Uploading PFCG Roles - BP_CRM_ROLES.ZIP
Hi all,
We are following the Building Block C04 to set up the CRM 2007 WEB UI.
According to the documentation we are supposed to upload predefined roles. These predefined roles are included in the file BP_CRM_ROLES.ZIP.
Anyone who knows from where I can download this file?
Thanks,
//anders
Hi Anders,
I believe that C04 describes to create Authorization Objects for the PFCG roles based on your Business Role.
E.g. Business Role: ZSALESPROFESSIONAL
PFCG role:Z_PFCG_SALESPRO (You assigned this to your Business Role. At this point PFCG role is an empty Role)
Now you can generate Authorization Objects based on your Work Centers and Navigation Bar profile defined in Business Role. To do this:
1. Execute the report CRMD_UI_ROLE_PREPARE. It will generate the txt file with the name of you Business Role in SAP Work directory. e.g. ZSALESPROFESSIONAL.txt
2. In edit mode, Under Menu in PFCG select Import from file and load this from SAP Word Directory.
3. It will generate all the required Auth. Objects .
Hope it helps. If not revert me with more details.
Regards,
Bobby
Similar Messages
-
Error Trying to upload file to PFCG Role
I'm trying to upload a file to PFCG Role.
The file is created through report CRMD_UI_ROLE_PREPARE.
The generated file has a format like:
FORMAT 1.2BNODE 0000200001 FOLDERTEXT 00002ESZWEBSALESPR3NODE 0000300002 FOLDERTEXT 00003ESSLS-HOMENODE 0000400003 SERVICE OTSERVICE 55FCD15A370FC15079FE700D7C356EHSTEXT 00004ESUIU_COMP_WCC_SLS_HOME_MainWindow_DEFAULTNODE 0000500002 FOLDERTEXT 00005ESZSLS-ACCNODE 0000600005 SERVICE
In the note 389675 i found the format should be something like
FORMAT 1.2B
NODE 000020000100001YOUR_OWN_TYPE node information for node A
TEXT 00002ENThis is the text for node A in English
TEXT 00002DEThis should be the text for node A in German
TEXT 00002FRThis should be the text for node A in French
When I try to load this file in the PFCG Roler I receive the following error:
"The file does not contain any valid data"
So I assume the format is giving me problems.
Any idea of what do I need to do to solve this?
Thanx in advanced.
Best RegardsHi
I'm getting the same error while trying to import the file generated by CRMD_UI_ROLE_PREPARE. Can you please share what you have done to resolve the issue?
Thanks! -
Hi all,
I am new to CRM 7.0 Can someone explain What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
Thanks.
Neha.Neha,
Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely. I'm locking this thread due to it fact that this question has been asked many times before by many different people.
These threads explain the topic in more detail:
Re: Reg: Business Role
Assignment pfcg-role to user and assignment pfcg-role to business role
Thank you,
Stephen -
Automatic upload of roles from ECC to portal (UME with LDAP)
Hi experts,
This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
However, it concerns this time "UME with LDAP".
Problematic :
SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
Questions :
1 - Did anyone ever try to implement such an automatic tool ?
2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
Many thanks for your inputs
Alexis MARTINHello,
As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
Oliver -
BAPI or Function Module to change PFCG role of an User from Background
Hello Experts,
I have a requirement to change PFCG role assigned in User from background and I need a BAPI , FM or any other method to do the same, I have gone through BAPI_BUPA_ROLE_REMOVE and BAPI_BUPA_ROLE_ADD_2 but as per my understanding , these are related to business role not PFCG.
Please help!!!
regards,
Arnab.Resolved by myself.
regards.
arnab -
Upload of role in Access Enforcer 5.2.
Hi All,
I need to upload roles in Access Enforcer from SAP ECC system. Actually i have uploaded the roles in Access Enforcer, but all unwanted roles have also got uploaded.
Now i need some way, first to clean entire uploaded roles & then upload selected roles.
Please suggest.
Thanks & Regards,
PravinHi Pravin,
Here are the steps:
1) Download all the roles into an excel spreadsheet:
Go to configuration -> Roles- Search roles -> Click on 'Export' button. This CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands.
2) Delete all the roles from CUP: Now, in the same screen as above, select all the roles and delete them.
3) Delete not needed roles from spreadsheet and upload it into CUP:
Now, delete all the unwanted roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
Regards,
Alpesh
SAP GRC Manager (PwC) -
Problem with uploading the role from backend R3 ECC 5.0 system
hi all gurus,
i have created one role in the back end sustem and then assigned it to one user.
Now i have created one system to connect that backend system and mapped one portal user to that backend system user then i tried fro uploading the role problem.
Now after prosessing the role upload it will show the report with error for "PROCESSING ATTRIBUTES" as follow:
15:31:18.452 Error Click for Details Processing attributes
Then after click8ing on it it shows following thing
Time Stamp Severity Severity Text Details Stack Trace Message Text Message Long Text
15:31:18.593 Error Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00001034, , , 00000525, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00139842, 00000234]'.
15:31:19.93 Error Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000387, , , 00000155, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00141548, 00001073]'.
15:31:19.218 Error Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000922, , , 00000469, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00142382, 00001486]'.
and after clicking on one of the row on "Click for stack strace" It shows the following thing in "Stack trace for exception " window.
com.sap.portal.pcd.rolemigration.RoleMigrationException: Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. at com.sap.portal.pcd.rolemigration.RoleMigration.getTargetUrl(RoleMigration.java:780) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.attrsRoleMenuItem(RoleMigrationObject.java:2999) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.addRoleAttibutes(RoleMigrationObject.java:3584) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1719) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:769) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:484)
So please help me to sort out this problem.
for further attachments
my email id is [email protected]
thanks in advance,
regards,
Hardik.OPEN DATASET i_dsn IN LEGACY TEXT MODE FOR INPUT
for this statement add ENCODING DEFAULT
Reward if useful
Naveen -
Indirect pfcg role assignment - no roles in SU01
Hi experts,
I would like to assign PFCG roles via indirect assignment, this means i would assign roles with the organisational model (transation ppomw).
I did the assignment and i executed the transaction pfud for user master data reconciliation. But the pfcg roles are not assigned to the user (see roles in transaction SU01). Usually the roles should be displayed (in blue and with xflag for indirect assignment).
Are there any customizing configurations i have to keep in mind?
Hope you can help as fast as possible.
Thanks a lot and best regards,
NataliRun PFUD if this is still an issue.
-
1 Business Role = 1 PFCG role
Hi,
We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single PFCG role?
Regards,
NikhilNikhil,
The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
Hope this helps.
Amar. -
Business Role - Link to PFCG role
Dear all,
When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
What is the functionality of this PFCG role in relation to the Business Role?
When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
Is there some documentation available that explain this relationship between the PFCG role and the business role.
Thank you in advance,Dear Ivan,
To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
CRM Business Partner Roles:
http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
Rights and responsibilities that a business partner can have in various business transactions.
The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
Each business partner role contains a predefined set of functions based on the business partners relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
PFCG Roles:
http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
Hope this will help.
Regards,
Naveen. -
Hi Experts,
I have created a new Business role ZBP_MKT_MAN and PFCG role ZSAP_CRM_UIU_MKT_PROFESSIONAL. However the authorisations are not getting copied from SAP_CRM_UIU_MKT_PROFESSIONAL to ZSAP_CRM_UIU_MKT_PROFESSIONAL properly. Can someone guide me with the same.
Thanks
LeelaHi Maikel,
Sorry type the infor incorrectly, i have creared a BP role ZBP_MKT_MAN for which i have created a PFCG role ZBP_MKT_MANAGER to the add the same to it. However, the new PFCG role ZBP_MKT_MANAGER is not getting displayed in the PFCG roles list and i am not able to add the same to the BP role ZBP_MKT_MAN. Can you plz let me know how to proceed further.
Thanks
Leela -
Multiple PFCG Roles to a user and one business role
Hello SAP CRM Experts,
we are facing a problem then I need your help.
The external user can access the CRM through three distinct business roles.
However, for each of these business roles, there are specific access
rules configured in three different PFCG profiles.
In the registration of the user (SU01), are assigned the three profiles
PFCG because the user must have access to three different business roles.
However, for one of the profiles the ability to modify the document
service order is blocked and for the other is allowed to modify this
document.
Is there a customizing where I can associate the PFCG role to the
business role, and then, when the user logs into the system, it
identified the business role that he accessed the PFCG profile associated.
However, this configuration is not working, and did not solve the problem.
It seems to me that there is a merge of all the permissions that the user
has, and is not being considered the PFCG role associated with the
specific business role.
This is really correct? The merge permissions occurs?
Best regards,
Diogo LupinariYes, thatu2019s correct. When user is assigned multiple PFCG roles, all authorizations are in play.
-
Assignment pfcg-role to user and assignment pfcg-role to business role
Hello, Gurus!
What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
As I see authrizations from pfcg-role assigned to business role have no effect to user...
Best regards,
Artuк Litvinov.Artur,
The business role assignment does not give a user that PFCG role. Instead it is just a mapping table and does nothing more.
Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient. In your scenario let's do the following:
You have pfcg roles:
RA
RB
You a have business role
B1
You have users:
Joe
Jack
Business Role B1 is assigned to role RA which contains UIU_COMP.
User Joe gets business role B1 and roles RB which does not have UIU_COMP. This will not let him use the webclient.
User Jack gets business role B1 and pfcg role RA. This will work because everything is there.
This means you need both the correct PFCG plus business role setup to make it work properly.
Take care,
Stephen -
Restrict creation of BP based on PFCG role
Hi Experts,
We are implementing CRM 7.0. In the IC AGENT business role we would like to restrict the user to only create contacts using the PFCG role SAP_CRM_UIU_IC_AGENT. We tried using authorisation object B_BUPA_RLT and CRM_BPROLE. But it did not work. Do you know if we are missing anything else? FYI..We are not using ACE.
Best regards,
DavidIn our system we had a similar problem but with Accounts or Prospects creation. This is how we resolved it: In CRM 7.0 each Customer/ Prospect BP Record has a field Employee responsible on it. This is set automatically on the BP creation page, if the User ID of the user creation the record is assigned to an Employee record. If the user does not have access to create Employee relationships (BUR011) it will fail to complete the customer creation process. Authorization Object B_BUPR_BZT (Business Partner Relationships: Relationship Categories) controls this. You will need to add BUR011 to u201CRELTYP_fromu201D
-
Pfcg roles behind ic webclient profiles
Hi,
Can anybody tell what are PFCG roles behind for each IC Webclient profiles like SALES B2B, SALES B2C, SERVICE.... (tx: crmc_ic_main)
thanks
TimHi Tim,
Again, PFCG roles are a combination of authorisations, that define what the person linked to the role can do.
e.g. An authorisation is defined that th role can create/change/read sales orders. Within the same role there is an authorisation that indicates that the role cannot create Service Contracts. and so on...
These are standard authorisations that are used by the system.
Hope this is clear now.
ps. Don't forget to reward points if the answers are usefull and when you question is answered reward points and put the question to answered.
Kind regards,
Micha
Maybe you are looking for
-
Hi Here is the situation: I have a Farm with 3 servers W2012R2 in a Domain Server1 Server 2 Server3 RDSession Host RDSession Host RDSession Host Connec
-
Can't finish install via OTA or delete the firmware update data
After many times trying to download the iOS update, when I was finally able to finish the download, my iPhone 4 rebooted and got stucked in Recovery Mode. iTunes failed to restore it (and it tried to restore to my old iOS version). After several hour
-
How do I get my head phones to work with my Apogee Mic in Garage Band
I cannot get my head phones to work when my apogee mic is plugged in. When I use the internal mic it works. The head set when the apogee mic is plugged in i can hear the computer information but not my voice doing the recording
-
Preview on Sapscript or Smarforms in an CL_GUI* container ..?
Hello community, I wondering whether it's possible to place the print preview (Sapscript) of an transaction in in a cl_gui* container window. It seems that there is no suitable class Interface availyble. Anyone knows a trick? Best regards Ferdi-M
-
Custom PriceTypes in E-Commerce
Hi all, my understanding is that we can only select predetermined price types to be used within E-Commerce. If anyone else there has a differing opinion then would be interested to hear about it What we are trying to achieve is to access a custom com