Strategic role of XI as clearing center?

Hello,
does it make sense to use XI as clearing center? That means you need to check first all messages within XI coming from different interfaces. After that consolidation step in XI the next step is to send these messages (checked and maybe corrected) to the following business systems or informing the sending business system about erros. Maybe you can use the ABAP-Stack for the clearing tasks (e.g. retreiving information from other systems to check messages).
The alternative szenario is to have an additional Clearing Center in front of XI to do all these tasks. And the message transfer is from interface (1..N) to Clearing center to XI to (1..n Business Systems) in the system landscape.
What is your experience/opinion about that extended XI role?
Thanks
Christian

Hi Christian,
We faced the same situation and took the XI approach. Why redo things that are given out of the box in XI. There are a lot of bells and whistles given by the system for data cleansing and data massaging.
But its a scenarios based choice. as long as the cleansing steps don't involve complex business logic, we could do it in XI. You don't want to put too much of business transformation and translation login in XI.
Regards,
Naveen

Similar Messages

Role Comparison Results Not Clear

I'm using transaction S_BCE_68001777, program RSUSR050 to compare a role in DEV to itu2019s PRD version. The first screen for Compare Contained Authorizaitons (500) seems to report differences accurately. But when I choose one of the different objects to see the detailed differences, the next screen (800) does not indicate the differences. It looks like each role has the same values, which is not true.
In a specific case, I removed Activity 01 in the DEV version. The object has a yellow traffic light in screen 500 (good), but screen 800 shows the activities to be 01 through 04 (not good).
The layout of this screen seems to have changed in ECC6.0 than in previous versions, so maybe I'm not using it correctly. Did anyone else have trouble with this program's results?

Are there other authorization instances of the object in the role?
Yellow means it is different and not *
Whether they amount to the same is then your problem if ranges are found (and used) and rsusr050 does not evaluate the valid values and whether or not they are in the range.
--> Remove the ranging of field values and it will work.
Another possible cause is profile name collisions. Search SDN for term "AGR_NUM_2" and take a closer look at the FAQ thread for common problems related to transporting roles.
Cheers,
Julius

Functional and Technical Administration Roles in Solution Manager

Hello
A big company has been implementing new functionality in Solution Manager during the last couple of years, they started with System Monitoring and EWA, Maintenance Optimizar, then Project Implementation, now Service Desk and ChaRM. This is company has a wide open structure in IT and a discussion has been raised about who is the owner of soluton manager in IT.
In my experience I always propose two main roles one is Technical Administrator Role and the other is Functional Administrator role. The former is more basis oriented, in charge of the installation and update of stacks in Solman, basic-initial configuration and then working mainly in setting Solutions, RFCs, System Monitoring, EWA, SAP services, OSS connections, Diagnostic, E2E Root Cause Analysis and also support in ChaRM (in setting up the transport routes, security)
On the other hand, I support a role of SolMan Functional Administrator which deals with Implemenation side, ASAP methodologies, business process definition, integration with ARIS, setting up project standards, coaching Project Managers, ensuring good application information. Also in Service Desk and ChaRM, setting the process, customizing, implementing and controlling that things are running smooth in SolMan productive.
I would like to get from you your inputs and experiences regarding how to set-up those roles, whether there are clear lines to divide responsiblities or what kind of definitions should be made.
Many thanks
Esteban Hartzstein
Director
Tebyon Consulting

As recommended by some colleagues I am also investigating Customer Center of Excelence as a reference to define roles and responsibilities, particularly in the concept of Application Lifecycle Management.
Any other input is welcome.
Regards
Esteban

Issue regarding Business Role assignment

Hi All,
1.
I have a user Agent1 which is assigned to position POS_IC_AGENT in my org structure.
In the infotype Business Role I have assigned IC_AGENT (standard) business role.
IC_AGENT has PFCG role SAP_CRM_UIU_IC_AGENT assigned to it.
But, when I run the application (for my user Agent1), only telephony buttons are visible on top, navigation bar and work area is empty (nothing is visible there)
2.
Now, when I open my user Agent1 in SU01 and assign PFCG role SAP_CRM_UIU_IC_AGENT.
Now when I run the application everything is visible (telephony, navigation bar and workarea).
Why is it not visible in first case?
I think it should work without assigning Role in SU01.. I mean it should have taken settings from Org. structure
Regards,
Ashish

Hi Ashish,
As far as work center page context is concerned , its decided by the navigation bar profile and business role customizations ( we add work center home and several related stuff etc in navigation bar profile and make them activate/deactivate, visible/invisible through business role customizing ) .
PFCG role has nothing to do with what you see on the Work Center...it decides whether you can see or not..meaning whether you have authorization for disply of a business object and its related subobjects.
PFCG role basically determines the authorization objects that will be grated to the particular business role ( to which this PFCG role is linked ) PFCG is about CREATE/CHANGE/DELETE authorizations.
In first case, its business role linked authorizations. You dont see the work centers may be because USER has not granted the DISPLAY authorization for the business Object related to BP( i.e Account ) , or BO related to account search (BUPASEARCH ) as the IC agent home basically has Account identification home , or account search home...which overrides the PFCG authorizations attached to the business role.
Remember, individual object authorizations set for a user using transaction PFCG will have more priority over the Business role linked authorizations as 1 business role can be assigned to many users however if one user is not grated to see BP related data, this will still remain enforced even though the business Role PFCG is granting him to see...There is a difference between user specific authorizations and Business Role specific authorization...
In second case,its user linked Authorizations. When you add the PFCG role in SU01, this is being the User Specific Authorizations which will always have the priority and thus granting the display.
This is my basic understanding. I am 100% sure that PFCG role only controls the DISPLAY/CREATE/CHANGE related authorizations and lots more in context of authorizations. However what to include & show is decided by Navigation Profile and Business Role customizations.
If everything is intact in navigation bar profile and business role customizations, and still you dont see anything on the work center, then i am 100% sure that its related to User Authorizations
Refer pg 56 in CR580, it will clear your doubt.
Thanks & regards,
Suchita

Cost center & cost element

Hi Experts,
Can anybody please tell me,
What is difference between cost center and cost element.
what is exact role of both.

Hi,
Cost Center
Definition
External object (object type K) from Controlling which represents a clear origin of costs.
If you implement the Controlling component, you can find more information in SAP Library under Cost Center (Financials u2192 Controlling u2192 Cost Center Accounting u2192 Master Data in Cost Center Accounting (CO-OM-CCA) u2192 Cost Center)
and
Cost Center Accounting (Financials u2192 Controlling u2192 Cost Element Accounting).
Use
By assigning cost centers to organizational objects, you determine where costs incurred by the object are to be charged. The inheritance principle applies: If an organizational object is not assigned a cost center, the cost center assigned to the superior object applies.
An organizational object may also be assigned more than one cost center. For more information, see Cost Distribution (infotype 1018).
Integration
A cost center can be related to the following organizational objects:
·        an organizational unit via relationship A 011 (Cost center assignment)
·        a position via relationship A 011 (Cost center assignment)
·        a work center via relationship A 011 (Cost center assignment)
Cost Elements
Definition
Cost elements classify an organizationu2019s valuated consumption of production factors within a controlling area. A cost element corresponds to a cost-relevant item in the chart of accounts.
Structure
We distinguish between primary cost and revenue elements and secondary cost elements.
Primary Cost/Revenue Elements
A primary cost or revenue element is a cost or revenue-relevant item in the chart of accounts, for which a corresponding general ledger (G/L) account exists in Financial Accounting (FI). You can only create the cost or revenue element if you have first defined it as a G/L account in the chart of accounts and created it as an account in Financial Accounting. The SAP System checks whether a corresponding account exists in Financial Accounting.
Examples of primary cost elements include:
· Material costs
· Personnel costs
· Energy costs
Secondary Cost Elements
Secondary cost elements can only be created and administrated in cost accounting (CO). They portray internal value flows, such as those found in internal activity allocation, overhead calculations and settlement transactions.
When you create a secondary cost element, the SAP System checks whether a corresponding account already exists in Financial Accounting. If one exists, you can not create the secondary cost element in cost accounting.
Examples of secondary cost elements include:
· Assessment cost elements
· Cost elements for Internal Activity Allocation
· Cost elements for Order Settlement
Integration
Cost elements in Controlling (CO) are closely related to the general ledger accounts used in Financial Accounting (FI). This is because the SAP System is structured as an Integrated Accounting System:
Cost elements document which costs (differentiated by category) are incurred within a settlement period, and in which amount. They provide information concerning the value flow and the value consumption within the organization. Cost Element Accounting and Cost Center Accounting/Internal Orders are closely linked in the SAP System. Each posting to an account that is also a cost element, is assigned either to a cost center or order. This ensures that at period-end the data is subdivided by cost elements and cost centers/internal orders for analysis purposes. The following section describes how you can subdivide and characterize cost elements in the SAP System.
Cost element characteristics depend on the controlling area and the allocation methods used in your organization.
Hope this helps clarifying your doubt about cost center & cost element.
Regards,
Tejas

Hiding organization data and partner block in IC_AGENT role

Hello,
   For Business role : IC_AGENT and under Work Center : Interaction record ,we have a screen with three different blocks:
   Overview Organizational Data Partner.
   My requirement is to hide Organization Data and Partner block.
   Please suggest how can i do that?
   Regards
   Najm

Hello Najm,
for the same purpose I've done in the following way.
Enhance component ICCMP_BT_INR in BSP_WD_CMPWB if it's not been done yet.
Enhance view InrHeaderViewSet if it's not been done yet.
In view controller implementation class for this view (in my case it was ZL_ICCMP_BT_INRHEADERVIEW_IMPL) redefine GET_TAB_LINK_TABLE method in the following way:
METHOD get_tab_link_table.
CONSTANTS: c_orgdata TYPE string VALUE 'InrOrgData.BTORGSET/OrgSet',
            c_partner TYPE string VALUE 'InrPartnerId.MainWindow'.
CALL METHOD super->get_tab_link_table
   RECEIVING
     rt_result = rt_result.
* hide org. data tab
DELETE rt_result WHERE id CP c_orgdata.
* hide partners tab
DELETE rt_result WHERE id CP c_partner.
ENDMETHOD.
Other way is:
Enhance component ICCMP_BT_INR in BSP_WD_CMPWB if it's not been done yet.
Go to Runtime Repository Editor there.
Delete InrPartnerId.MainWindow and InrOrgData.BTORGSET/OrgSet views from the viewarea Header of the ICCMP_BT_INR/InrHeaderViewSet.
But personally I've preffered first one. Just to remember what was actually there in standard.

Best Practice for BEX Query "PUBLISH to ROLE"?

Hello.
We are trying to determine the best practice for publishing BEX queries/views/workbooks to ROLEs.
To be clear of the process I am referring: from the BEX Query Designer, there is an option QUERY>PUBLISH>TO ROLE. This function updates the user menu of the selected security role with essentially a shortcut to the BEX query. It is also possible to save VIEWS/WORKBOOKS to a role from the BEX Analyzer menu. We have found ROLE menus to be a good way to organize BEX queries/views/workbooks for our users.
Our dilemma is whether to publish to the role in our DEV system and transport to PROD,... or if it is ok to publish to the role directly in the PROD system.
Publishing in DEV is not always possible, as we have objects in PROD that do not exist in DEV. For example, we allow power users to create queries directly in PROD. We also allow VIEWS and WORKBOOKS to be created directly in PROD. It would not be possible to publish types of objects in DEV.
Publishing in PROD eliminates the issues above, but causes concerns for our SECURITY team. We would be able to maintain these special roles directly in PROD.
Would appreciate any ideas, suggestions, examples of how others are handling this BEX publish-to-role process.
Thank you.
-Joel

Hi Joel,
Again as per the Best Practices.Nothing to be created in PRD,even if we create them in PRD for Power users its assumed as temprory and can be deleted at any time.
So if there are already deviations then you can go for deviations in this case as well but it wont be the Best Practice.Also in few cases we have workbooks created in PRD as they cud nt be created in DEV due to various reasons...in such cases we did not think of Best Practice ,we had a raised an OSS on this aswell.
In our Project,we have done everything in DEV and transported to PRD,in case there were any very Minor changes at query level we have done in PRD and immedialtely replicated the same in DEV so that they are in SYNC.
rgds
SVU

Business Roles not getting refreshed in UI

Hi,
When I log in to the Web UI, I can see all my roles.
Now when I delete a Position/user assignment in the org model, I would assume
not to see that role when I log on to the BSP application.
I'm completely coming out of the application to reflect my changes.
My questions would be
1. How to delete a business role
I've tried removing the complete position itself but I can see the roles
I even tried clearing the browser cache but not luck, I'm using Firefox.
2.I wanted to try a different browser, can somebody tell me how to change the browser
3. For the other roles when I login I get an Interaction centre page with most of the screen blank.
I've checked all the links
I did try other solutions mentioned in other threads.
I'm new to this version as well.
I'm following c04 and CR580.
Please do tell me the missing config.
Another point is that I've SAP_ALL role
Points will be given
Thanks in advance
Regards
Deepak
Edited by: deepak nair on Oct 28, 2008 3:39 AM

Hi Deepak,
1. Did you copied SALESPRO business role to ZSALESPRO business role?? If yes, delete ZSALESPRO business role and
again copy SALESPRO business role to ZSALESPRO1 - reason may be by mistake you have copied IC_AGENT or IC_MANAGER to ZSALESPRO.
2. To make your life easy with PFCG roles -
2.1. I suggest you to copy standard Sales Professional role to "Z" role
(eg: SAP_CRM_UIU_SLS_PROFESSIONAL to Z_SAP_CRM_UIU_SLS_PROFESSIONAL) and generate the profile.
2.2. Add role SAP_CRM_UIU_FRAMEWORK (copy of it eg: ZSAP_CRM_UIU_FRAMEWORK)
2.3. Add these roles to your User along with SAP_ALL (or Z_SAP_ALL) and SAP_NEW
3. Add your User to Employee
4. Add your Employee to the Position in Org. Model
5. Select PFCG Role ID = Z_SAP_UIU_SLS_PROFESSIONAL in your business role (ZSALESPRO1)
6. Extend your Position with Business Role (PPOMA_CRM -> double click on your position -> select GOTO -> Detail Object -> Enhance Object Description) -> highlight business role -> click on create info-type -> select your business role (ZSALESPRO1) -> save
7. Clear the browser cache (delete temp. internet files) and delete cookies
8. Log on to WEB UI with your user and password...
I am sure that, if you follow this - you will active WEB UI without any problems. If still you have problems, let me know....
Cheers,
Peter J.

ABAP prog with Call Transaction to SU01 will not add roles in a CUA client

I am modifying a current ABAP program that works in a non-CUA client to hopefully execute in a CUA client. This program performs a Call Transaction to tcode SU01 and adds roles to an existing user. I used tcode SHDB to identify the new BDC commands needed for CUA when using tcode SU01. When executing the program in the CUA client it does not save the roles to the user. There is no error message or abnormal termination.
When I assign the role to the same user that's referenced in my program directly with tcode SU01 it works fine. Its just when I run the ABAP program the role assigment is not retained. I opened a Customer Message with SAP and they referenced OSS Note 93802 and said this was a consulting question. My program is not abending as referenced in Note 93802, it just does not add the role.
Has anyone been able to get this to work in a CUA client?

Hi,
it should be fairly simple to create a new ABAP using the BAPI's related to business object USER. Call BAPI_USER_CREATE1 to create the users, and BAPI_USER_LOCACTGROUPS_ASSIGN to assign roles in a CUA environment. It should go something like this:
[read file with user data into internal table wt_users]
[read file with role assignments into internal table wt_roles]
Loop at wt_users into wa_user.
[create LOGINDATA, ADDRESS and other structures for user in BAPI below, based on the data in wa_user]
call 'BAPI_USER_CREATE1'
exporting
    username                      = [the user name from input file]
NAME_IN                       =
    logondata                     = [structure for logondata]
    password                      = [initial password value]
DEFAULTS                      =
    address                       = [address structure created above]
    [etc.]
if sy-subrc eq 0.
Assign roles for the user
clear wt_activitygroups. refresh wt_activitygroups.
loop at wt_roles into wa_roles where username = wa_user-username.
    [build an internal table, wt_activitygroups, for system/role assignments for the user]
endloop.
    call BAPI_USER_LOCACTGROUPS_ASSIGN
      exporting
        username                      = [the users name]
      tables
        activitygroups           = wt_activitygroups
        return                       = wt_return.
Endloop.
Ideally, you would have two input files: one with the user data (one record per user), and another one containing the data for the BAPI_USER_LOCACTGROUPS_ASSIGN (on the format USERNAME, SYSTEM, ROLENAME); one entry per line. You'd loop at the first table, containing the user data, then create the user, then loop at all entries in the system/role assignment file for the same username, building an internal table of role assignemnts; then call the second BAPI (provided there were any role assignments to assign for that user!)
Hope this makes sense. It's not rocket science really; you can omit most of the parameters of BAPI_USER_CREATE1, and the second BAPI is even simpler. You could consider validating the input data by checking entries in table USRSYSACT, which contains all valid system/role assignments as seen from the CUA system (this table gets updated every time you do a "text compare" from within SU01.
Regards,
Trond

Block payroll data from cost center for all users except HR team

Hello Expect,
Could any body please advise me how can I restrict some HR data in cost center view from FICO,CRM,SRM and other team,
Now when other team see cost centers it display all data booked there but my client want to restrict some HR data from them
In my project there are 151 roles that can display cost center dat including HR data,
Now my requirment is how can I restrict only HR data belongs to a cost center
I mean to say they should be able to see all cost center data exept a cost center containing HR data.
Please advise how to get solution
Thanks and Regards

Hi,
in T.code PFCG do to the role of the appropriate usr to whom u want restrict cost center.
Hope this helps.
Reagrds
S.Ravi

Roles to deploy a WD Java

Hi everybody,
I would like to deploy a WDJava application in SAP Portal using Netweaver Developer Studio, but I don't know if it's possible to do this using a user without Admin roles.
I don't want to use Admin roles because of the people who are going to do this job have not to access to this type of role.
Thanks for your help.
Victoria

Hi Victoria,
The stright forward answer to your question would be 'None'. - You don't need any portal role assigned to you to deploy a WDJ application to the portal server.
There are two possible scenarios while developing WDJ application using NWDS.
Scenario 1: Local WDJ applications
- In this case, you are creationg a web dynpro java application by selecting the project type as WDJ. while deploying the WDJ component(or when deploy and run the web dynpro application), you would be asked the SDM password. If you don't have the same, please request the same from the portal admin(or BASIS) person for the same. In this case your application is a stand alone one and can be run as a WDJ application through a URL.
Scenario 2: WDJ DCs
- In order to make the transportation of compoents from one environment to another / to use the cocept of re use etc, WDJ applications could be developed as Development Components from the DC perspective of NWDS. In this case as well, you would be requested the SDM password while deploying the component.
Coming back to the question, what use a deployed application in the portal? In portal we have to make this WDJ applciation part of a role(portal role), so that it could be assigned to a portal user (group of portal users). In order to do this, you have to access the particular WDJ application in the PCD(portal content directory).
For this part( in order to access the deployed applicatios in portal), you need a portal role called 'Content Administrator' to access the deployed applications and then assign it to a Portal Role.
Hope this clears the confusion.
Chill,
Jakes.

Business role needed to access org model in UI

Hi Experts,
Please advice which busniess role is used to access org modeling in crm ui?
Thanks!
Rgs, Michelle

Hi Michelle,
use Business role BP_POWERUSER click on work center Masterdata and search for Organization.
Hope this will help!
Thanks,
Vikash.

Authorization to new hierarchy node (Profit center) in 3.5 Transaction code

Dear Colleagues,
I have an autorization problem that I wish you can help me with.
I have a (3.5) profit center hierarcy with authorizations on each node. These were made a long time ago by another consultant. Suddenly we have an additional node in the hierarchy (a new region). How do I give authorizations for this new node? Which transaction codes do I use, and how? I am a little bit familiar with PFCG, and have just briefly seen RSSM and SU01. But I can't see where I add authorization functionality yo the new node, and then give it to the user.
Will sign points!
Regards Silje

Look in RSSM to find out what your authorization object is for Profit Center.
Then lookup the roles that use this Profit Center authorization object -- Not sure how to do this because I usually know the roles I create! Ask the security or basis team for help if you can't find them.
Look at those roles and get an idea of how they are used ... In some cases you can group together values and use a wildcard to select a whole group. Such as, if I have profit centers ABC, ACD, ADE and BAC, I can select the group A* to only allow access to the profit centers starting with A. This person will not have access to the BAC profit center.
So, try to figure out how the other consultant assigned the profit centers, then add your new one in in the same way.
Brian

OVD Roles

Hello folks,
I have some questions regarding OVD roles:
It is possible to defer defined groupings of users to an attached data source?
It is possible to defer defined groupings of users through a PAAM module?
Product administrative roles can have a clear delineation from general client access control?
I know are generic questions but any help can be appreciated.
Thanks

user8846155 wrote:
This method seems a little inefficient compared to the first. I think you can deal with that. Pre-fetch and caching come to mind.
When you say the database is the slave, are you suggesting we keep our user tables for query join purpose? Use some method of synchronization?Yes, exactly. Not just for join purpose but also to avoid changing the app. Avoiding data sunch from LDAP tp your database is a goal that may be less important than having your app work fast and avoid change..this depends on your priorities of course.
If we were to use OVD instead of SQL, we would need some method of representing our role/context associations in OVD.
User-> Role-> One or more context values for user association to role.
As a user, I may be an agent for two customers, with 1 having further restriction on contracts.
Role Context
Agent Customer X
Agent Customer Y, Contract Z
I apologize if I am not being very clear.Your question is basically how to translate database schema to directory schema. There's many ways to do that. One way:
Object class Role
- attribute customerID
- attribute contractID
Object class User
- multi-valued attribute 'role' of type Role
User entry for Agent / Customer X
- objectclass User with 'role' set to Agent.
- objectlcass Role with 'customerID' set to CustomerX
User entry for Agent / Customer Y
- objectlcass User with 'role' set to Agent.
- objectclass Role with 'customerID' set to CustomerY and 'contractID' set to Contract Z.
Then it's very easy to construct an LDAP query to pull out your users depending on their role and context (customer and contract).

Hierarchy of Roles

How can i make hierarchy of roles at AquaLogic Suite 6?
And how can i link the roles (that should be organized in hierarchy) with the Organization Units of my process?
Thanks,
Carlos Maciel

Can you post your web.xml file?
I posted a similar question to this in the JHeadStart forum:
http://forums.oracle.com/forums/thread.jsp?forum=38&thread=306225
I received the error you are referring to when the child roles were defined PRIOR to the MASTER (in your case ADMIN) role.
When I defined it as:
master role1
user1
user2
child role1
user3
master role1
child role2
user4
master role1
I would not get the error, BUT, user1 would end up with:
child role1
child role2
[note: no master role1]
If I defined it as:
master role1
user1
user2
child role1
child role2
child role1
user3
child role2
user4
Then I'd get the error on deployment.
If I defined the roles as:
child role1
user3
child role2
user4
master role1
user1
user2
child role1
child role2
then user3 and user4 were both ok, but user#1 and user#2 showed NO roles at all!
The role check page was:
<%@ taglib uri="/WEB-INF/struts-logic.tld" prefix="logic"%>
<%@ page contentType="text/html;charset=windows-1252"%>
<html>
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"/>
    <title>untitled</title>
    <link href="css/jdeveloper.css" rel="stylesheet" media="screen"/>
</head>
<body>
    <H1>JAAS/JAZN Role check for Act220</H1>
    <CENTER>
      <table cellspacing="3" cellpadding="2" border="1" width="200">
        <tr>
          <td>ADMIN</td>
          <td>
            <logic:present role="ADMIN">Yes</logic:present>
          </td>
        </tr>
        <tr>
          <td>CHILD1</td>
          <td><logic:present role="CHILD1">Yes</logic:present> </td>
        </tr>
        <tr>
          <td>CHILD2</td>
          <td><logic:present role="CHILD2">Yes</logic:present> </td>
        </tr>
      </table>
    </CENTER>
</body>
</html>

Strategic role of XI as clearing center?

Similar Messages

Maybe you are looking for