S_TCODE in CRM Roles

Hi all,
I am relatively new to CRM and have the following question regarding design of CRM security roles.
We have a marketing manager who needs to log on directly to the CRM production system to execute a transaction. I have used the CRMD_UI_ROLE_PREPARE programme to create the PFCG role from the business role and this all works ok.
Now they need to be able to execute the transaction so I am wondering:
Is it good design to add s_tcode to the role with all the UIU* components?
Should transaction roles be kept seperate?
Is S_Tcode the only object used for this or are there further considerations for CRM?
Thanks.

Richard,
Since you are relatively new to CRM I suggest you obtain and look through the Security Guide for your version of CRM. From there you might have more specific questions regarding your CRM role design. Its a great start.
https://websmp208.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000401180
Thanks,
Matt

Similar Messages

Is there a way to automatically map CRM Roles to Portal Roles

<b>Scenario:</b>
When a new user registers on our portal he is assigned a CRM Role, however, he still needs to be assigned a Portal Role. Since we will have many users registering through our portal we do not want to assign roles to users manually. We want this to be an automated process, which requires almost no administration after the initial configuration.
<b>Solution we are looking for:</b>
Ideally we would like to do some configuration on the Portal side that would some how pull roles from CRM user store and map them on to appropriate Portal roles. In our case the reverse would also be ok as well, i.e. we do some configuration on the CRM side that would push the appropriate role to the Portal and do the Portal Role assignment.
Does anyone know how to do this? I am very new to portals so a detailed explanation would be very helpful.
Thanks for all the help!
Muhammad Osman Yousuf

No, the portal role will not be the same for the same CRM Role.
So for example...
On the CRM side we have CRM_ROLE_A, CRM_ROLE_B, and CRM_ROLE_C and on the Portal sider we have PORTAL_ROLE_A and PORTAL_ROLE_B.
All mappings given are possible...
CRM_ROLE_A = PORTAL_ROLE_A
CRM_ROLE_B = PORTAL_ROLE_A and PORTAL_ROLE_B
CRM_ROLE_C = PORTAL_ROLE_B
The solution you mentioned, will it work with the above mappings?
Thanks for all the help!
Muhammad Osman Yousuf

How to map CRM roles to EP roles

Hello,
I have created one coordinator roles in CRM and assigned to one user.
Assigned defualt EP role also, but user is not getting any worksheets and ivews.
How can we map the CRM roles to EP roels.
Thanks
Purna

Purna,
The portal roles drive the iView, workhseet, etc. The backend CRM roles give the needed authorization to run CRM.
I assume your CRM Coordinator role is a custom role, you can either assign the standard CRM Portal Roles that provide the related iView for that backend role or create new CRM Portal Role using Content Admin. You can find the standard CRM portal roles by User Admin, change Search Criteria to Role and uses crm.
Don't forget to check the permission on your new portal roles.
Good luck.
Lye
Hope this

SAP CRM Role assignment block - Customer cc

hi there, can anyone please tell me what the Customer CC refers to in the SAP CRM Role assignment block
Thanks, Sue

hi ahmedi khan,
the role key what you have created that will be assign to your business role.
go to CRMC_UI_PROFILE or
SPRO >> Customer relationship Management >>UI Framework >>Business Roles >> Define Business Role
click on your business role and under role config key you have to pass your custom role key..
like this..
go through this link you can get to know..
The Usage of the SAP CRM Role Configuration Key –Detailed example
Thanks & Regards,
Srinivask

Importing CRM roles into Portal

Hi All,
I am using CRM-5.0 as backend and ER-6.0 with it. Both of them are sharing the same datasource. But if I create a new role in CRM I can't find it from portal. Whereas the users created in CRM are visible in portal. How can I import all the roles available in CRM to portal? My System landscape is working properly.
Thanks
Indranil Datta

Hi Indranil
SAP/CRM roles are built with transaction PFCG. Portal roles are built using portal tools. They have no direct connection.
In theory you can upload SAP/CRM roles into the portal to become portal roles, but what do you gain? Every time you change the SAP/CRM role you need to upload it again..
You are better to make portal roles that are assigned to portal groups that are the same as the PFCG roles. Maintain the portal roles manually, probably with a subset of the all the functions in the CRM role and assign them to the portal group that represents the FCG role.
Cheers

CRM roles

Are the roles/users defined in the mobile server same as R/3 or CRM roles or are they different.
Is it possible to use exisiting R/3 or CRM roles?

you can reuse user and role information in CRM or R/3 and replicate users automatically to the MI server (Web AS). You need to
1. assign a MiniApp (Type: Offline Application) to the role/s in the backend system in PFCG. Here it would make sense to create a install sequence on the MI server and then call the MiniApp exactly like the MCD.
2. Create a user group called "MESYNC" in the MI server
3. Execute role synchronization - Report "WAF_DEPLOYMENT_FROM_ROLES". That's it.
Then you have all the users copied over to the MI server, all having "init" as password, bundled in user group "MESYNC" and having the chosen applications assigned (see 1.).

Creation of MKK and Contract Account for New CRM Roles

Hi Experts,
I need a help in CRM for creating new roles and extending the same in R/3 in MKK role.
Here is the problem I faced.
I have copied the CRM000 role and created a new role ZCRM00 for
business specific need. It is getting created in CRM and a BP is also
getting created in R/3 BP but it is not creating an MKK Role in FI-CA.
The following steps can be used to simulate the problem
Step-1: Create a BP in CRM with the ZCRM00 role. Please do not
extend or create the BP in Sold to Party Role. Because if the BP has
Sold to Party role then the problem will not occur and Business does
not want to have s in Sold to Party roles because customers will
be having Sold to Party Role
Step-2: Create a Business Agreement for that BP
Step 3: Go to R/3. Run Transaction FPP3 and search for the BP created
in role. The system throws the message "usiness Partner <BP
Number> does not exist in the MKK Role".
Step-4: If you go to the transaction CAA2 and enter the Contract
Account Number (Appearing in the Business Agreement Tab of BP Business
AGreement Tab in CRM) and the BP Number the system will say "Business
Partner <BP Number> does not exist in the Contract Partner.
I have already executed the steps mentioned in OSS Notes 632749 but it did not result into anything.
Can anybody please help me to create the MKK role and Contract Account in R/3 for the newly created role in CRM. I understand this thing works fine for the Sold to Party role in CRM. I believe when SAP has given the flexibility to create new role in CRM, there will be some way to create the MKK role and contract account automatically (very much like Sold to Party) in R/3.
Looking forward for your reply
Regards
Karthi V

Hi,
Can you please guide us if you were able to resolve this issue and you were able to assign the MKK Contract partner role for the custom BP Roles.
Thanks,
Vamsi.

Is file created by report CRMD_UI_ROLE_PREPARE mandatory in CRM Role Design

Hi All,
The CRM 7security guide mentions usage of file created by report CRMD_UI_ROLE_PREPARE for Designing role. Can anyone suggest, whether it is Manadatory to perform this report.
I have designed Role, WITHOUT using this report.

Hi Raghu, your explaination is not clear to me.
my understanding-The report produces the file from a Business Role, which contains Services/BSPs,etc.... This file needs to be imported into Menu Tab, by option 'Import From File'. So, when these Services/BSPs are added into Menu tab, they will auto-populate their SU24 entries(authorization objects) in Authorization Tab(like in Transaction Codes)
Could you be clear on "report CRMD_UI_ROLE_PREPARE will help you with generating the CONTENT automatically", as mentioned by you. Which CONTENT: Entries(Services,etc...) in Menu Tab OR their SU24 auth. Objects.
Also, "you can import the file from PFCG profile menu" is not clear. Which MENU are you referring here? The MENU tab which contains Services/BSPs,Transaction Codesetc.. OR the MENU bar inside Authorization Tab
Could you suggest on this, as i this is what i am desparately looking for

CRM - Role of technical resource

Hi Experts,
I would like to know what role technical (development) resource expected to play in CRM projects.
I am from ABAP, XI & EP background, would like to work on CRM projects in future.
I would appreciate if you have spell out skills which are desirable and essential to work on CRM projects.
Best Regards,
Krishna

Hi Nagendra,
I would suggest that you need to be good in the following areas for CRM technical role:
1) Middleware Integration : This is a process for integrating CRM with R/3 back-end system and BW systems for different reports and data processing.
2) Groupware Integration : For integration of CRM with Exchange Server and Lotus.
3) CTI : This technology is used for Call Center Integration with SAP CRM
4) BSP : From SAP CRM 2007 we have major role of BSP(se 80). For Z report you should know how to use it
I think that all these are well within the scope of CRM technical consultant. The documentation for all these are available in SDN.
Also it is very difficult to segregate the role of CRM Technical and Functional. You need to read and explore all the things on both sides to have a clear picture about the same.

Adding New BP Role In CRM 5.0

Hi,
when i create a new BP role using BUSD it is not displaying in roles of BP using Trans.code BP and i am not able to add this BP Role in Field Group BP Role (IMG-> cross-app-> BP->Basic Settings->Field Groups->cong. field groups by BP Role) to this role when i try to add this role it displaying message that it is not in TB0003 table can any one can give solution for this problem.
thanks in advance,

Hi BPX Partners,
It is not necessary to have same key for business Partners Mapping between CRM to ECC.
But, it would be advisable to create the Z role instead of using the standard role. As, you can make any changes to Z role.
In order to map the BP"s , you need to maintain settings in T code "PIDE" & PIDV" where in you can maintain mapping of CRM role to ECC Account group.
Please let me know for any help you need on this.
Regards,
Rahul

Assign biz role through CRM -SU01 and display page at portal

HI, SDN Fellows.
I am creating some custom portal roles at portal and mapped it to the custom business roles for some PCUI screens at crmc_blueprint_c --> "Assign Portal Role to Single Role" ("Assignment of CRM Role to Portal Role").
Currently, our portal UME data source is mapped to CRM system.
Right now, I have to assign both the CRM Role through SU01(to have access the CRM Object Method at CRM-PCUI application) and Portal Role through User Admin of WAS/portal (to access/display the PCUI iView in the portal).
My goal is to just assign role through CRM-SU01 and achieve the same output as I described above. Meaning can I just do the role assignment for the CRM role (through SU01) and able to access to the CRM-PCUI application through portal (able to see the pcui screen)?
Thanks,
Kent

What I want is when I assign a role (Sales Manager) said user A in CRM system, userA should able to see the related workset/page/iviews in the portal (without the need to assign the same: Sales Manager role in portal).
Now, what I have to do is assign the related objects into a single/composite roles in CRM (for backend data access), then I have to assign a portal role (through User Admin of Portal, so that they can see the portal content),
is that a way we can do it in one step?
Thanks,
Kent

CRM Portal Role Copier

Anybody used this tool?
A portal role is linked to a backend single role. SAP ships several standard portal roles / backend single roles specific to CRM.
Since the CRM Portal Roles hyperlink between several portal iViews / PCUI applications within the Portal (this is setup in the backend on tables crmc_prt_role_mo & crmc_prt_role_rl). To make things easier there is a role copied on the Portal (crm admin role)
But I've tried using this by copying a crm backend single role and portal role that exists to a new single backend crm role and portal role. So far hasn't work
The documentation says make sure the single role and portal role exists - are they talking about the destination role?
Also mentions addition to desitnation role field - what's this?

To keep it clear ,using role copier copy CRM backend role to custom role whatever created on portal .Once portal role is generated assign that to user profile to get the object links .
Thanks,
Thirumala.

API for CRM Html Roles

Hello,
*(1)*
how to deallocate/revoke CRM html roles using API?
I found following API for assigning CRM roles:
jtf_auth_bulkload_pkg.assign_role(username, role)
Now I am unable to find API for deleting role assigned to particular user.
Please suggest the way to find any API related good reference and also API for revoking role.
*(2)*
what is functionality of jtf_auth_principals_pkg's delete_role function?
from where it is called?
Thank You.
Swati Thakkar
Edited by: Swati on Dec 30, 2011 3:49 AM

From the user guide:
http://download.oracle.com/docs/cd/A99488_01/acrobat/jta115ug.pdf
Roles are groupings of permissions, which are page level or function level granular
privileges used to maintain application security. A single user can be granted
several roles, each of which separately determines access rights to the user interface
details, the ability to perform certain transactions and the ability to access certain
data sets. During the registration process, users are granted the appropriate set of
roles that map to their job function. Although Oracle User Management contains the
following predefined roles, users with the appropriate access privileges can also
create and customize their own roles.
49.7.3.1 JTA_UM_DELEGATION_ACCESS
The JTA_UM_DELEGATION_ACCESS role is assigned the
JTA_UM_DELEGATION_ACCESS permission and provides users with all of the
access privileges associated with this permission.
49.7.3.2 JTA_UM_SETUP_ADMIN
The JTA_UM_SETUP_ADMIN role is assigned the JTA_UM_SETUP permission and
provides users with all of the access privileges associated with this permission.
49.7.3.3 JTF_APPROVER
The JTF_APPROVER role is assigned the JTF_APPROVER permission and provides
users with all access privileges associated with this permission.
49.7.3.4 JTF_PRIMARY_USER
The JTF_PRIMARY_USER role is assigned the JTF_PRIMARY_USER_SUMMARY
permission and provides users with all access privileges associated with this
permission.
49.7.3.5 JTF_SYSTEM_ADMIN_ROLE
The JTF_SYSTEM_ADMIN role is the global system administration role and
contains all permissions required to access and operate the System Administration
Console including JTF_SECURITY_ASSIGN_ROLE and JTA_UM_SETUP.

Open field in object S_TCODE

I've deleted a tcode from a role in menu tab. Now when I look at the object S_TCODE in the role it has an open(blank) field. I cannot delete this blank field from the object as S_TCODE shows up only in display mode though you enter the role in change mode. Further I do not see this blank field in the menu tab assuming that the blank field might got transfered from the menu. Please suggest how to remove the blank field from the object?
Thank you,
Partha.

Hi,
I had some similar issues already. The yellow status of S_TCODE came from a blank entry in the menu. If the menu is big, its hard to find that entry, which has to be removed from the roles menu. As a workaround to identify that 'blank' entry check table agr_hier for that role. Select Reporttype=TR and Report= (means leave the field empty and set as operator '='.
In the field Parent_ID you can identify now the node under which this entry is located and with the OBJECT_ID you can find the text in table AGR_HIERT (with that text you can use the search function in pfcg to find that entry(ies).
Then simpyl delete these entries from the menu and merge the authorizations. S_TCODE shall be 'green' afterwards.
b.rgds, Bernhard

SAP CRM 7.0 and Enterprise Portal

Dear SAP Gurus ,
I have question about the New CRM WEB UI and integration to SAP Enterprise Portal .
We have been using the SAP Enterprise portal for accesing the SAP CRM functionalities before (eg create Opporutnites and Sales Order ). But with the New SAP version(7.0 and 2007 ) its possible to have its own portal.
Now the question is it possible to integrate the NEW SAP WEB UI into the existing portal ? Eg: If we want to have link in Enterprise portal with the Sales Order create functionalyt direlty without going into the stand alone CRM WEB UI . Would it be possible to directly call the Sales order service WEB UI in enterprise portal . Right now what we see is that the NEW CRM WEB UI is stand alone and for these type of fuctionalites the user need to login to the NEW web ui and then go to the create sales order screen .
Is it possible to directly embed the new UI components in the existing SAP enterprise portal ?
Many Thank for your kind advise !
Best Regards,
Ankur

Ankur,
Once you have correctly integrated to Portal following the SAP Note, you will no longer see the CRM Navigation. They will be Portal Navigation. If you have read and understood the note, it will be clear. On an overview, let me explain the steps involved.
1. You create a CRM role (based on some job role) say "Sales Rep" and have configured the CRM Web UI for all the navigation and applications. Like Account maintenance, Opportunities, Sales order create etc. etc.
2. Following the note and running a CRM transaction, you will now "Export" this CRM role to an external file. This file is very similar to a "business package". All the portal roles, pages, iVeiws etc. get created.
3. You will now "Import" this into your portal. Again follow the notes to know the loaction.
4. In the portal, you will assign this "portal role" to your users.
When these users log on to portal, they will see Portal Navigation (not the CRM navigation). So, the main point lies in defining the CRM role and get it working.
Hope you get the point....
Easwar Ram
http://www.parxlns.com

S_TCODE in CRM Roles

Similar Messages

Maybe you are looking for