Uploading PFCG Roles - BP_CRM_ROLES.ZIP

Hi all,
We are following the Building Block C04 to set up the CRM 2007 WEB UI.
According to the documentation we are supposed to upload predefined roles. These predefined roles are included in the file BP_CRM_ROLES.ZIP.
Anyone who knows from where I can download this file?
Thanks,
//anders

Hi Anders,
I believe that C04 describes to create Authorization Objects for the PFCG roles based on your Business Role.
E.g. Business Role: ZSALESPROFESSIONAL
       PFCG role:Z_PFCG_SALESPRO (You assigned this to your Business Role. At this point PFCG role is an empty Role)
Now you can generate Authorization Objects based on your Work Centers and Navigation Bar profile defined in Business Role. To do this:
1. Execute the report CRMD_UI_ROLE_PREPARE. It will generate the txt file with the name of you Business Role in SAP Work directory. e.g. ZSALESPROFESSIONAL.txt
2. In edit mode, Under Menu in PFCG select Import from file and load this from SAP Word Directory.
3. It will generate all the required Auth. Objects .
Hope it helps. If not revert me with more details.
Regards,
Bobby

Similar Messages

  • Error Trying to upload file to PFCG Role

    I'm trying to upload a file to PFCG Role.
    The file is created through report CRMD_UI_ROLE_PREPARE.
    The generated file has a format like:
    FORMAT              1.2BNODE                0000200001     FOLDERTEXT                00002ESZWEBSALESPR3NODE                0000300002     FOLDERTEXT                00003ESSLS-HOMENODE                0000400003     SERVICE             OTSERVICE             55FCD15A370FC15079FE700D7C356EHSTEXT                00004ESUIU_COMP_WCC_SLS_HOME_MainWindow_DEFAULTNODE                0000500002     FOLDERTEXT                00005ESZSLS-ACCNODE                0000600005     SERVICE            
    In the note 389675 i found the format should be something like
    FORMAT              1.2B
    NODE                000020000100001YOUR_OWN_TYPE       node information for node A
    TEXT                00002ENThis is the text for node A in English
    TEXT                00002DEThis should be the text for node A in German
    TEXT                00002FRThis should be the text for node A in French
    When I try to load this file in the PFCG Roler I receive the following error:
    "The file does not contain any valid data"
    So I assume the format is giving me problems.
    Any idea of what do I need to do to solve this?
    Thanx in advanced.
    Best Regards

    Hi
    I'm getting the same error while trying to import the file generated by CRMD_UI_ROLE_PREPARE. Can you please share what you have done to resolve the issue?
    Thanks!

  • Business Role and PFCG Role

    Hi all,
        I am new to CRM 7.0 Can someone explain  What is a Business Role in CRM 7.0 and what is the relationship between Business role and PFCG role. What is the transaction Code to create a Business role.
       And also I heard that there is no PCUI in CRM 7.0. Is it true and if so what is used in place of the PCUI
    Thanks.
    Neha.

    Neha,
    Next time please do a search in this forum on business roles, and you would find many topics discussing this information more completely.  I'm locking this thread due to it fact that this question has been asked many times before by many different people.
    These threads explain the topic in more detail:
    Re: Reg: Business Role
    Assignment pfcg-role to user and assignment pfcg-role to business role
    Thank you,
    Stephen

  • Automatic upload of roles from ECC to portal (UME with LDAP)

    Hi experts,
    This thread reopen the question asked on the following message : automatic upload of roles from BI to portal
    However, it concerns this time "UME with LDAP".
    Problematic :
    SAP Library 04s tells us that is not yet possible to automate role replication (or role assigment replication) from ABAP Based back-end to Netweaver Portal. Only manual process for initial upload is possible.
    Source = http://help.sap.com/saphelp_nw04s/helpdata/en/41/5e4d40ecf00272e10000000a155106/frameset.htm
    Questions :
    1 - Did anyone ever try to implement such an automatic tool ?
    2 - What if I'm not able to write on the Active Directory ? I am still able, at least, to automate role assignment replication from ABAP Based back-end to Netweaver Portal (ie. UME with LDAP) ? Directly from SAP R/3 to EP through UME, without passing through Active Directory since the group field is not maintained in AD.
    Many thanks for your inputs
    Alexis MARTIN

    Hello,
    As I did not read the previous thread I don't know what exactly you are trying to achieve, but I can tell you about what we have done - as far as it is not too late yet.
    We use the portal with integration to a BI system. In the ABAP stack we have lots of roles with menu items for hundreds of reports. We want the users to see these roles in the portal.
    First we have used the role migration tool of the portal to upload these roles. There is a Java API for executing role uploads from code. You need to create a webservice in the java stack to call this api, and can call the webservice from ABAP.
    However it is just a question of time and role size until this will not work at all. Standard role migration is more or less crap, stability is a problem. It also creates a lot of logs in the PCD and thus fills the database with trash. (After a few OSS messages there is now a program for deleting logs + you can turn of logging.) Also upload of larger roles takes up to an hour, and you alwasy have the problem that your portal roles are not up to date during the day.
    When I got completely fed up, I have implemented an own navigation connector. When you log on to the portal it will connect to the ABAP stack via RFC, load the role, and generate the portal menu from it. It uses caching, but on every logon it checks whether the role has been updated in ABAP since the last time it was loaded. It is up to date, faster then PCD navigation, and you need absoluetely no periodical synching at all. I cant even understand why this is not offered by SAP per standard!
    Drawback is that it will of course only work for the menu items, and only menu items with an "URL-type" are supported. I'm prettry sure however that it would be possible to implement a few other types as well.
    Let me know if you are interested in the solution, I can give you a few additional details: oliverDOTsvisztATwienerbergerDOTcom
    Oliver

  • BAPI or Function Module to change PFCG role of an User from Background

    Hello Experts,
    I have a requirement to change PFCG role assigned in User from background and I need a BAPI , FM or any other method to do the same, I have gone through BAPI_BUPA_ROLE_REMOVE and BAPI_BUPA_ROLE_ADD_2 but as per my understanding , these are related to business role not PFCG.
    Please help!!!
    regards,
    Arnab.

    Resolved by myself.
    regards.
    arnab

  • Upload of role in Access Enforcer 5.2.

    Hi All,
    I need to upload roles in Access Enforcer from SAP ECC system. Actually i have uploaded the roles in Access Enforcer, but all unwanted roles have also got uploaded.
    Now i need some way, first to clean entire uploaded roles & then upload selected roles.
    Please suggest.
    Thanks & Regards,
    Pravin

    Hi Pravin,
       Here are the steps:
    1) Download all the roles into an excel spreadsheet:
    Go to configuration -> Roles- Search roles -> Click on 'Export' button. This CUP, go to 'Search Roles'. Click on 'Search' button without providing any search criteria. This will return all the roles available in CUP. Now, click on Export button. CUP will export all the roles into Excel spreadsheet in the format which CUP understands.
    2) Delete all the roles from CUP: Now, in the same screen as above, select all the roles and delete them.
    3) Delete not needed roles from spreadsheet and upload it into CUP:
    Now, delete all the unwanted roles from CUP and play with the spreadsheet to manipulate other parameters like role approvers, systems, business process etc and upload that spreadsheet into CUP.
    Regards,
    Alpesh
    SAP GRC Manager (PwC)

  • Problem with uploading the role from backend R3 ECC 5.0 system

    hi all gurus,
             i have created one role in the back end sustem and then assigned it to one user.
             Now i have created one system to connect that backend system and mapped one portal user to that backend system user then i tried fro uploading the role problem.
             Now after prosessing the role upload it will show the report with error for "PROCESSING ATTRIBUTES" as follow:
    15:31:18.452  Error Click for Details   Processing attributes
    Then after click8ing on it it shows following thing
    Time Stamp Severity Severity Text Details Stack Trace Message Text Message Long Text
    15:31:18.593  Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00001034, , , 00000525, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00139842, 00000234]'.   
    15:31:19.93  Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000387, , , 00000155, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00141548, 00001073]'.  
    15:31:19.218  Error   Click for Stack Trace Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. SEVERE: getObject(portal_content/com.sap.portal.migrated/SAPComponentSystems/com.vcerp.ZTEST_UPLOAD1), entry '[RoleMenu, 00000922, , , 00000469, * unknown *, * unknown *, * unknown *, , VR1CLNT800, 00142382, 00001486]'. 
    and after clicking on one of the row on "Click for stack strace" It shows the following thing in "Stack trace for exception " window.
    com.sap.portal.pcd.rolemigration.RoleMigrationException: Target undefined for type '0', system 'VR1CLNT800', key '* unknown *', subKey 'null'. at com.sap.portal.pcd.rolemigration.RoleMigration.getTargetUrl(RoleMigration.java:780) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.attrsRoleMenuItem(RoleMigrationObject.java:2999) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.addRoleAttibutes(RoleMigrationObject.java:3584) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:1719) at com.sap.portal.pcd.rolemigration.RoleMigrationObject.migrate(RoleMigrationObject.java:769) at com.sap.portal.pcd.rolemigration.RoleMigrationThread.run(RoleMigrationThread.java:484)
    So please help me to sort out this problem.
    for further attachments
    my email id is [email protected]
    thanks in advance,
    regards,
    Hardik.

    OPEN DATASET i_dsn IN LEGACY TEXT MODE FOR INPUT
    for this statement add ENCODING DEFAULT
    Reward if useful
    Naveen

  • Indirect pfcg role assignment - no roles in SU01

    Hi experts,
    I would like to assign PFCG roles via indirect assignment, this means i would assign roles with the organisational model (transation ppomw).
    I did the assignment and i executed the transaction pfud for user master data reconciliation. But the pfcg roles are not assigned to the user (see roles in transaction SU01). Usually the roles should be displayed (in blue and with xflag for indirect assignment).
    Are there any customizing configurations i have to keep in mind?
    Hope you can help as fast as possible.
    Thanks a lot and best regards,
    Natali

    Run PFUD if this is still an issue.

  • 1 Business Role  = 1 PFCG role

    Hi,
    We can assign 1 PFCG role to BR. But If user has 3-4 PFCG roles assigned to it in SU01 and only 1 of them is assigned to BR then will it affect the functioning of user in Web UI?
    How does 1 PFCG role take care of all functions which user need to be done? Do we need too add all required authorization objects in single  PFCG role?
    Regards,
    Nikhil

    Nikhil,
    The functioning of user in Web UI is guided by SU01's 'Parameters' tab. The 'parameter value' for the 'Parameter ID' dictates the role and subsequent authorizations of the logged in user.
    Ideally speaking, each business role should have a corresponding PFCG role containing only those authorization objects needed to fulfill the task being part of the Business Role. However, we may even skip this assignment. So a business role may not be assigned a PFCG role. Instead if the user is attached to multiple PFCG roles, all those authorizations would hold for the user.
    Hope this helps.
    Amar.

  • Business Role - Link to PFCG role

    Dear all,
    When I create a new business role in CRM there is a field called PFCG role ID in which you must provide a PFCG role.
    What is the functionality of this PFCG role in relation to the Business Role?
    When I look into standard SAP business roles and their associated standard SAP PFCG role I see a lot of "external services"/views. Is it possible to create such a role from scratch myself.
    Is there some documentation available that explain this relationship between the PFCG role and the business role.
    Thank you in advance,

    Dear Ivan,
    To start with Business Partner Roles and PFCG roles are different. Though you have an integration that one business partner cannot view the data of other business partner because of the roles that are being maintained in PFCG.
    Lets say you have two customers (BP Role Customer). One customer cannot view the data of other customer because of the role that is being assigned to his user id in SU01. You create the roles in PFCG.
    CRM Business Partner Roles:
    http://help.sap.com/saphelp_glossary/en/dc/926ecf5e1cd511bcbe0800060d9c68/content.htm
    Rights and responsibilities that a business partner can have in various business transactions.
    The assignment of a BP view determines the relevant data sets, so that only a particular part of the BP master data is displayed, depending on the business transaction in question.
    http://www.crmexpertonline.com/archive/Volume_03_(2007)/Issue_04_(May)/v3i4a4.cfm?session=
    Each business partner role contains a predefined set of functions based on the business partner’s relationship to your company. For example, you could have business partner roles such as employee or vendor. The business partner roles determine the fields you have available in the SAP CRM system for the business partner. Business partner role categories sort business partner roles into groups, such as person or company.
    PFCG Roles:
    http://help.sap.com/saphelp_nw2004s/helpdata/en/52/671285439b11d1896f0000e8322d00/content.htm
    The SAP authorization concept protects transactions, programs, and services in SAP systems from unauthorized access. On the basis of the authorization concept, the administrator assigns authorizations to the users that determine which actions a user can execute in the SAP System, after he or she has logged on to the system and authenticated himself or herself.
    To access business objects or execute SAP transactions, a user requires corresponding authorizations, as business objects or transactions are protected by authorization objects. The authorizations represent instances of generic authorization objects and are defined depending on the activity and responsibilities of the employee. The authorizations are combined in an authorization profile that is associated with a role. The user administrators then assign the corresponding roles using the user master record, so that the user can use the appropriate transactions for his or her tasks.
    Hope this will help.
    Regards,
    Naveen.

  • Issues with New PFCG role

    Hi Experts,
    I have created a new Business role ZBP_MKT_MAN and PFCG role ZSAP_CRM_UIU_MKT_PROFESSIONAL. However the authorisations are not getting copied from SAP_CRM_UIU_MKT_PROFESSIONAL to ZSAP_CRM_UIU_MKT_PROFESSIONAL properly. Can someone guide me with the same.
    Thanks
    Leela

    Hi Maikel,
    Sorry type the infor incorrectly, i have creared a BP role ZBP_MKT_MAN for which i have created a PFCG role ZBP_MKT_MANAGER to the add the same to it. However, the new PFCG role ZBP_MKT_MANAGER is not getting displayed in the PFCG roles list and i am not able to add the same to the BP role ZBP_MKT_MAN. Can you plz let me know how to proceed further.
    Thanks
    Leela

  • Multiple PFCG Roles to a user and one business role

    Hello SAP CRM Experts,
    we are facing a problem then I need your help.
    The external user can access the CRM through three distinct business roles.
    However, for each of these business roles, there are specific access
    rules configured in three different PFCG profiles.
    In the registration of the user (SU01), are assigned the three profiles
    PFCG because the user must have access to three different business roles.
    However, for one of the profiles the ability to modify the document
    service order is blocked and for the other is allowed to modify this
    document.
    Is there a customizing where I can associate the PFCG role to the
    business role, and then, when the user logs into the system, it
    identified the business role that he accessed the PFCG profile associated.
    However, this configuration is not working, and did not solve the problem.
    It seems to me that there is a merge of all the permissions that the user
    has, and is not being considered the PFCG role associated with the
    specific business role.
    This is really correct? The merge permissions occurs?
    Best regards,
    Diogo Lupinari

    Yes, thatu2019s correct.  When user is assigned multiple PFCG roles, all authorizations are in play.

  • Assignment pfcg-role to user and assignment pfcg-role to business role

    Hello, Gurus!
    What is the difference between direct assignment pfcg-role to user and assignment pfcg-role to business role? What is the effect from assignment pfcg-role to business role?
    As  I see authrizations from pfcg-role assigned to business role have no effect to user...
    Best regards,
    Artuк Litvinov.

    Artur,
    The business role assignment does not give a user that PFCG role.  Instead it is just a mapping table and does nothing more. 
    Therefore that UIU_COMP auth object must exist in the PFCG roles assigned to the user in order for them to use the webclient.  In your scenario let's do the following:
    You have pfcg roles:
    RA
    RB
    You a have business role
    B1
    You have users:
    Joe
    Jack
    Business Role B1 is assigned to role RA which contains UIU_COMP.
    User Joe gets business role B1 and roles RB which does not have UIU_COMP.  This will not let him use the webclient.
    User Jack gets business role B1 and pfcg role RA.  This will work because everything is there.
    This means you need both the correct PFCG plus business role setup to make it work properly.
    Take care,
    Stephen

  • Restrict creation of BP based on PFCG role

    Hi Experts,
    We are implementing CRM 7.0. In the IC AGENT business role we would like to restrict the user to only create contacts using the PFCG role SAP_CRM_UIU_IC_AGENT. We tried using authorisation object B_BUPA_RLT and  CRM_BPROLE. But it did not work. Do you know if we are missing anything else? FYI..We are not using ACE.
    Best regards,
    David

    In our system we had a similar problem but with Accounts or Prospects creation. This is how we resolved it: In CRM 7.0 each Customer/ Prospect BP Record has a field Employee responsible on it. This is set automatically on the BP creation page, if the User ID of the user creation the record is assigned to an Employee record.  If the user does not have access to create Employee relationships (BUR011) it will fail to complete the customer creation process. Authorization Object B_BUPR_BZT (Business Partner Relationships: Relationship Categories) controls this. You will need to add BUR011 to u201CRELTYP_fromu201D

  • Pfcg roles behind ic webclient profiles

    Hi,
    Can anybody tell what are PFCG roles behind for each IC Webclient profiles like SALES B2B, SALES B2C, SERVICE.... (tx: crmc_ic_main)
    thanks
    Tim

    Hi Tim,
    Again, PFCG roles are a combination of authorisations, that define what the person linked to the role can do.
    e.g. An authorisation is defined that th role can create/change/read sales orders. Within the same role there is an authorisation that indicates that the role cannot create Service Contracts. and so on...
    These are standard authorisations that are used by the system.
    Hope this is clear now.
    ps. Don't forget to reward points if the answers are usefull and when you question is answered reward points and put the question to answered.
    Kind regards,
    Micha

Maybe you are looking for