WinClient is a SAP GUI-based agent desktop interface for interaction center agents that provides a framework for processing IC WinClient functions. It can be used for any business transactions via phone, e-mail, chat, paging, Web call back, or voice-over Internet Protocol (VoIP).
    Coming to the point, If we have an  [SAP ITS|http://help.sap.com/saphelp_crm50/helpdata/en/4f/2e6a52c3cdc44d83169b181a9c62ba/frameset.htm]   installed, then we can access the Transactions via Web. ie the Web browser can communicate directly with the SAP system.
    Try the below link and it would realy help to understand the various UIs available from SAP .
    [UI Technology from SAP|http://help.sap.com/saphelp_crm50/helpdata/en/e7/c7af3fda5a3c17e10000000a114084/frameset.htm]
    Also I hope this helped  you to understand UIs (depending upon the Business requirement either IC Web/Win, SAP GUI, WEB) available in CRM and in general SAP.
    Thanks
    Allot points if this helps and close the thread if you are satisfied !

  • CRM Blinding out of roles for organisations

    Hi Everybody !
    I must blind out any roles for organisations in tx. BP. Does anybody know a BADI with the opportunity of solving this problem ?
    Have many thanks in advance !
    Peter Szakonyi

    Hi Dominik,
    You can use authorization trace in the transaction ST01. Also check the transaction SU53.
    Regards, Masa
    SAP Customer Experience Group - CEG

  • Unable to load plug-in assembly for crm 2013 on site

    hi, 
    i am trying to register a plugin that i wrote to our CRM 2013 on site, i have copied my dll and the 2 ms dll's Microsoft.Crm.Sdk.Proxy.dll and Microsoft.Xrm.Sdk.dll to C:\Program Files\Microsoft Dynamics CRM\Server\bin\assembly on the CRM
    server machine.  this assembly directory has all of the permissions for my user and the same user has the Deployment Administrator role in CRM.  
    however, i am still getting an error "Unable to load plug-in assembly." when trying to register the assembly plugin in without isolation mode, on disc.  when i register to database it works fine.  but i would like to stick to the disc
    while debugging.
    what else could be causing this problem?
    thanks,
    Inna

    That is a strange one, I've never had good luck with anything other than database deployment.  You can debug the plugin DLL using database deployment.
    That being said, there is a very good tool called DevDeployment that you can use for your VS build process to publish the updated DLL after it's built.
    http://www.patrickverbeeten.com/CRM-Applications/Deployment-Helper
    Not sure if this answers the question, but if you don't get an answer you can use this tool anyway.

  • E-Recruiting 6.0: Business Partner Role For Branches

    Hi Experts,
    In the IMG, SAP E-Recruiting > Basic Settings > Enterprise Structure > Define Business Partner Role for Branches
    Can anyone help in the following:
    1) What is the purpose of Business Partner Role and how does it relate the Branches? Or how can i make use of it?
    2) If i am going to maintain the Company & Branches via the Administrator function instead of IMG, do I still need to configure this step: Define Business Partner Role for Branches
    Thanks.  Will reward points for any helpful tips.
    William

    Hello William,
    the Business Partner is an application / module which belongs to the base components of the SAP. It is used and partly extended by various other applications / modules. Next to E-Recruiting it is used for example by CRM and the financial service solution (FS-CS, FS-PM, FS-RI). All of these modules can put their data for a person or an organization into the same tables. Depending on the installation / system environment or even within one single module the requirements for available fields and business checks as on authorization differ between kinds of business partners (e.g. in FS-CS the commission solution for the financial service sector knows external agents and internal employees which have to be treated differently). The business partner is the element to assign the logical / business role in which a person is handled by the system.
    For E-Recruiting you have 2 kinds of business partners, too. On the one and there are people being candidates and on the other hand there are branches of your company which hire people. The configuration allows you to seperate them if you need to identify anywhen which business partner is a branch and which is a candidate. So far I never tried if this is really working as there is no real use for this I never set it up. The attributes and the business checks are the same anyways.
    Hope that helps a bit to understand the context
    Best Regards
    Roman Weise
    PS: please remember that you have to maintain the branches via administrator bsp application. Using the IMG entry won't work.

  • How to assign the role for created user  thru dynpro App

    Hi All
    How to assign the role for currently created user from Webdynpro App.
    when i enter into the portal after creating the user
    i am getting the following messgae in the portal
    "No portal roles are assigned for this user.If this problem persists, contact your system administrator."
    how to assign the user defined role for the created user from dynpro App
    Regards
    Dhina  Kar J
    Edited by: Dhinakaran Jeyachandran on Feb 1, 2008 12:19 PM
    Edited by: Dhinakaran Jeyachandran on Feb 1, 2008 12:35 PM

    In the User Administration section of your portal find your newly created user and below select "Assigned Roles" tab then press <Modify> button and look through available roles on portal then just simply add and save. But if you want to do it programmatically see below:
    IUserAcountFactory userFactory = UMFactory.getUserAccountFactory();
    // IUser - read only but with IUserAccount is possible to set up user data
    IUserAccountSearchFilter userFilter = userFactory.getUserAccountSearchFilter();
    userFilter.setLogonUid("superuser", ISearchAttribute.LIKE_OPERATOR, false);
    ISearchResult sr = userFactory.search(userFilter);
    for (final Iterator i = new PrincipalIterator(sr); i.hasNext();) {
      IUserAccount user = (IUserAccount) i.next();
    Execute the same search for IRole (or IGroup if needed) get the unique id of them and use newRole(...) and addUserToRole(...) methods from IRoleFactory.
    Of course you don't need search for this principals if you know uniqueness of them. Use appropriate factories to get'em all by this unique id.
    All the features see in  [javadocs|http://help.sap.com/javadocs/NW04S/current/se/index.html]

  • Required Authorization Role for E-commerce manager

    Hi ,
    Could you please tell me required Authorization Role for E-commerce manager and catalog administartor?
    Thanks.
    Regards,
    PV

    SAP_CRM_ECO_ISA_WU_B2B_FULL           CRM-ECO: ISA Internet User (Full Document Authorization)             ISA_B2B_FULL
    SAP_CRM_ISA_UA_SUPERUSER              Internet Sales User Administration Authorizations                              Superuser
    *SAP_CRM_ISA_WEBSHOP_MANAGER     *    Authorizations for the Internet Sales Web shop Manager         Webshop Manager
    SAP_CRM_ECO_ISA_WU_B2C                  Internet User for B2C

Maybe you are looking for