Use of CRMD_UI_ROLE_PREPARE.

Hi SAP Gurus,
I am bit confused about CRMD_UI_ROLE_PREPARE report and the T-code Su24, these r some how related with Business Role and PFGC role configuration, that I know, but how? What is the significance of these two and why we need to maintain these?
Is this not enough to configure a Business Role for user and assign PFCG role , technical Role and Layout profile and authorization Key profile one by one with Business Role? why do we need to use CRMD_UI_ROLE_PREPARE and SU24?
Please Help.
Thanks and Regards
Sarkar

Hi Sarkar
Maintaining authorization proposals in SU24 is the preferred approach if you are dealing with
many business roles and therefore need to maintain your authorizations centrally. If you just
have few business roles and prefer maintaining authorizations directly in the PFCG profile.
CRMD_UI_ROLE_PRPEARE
  The above report determines the SU24 traces relevant for a business role by analyzing the
business role´s logical links. Since the report cannot directly write the role menu into the
PFCG role it creates a text file containing the menu information.
Hope this may help you.
Regards
Sunil. 

Similar Messages

  • S_TCODE in CRM Roles

    Hi all,
    I am relatively new to CRM and have the following question regarding design of CRM security roles.
    We have a marketing manager who needs to log on directly to the CRM production system to execute a transaction. I have used the CRMD_UI_ROLE_PREPARE programme to create the PFCG role from the business role and this all works ok.
    Now they need to be able to execute the transaction so I am wondering:
    Is it good design to add s_tcode to the role with all the UIU* components?
    Should transaction roles be kept seperate?
    Is S_Tcode the only object used for this or are there further considerations for CRM?
    Thanks.

    Richard,
    Since you are relatively new to CRM I suggest you obtain and look through the Security Guide for your version of CRM. From there you might have more specific questions regarding your CRM role design. Its a great start.
    https://websmp208.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000401180
    Thanks,
    Matt

  • Missing authorizations for authorization object UIU_COMP

    I have generated the pfcg role for a business role using report CRMD_UI_ROLE_PREPARE and assigned the pfcg role to a user.
    The user is apparently able to perform navigation as required. However, when a ST01 trace is run for the user, there are few missing authorizations for UIU_COMP. Could anyone please explain the reason for this? No changes have been made to object UIU_COMP  i.e. only values generated by the report is present there. Should the missing authorizations be added manually to the role?

    I would recomend that you define for component UIU_COMP in your pfcg role full access (all set to *), because this authorization object is used for access to web ui components. Even thou if you define this object to full access users will still see just components defined in business role.
    Regards.

  • Security Object UIU_COMP

    I am looking for any direction on the use of UIU_COMP within PFCG roles for the new UI.  The default roles which I have copied do not seem to cover all aspects of required security.  What about any custom development?  Is there any direction or rule of thumb as to determining what entries are required?

    There are a number of methods available to determine the settings needed for this authorization object that you can try.  Two initial suggestions I would have are:
    1)  Assign a test user SAP_ALL and run an ST01 trace while the test user is accessing the Web UI.  Any calls to the UIU_COMP object will be listed along with the field values needed.  Add these authorization values to the production user role.
    2)  Use program CRMD_UI_ROLE_PREPARE to generate the necessary UIU_COMP settings, based on the CRM business role that is being assigned to the user. 
    Hope this helps.

  • Is file created by report CRMD_UI_ROLE_PREPARE mandatory in CRM Role Design

    Hi All,
    The CRM 7security guide mentions usage of file created by report CRMD_UI_ROLE_PREPARE for Designing role. Can anyone suggest, whether it is Manadatory to perform this report.
    I have designed Role, WITHOUT using this report.

    Hi Raghu, your explaination is not clear to me.
    my understanding-The report produces the file from a Business Role, which contains Services/BSPs,etc.... This file needs to be imported into Menu Tab, by option 'Import From File'. So, when these Services/BSPs are added into Menu tab, they will auto-populate their SU24 entries(authorization objects) in Authorization Tab(like in Transaction Codes)
    Could you be clear on "report CRMD_UI_ROLE_PREPARE will help you with generating the CONTENT automatically", as mentioned by you. Which CONTENT: Entries(Services,etc...) in Menu Tab OR their SU24 auth. Objects.
    Also, "you can import the file from PFCG profile menu" is not clear. Which MENU are you referring here? The MENU tab which contains Services/BSPs,Transaction Codesetc.. OR the MENU bar inside Authorization Tab
    Could you suggest on this, as i this is what i am desparately looking for

  • Authorization issues after generating PFCG profile using CRMD_UI_ROLE_PREPA

    Dear expert
    We create a navigation bar profile and a business role. Then, we generated a PFCG profile for this business role to gather all the authorization object required to meet the functionality provided in this business role. For that, we used the program CRMD_UI_ROLE_PREPARE and then, imported file in our PFCG profile.
    But after assigning the user to this business role and PFCG profile, we still have authorization issues. For example, the result lists are not displayed.
    The kind of error we get is:
    +Cannot display view BP_CONT/ContactDetails
    An exception has occurred Exception Class  CX_BSP_DLC_CONFIG_GENERAL_ERR - Error creating configuration model 
    Method:  CL_BSP_DLC_VIEW_DESCRIPTOR=>LOAD_APPL_MODEL 
    Source Text Row:  14
    Cannot display view BP_ADDR/StandardAddress
    An exception has occurred Exception Class  CX_BSP_DLC_CONFIG_GENERAL_ERR - Error creating configuration model 
    Method:  CL_BSP_DLC_VIEW_DESCRIPTOR=>LOAD_APPL_MODEL 
    Source Text Row:  14 +
    Thanks in advance for your help
    Best regards
    Stephanie

    Hi,
    It is not a short dump but an exception raised in the new UI:
    Cannot display view BP_CONT/ContactDetails
    An exception has occurred Exception Class CX_BSP_DLC_CONFIG_GENERAL_ERR - Error creating configuration model
    Method: CL_BSP_DLC_VIEW_DESCRIPTOR=>LOAD_APPL_MODEL
    Source Text Row: 14
    Stephanie
    Edited by: Stephanie Blouin on Oct 23, 2008 7:48 AM

  • Issue with generating a security role in program CRMD_UI_ROLE_PREPARE

    Hello -
      We have recently upgrade from CRM 2007 from CRM 4.0. We are working with the Business Roles and generating the security role from the business role using CRMD_UI_ROLE_PREPARE. We first create a simple test Business Role, a Z* copying from TPM_ROLE. Then we generated the security using CRMD_UI_ROLE_PREPARE. This was fine. Now was have copied a Business Role from TPM_ROLE that is one we want to use. We have created our own Z* Nav Bar and Role Config Key. This is working fine, but now when we try to generate using CRMD_UI_ROLE_PREPARE, the txt file is not generated, though there are no errors in the log. We can still generate the security role from our simple test. We have looked on line, and read the article in CRM Expert in June on Business Roles, but have not found the solution yet. Has anyone run into this?
    thanks
       George

    This is how I used this program:
    A. Generate required authorization objects
    1.     T-Code: SA38
    2.     Enter report CRMD_UI_ROLE_PREPARE and choose Execute.
    3.     Select your Business Role.
    4.     Choose language EN.
    5.     Choose Execute.
    Result: A file is created for each Business Role and saved on your computer in the SAP working directory. If you are working with Microsoft Windows XP, this file is saved in C:\Documents and Settings\<User ID>\SapWorkDir\.
    B. Assign authorization objects
    1.     T-Code: PFCG
    2.     Enter your Role and choose Change.
    3.     On the Menu tab choose Import from file and upload the file previously created.
    4.     Choose Save.
    Then adapt the authorizations if needed and choose Generate.
    Stephanie.

  • How do I use Edge Web Fonts with Muse?

    How do I use Edge Web Fonts with Muse - is it an update to load, a stand alone, how does it interface with Muse? I've updated to CC but have no info on this.

    Hello,
    Is there a reason why you want to use Edge Web Fonts with Adobe Muse?
    Assuming you wish to improve typography of your web pages, you should know that Muse is fully integrated with Typekit. This allows you to access and apply over 500 web fonts from within Muse. Here's how you do it:
    Select a text component within Muse, and click the Text drop-down.
    Select Add Web Fonts option, to pop-open the Add Web Fonts dialog.
    Browse and apply fonts per your design needs.
    Muse also allows you to create paragraph styles that you can save and apply to chunks of text, a la InDesign. Watch this video for more information: http://tv.adobe.com/watch/muse-feature-tour/using-typekit-with-adobe-muse/
    Also take a look at these help files to see if they help you:
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-1.html
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-2.html
    http://helpx.adobe.com/muse/tutorials/typography-muse-part-3.html
    Hope this helps!
    Regards,
    Suhas Yogin

  • How can multiple family members use one account?

    My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data.  My Husband just added his iphone to the account and got all of my daughters contacts.  I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice.  Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

    My children have iphones, ipads, ipods and mac books, my problem is how do you use home sharing with the devices and not get each others data.  My Husband just added his iphone to the account and got all of my daughters contacts.  I understand they could have there own accounts but if i buy music on itunes and both children want the same song, I don't feel i should have to pay for it twice.  Is there away we can have home sharing on the devices and they can pick and choose what they want? and is this icloud going to make it harder to keep their devices seperate?

  • Iphoto crashing after using mini-dvi to video adapter

    Hi, IPhoto on my Macbook is crashing. I can open it, then as soon as I scroll down it locks up and I have to force quit.
    This started happening right after I used a Mini-DVI to Video Adapter cable to hook my macbook up to my TV. The adapter/s-video connection worked and I was able to see the video on the tv. But iphoto immediately locked up the computer when I went to slide show and now it locks every time I open it.
    Any ideas?
    Thank you:)
    Dorothy

    It means that the issue resides in your existing Library.
    Option 1
    Back Up and try rebuild the library: hold down the command and option (or alt) keys while launching iPhoto. Use the resulting dialogue to rebuild. Choose to Rebuild iPhoto Library Database from automatic backup.
    If that fails:
    Option 2
    Download iPhoto Library Manager and use its rebuild function. This will create a new library based on data in the albumdata.xml file. Not everything will be brought over - no slideshows, books or calendars, for instance - but it should get all your albums and keywords, faces and places back.
    Because this process creates an entirely new library and leaves your old one untouched, it is non-destructive, and if you're not happy with the results you can simply return to your old one.
    Regards
    TD

  • How do multiple family members use iTunes.? One account or multiple?

    How do multiple family members use iTunes. One account right now but apps gets added to all devices and iTunes messages go to all devices.  Can multiple accounts be setup and still have ability to share purchased items?

    Hey Ajtt!
    I have an article for you that can help inform you about using Apple IDs in a variety of ways:
    Using your Apple ID for Apple services
    http://support.apple.com/kb/ht4895
    Using one Apple ID for iCloud and a different Apple ID for Store Purchases
    You can use different Apple IDs for iCloud and Store purchases and still get all of the benefits of iCloud. Just follow these steps:
    iPhone, iPad, or iPod touch:
    When you first set up your device with iOS 5 or later, enter the Apple ID you want to use with iCloud. If you skipped the setup assistant, sign in to Settings > iCloud and enter the Apple ID you’d like to use with iCloud.
    In Settings > iTunes and App Stores, sign in with the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match). You may need to sign out first to change the Apple ID.
    Mac:
    Enter the Apple ID you want to use for iCloud in Apple () menu > System Preferences > iCloud.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in Store > Sign In. In iTunes 11, you can also click iTunes Store > Quick Links: Account.
    PC (Windows 8):
    Enter the Apple ID you want to use for iCloud in the Control Panel. To access the iCloud Control Panel, move the pointer to the upper-right corner of the screen to show the Charms bar, click the Search charm, and then click the iCloud Control Panel on the left.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in iTunes. In iTunes 10, select Store > Sign In. In iTunes 11, click iTunes Store > Quick Links: Account.
    PC (Windows 7 and Vista):
    Enter the Apple ID you want to use for iCloud in Control Panel > Network and Internet > iCloud.
    Enter the Apple ID you want to use for Store purchases (including iTunes in the Cloud and iTunes Match) in iTunes 10 in Store > Sign In. In iTunes 11, click iTunes Store > Quick Links: Account.
    Note: Once a device or computer is associated with your Apple ID for your iTunes Store account, you cannot associate that device or computer with another Apple ID for 90 days. Learn more about associating a device or computer to your Apple ID.
    Thanks for using the Apple Support Communities!
    Cheers,
    Braden

  • Using SQVI to generate report of open and released delivery schedule lines

    All,
    I'm using SQVI  to generate an excel spreadsheet for some buyers to show open released schedule lines because they are a 1 line item per scheduling agreement company.
    I used the logical database MEPOLDB instead of a table joint and pulled fields from EKKO(vendor, SA #,&purchasing group), EKPO(Material Number), EKEH(schedule line type), and EKET(delivery date, scheduled qty,previous qty).
    Does this sound like I'll get the results I want on paper as long as I use the right selection criteria, because the report I'm getting isn't quite what I expect? I am unable to identify which lines are authorized to ship vs. trade-off zone, planning, etc. in the report thus far.

    Hi Mark,
                 I have faced same requirement. I am not sure about transporting to TST and PROD. I done by this way.
    After generating SQVI program in DEV , I assigned that program  to a transaction and tested in DEV. Later i have regenarated SQVI in Production. then I assigned the generated Program to same transaction in DEV. And transported the Tcode assignment of program to Production..
    About authorization , if its not sensitive report, BASIS can restrict at transaction level.
    Regards,
    Ravi.

  • Using Mini DVI to VGA adapter on MacBook

    I bought the adapter from Apple & hooked up my LCD monitor to the MacBook, but the video I get on the monitor is different that on my laptop. It has an old screen background & the dock but nothing on my desktop shows up. Also, when I'm plugged to the monitor, my dock disappears on the laptop screen. Is there some setting I need to change? It worked fine with my G4 PowerBook.
    Thanks for any help....
    MacBook   Mac OS X (10.4.6)  

    i use the mini dvi-vga adapter in my classroom almost everyday. It sounds like your new monitor is running as a side by side monitor to your display instead of a "replacement" display.
    To get your projector/monitor to basically show whatever is on your macbook screen once you've hooked up press F7....this should make your projector/monitory become your display with your dock & all of your desktop stuff. Your new monitor will completely mirror your display.
    THis should do what you're looking for.

  • Using mini-DVI to VGA adapter to Samsung display

    I have 2009 late model of mac mini, The text on display looks washed out, not clear or sharp at all from day one, I thought it was the old model of monitor, tried the same cable to another monitor on another computer, SAME. so I thought the problem could be the cable or adapter.
    It's hard for me to believe is the signal from computer. I'm using VGA adapter made by Dynex bought from Best Buy.
    Anybody has suggestions?? Thanks

    Yeah, My old Samsung is lcd synmaster 17", bought many years ago at around $1000. Crazy, crazy price looked back. It's fine when I used it on the retired old Dell. It must be the adapter, trying not to buy another VGA adapter, could not image my next lcd will use one, anyway.
    This cable has only 14 pins vs 15 pins on the other cable, not sure if it matters?? Or if Safari has anything to do with it??
    Thank for you reply...

  • Using S-Video w/ the Mini DVI to Video Adapter

    I just purchased a MacBook last week and I also purchased a Mini DVI to Video adapter for it so I can use the built-in DVD player to watch movies on my TV. I have a composite to composite cable and that worked fine when I connected the cable between the Mini DVI to Video Adapter and my TV. However, when I tried to use a S-Video cable and connected that between the Mini DVI to Video Adapter and my TV; then I got no picture at all. All I saw on the TV was a picture of the MAC desktop w/o the dock and the movie or nothing else played at all.
    Is the composite connection a better connection for the MAC, or, are there some settings I need to work with on the MAC to get the S-Video connection to work?

    I managed to figure this one out, by fluke. The MacBook has to be powered on and ready for user input prior to connecting the mini DVI to video adapter with the s video already connected to it, and to the TV. Once I did it this way, it worked fine. I just thought I'd share this.

Maybe you are looking for