Z Business Role Creation

Hi,
I am new in CRM and i want to create a business role for a one is for custmoer and one for Call center Agent.
i know some tcode like CRM_UI_Profile and PFCG but dont know how to create it.
Can you explain me in Step by step manner or any privious Forums or link.
I have searched privious forums but i did'nt get expected.
jim

Hi,
the best way to create businessroles is to copy existing ones from SAP standard.
You will be able to do this in CRMC_UI_PROFILE.
For example for IC copy the complete role IC_AGENT to your customer role for example ZIC_AGENT.
Afterwards have a look into the entries and change everything you need.
If you need other navigation entries for example exchange the Navigation bar profile.
You can easily create your own navigation bar profile by copying an existing one in CRMC_UI_NBLINKS.
Good luck.
Kind regards
Manfred

Similar Messages

CRM 7.0 How to create Business role & generate

Hi Team,
Can you please let me know some breif idea about CRM 7.0 security guide.
How to created Business role is this part of functional activity?
Whats the role of Technical colleagues BASIS guys in CRM 7.0 security .
Please help me to get some document regarding business role creation , generation , assignment & authorization checks in CRM 7.0.
Thanks & Regards,
Vyash Mishra

Hello Viyash
I will add the most important information for generation of business roles and assignment of authorizations to users.
You must first create the PFCG roles. PFCG role is built based on the Business Role.
Please see documentation in : SPRO
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Authorization Role
Then the PFCG role can be assigned to the business role in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Business role
Finally you must assign business roles to Organizations or positions in organizations in
SAP Implementation Guide => Customer Relationship Management
UI Framework > Business roles > Define Organizational Assignment
The users that are assigned to such organizations / positions will be therefore linked to the business role.
With the previous steps the users will have the authorizations that are assigned to the PFCG profile that is linked to their business role.
Business roles are the main way to configure authorizations for users in CRM but you have more options that give you flexibility.Each business role has assigned one PFCG role, but the relationship between business role and PFCG role is not strict. You can even assign a dummy PFCG role to a certain business role in business role customizing and then go to transaction PFCG and assign other PFCG role(s) to the users that are assigned to that business role.
I would say that the previous tasks must be performed by the basis team but in cooperation with the functional team
Best Regards
Luis Rivera

Business Roles & Technical Roles

Colleagues,
With the whole process of creating Business Roles for the implementation of IdM we gotten to thinking and started looking for a best practice when it comes to creating and managing business roles aswell as technical (SAP, ABAP) roles.
Anyone have any good documentation in this regard?
Thx in advance,
Jonathan

Hey Sandeep,
It's a good document but not exactly what I was looking for.
Concerning the Business Roles I was looking for more of a functional (business) view point on the whole business role thing. Something I could use from a technical standpoint to help my customer in the business role creation process.
Concerning the Technical Roles (ABAP authorisations). We have the situation here at the moment that we're dealing with 14 years or role creation in the SAP systems with no guidelines what so ever. So to put it gently: it's a mess. And I was wondering if there was any best practice document out there describing the "best practice" of creating technical roles, handling authorisations in SAP etc.
I realise that the second question doesn't quite fit in this forum but I'm guessing here would be the closest match for the question.
Thx.

Individual Account Creation in IC_AGENT business role.

Hi,
After system got upgraded from 6.0 to EHP1, marketing attributes are not working as expected.
When i create an Individual Account type in ZIC_AGENT business role, it gets created successfully but its marketing attributes are not getting set when i check in the Account overview.
There is a BADI implementation of "BUPA_GENERAL_UPDATE", i debugged and found that in FM "CRM_MKTBP_READ_KSSK_AUSP", system is trying to get the attributes from table "ausp"
      select * from ausp into table et_ausp
          where partner_guid = lv_guid
          and klart = 'BUP'.
I think, somewhere configurations are not done correctly. But i am aware where i check all these configurations for markting attributes corresponding to BP. If you know then please let me know.
Thanks
Raman.

Hi,
You can check it in ,
MARKETINGPRO ( business role ) -> Marketing ( work center ) -> attribute Sets
search for the specific attribute/attribute set. go to OV page ..there will b check box for person and organization.
Regards
Sandeep Kumar B

Creation of Business role without allow user the possibility of personaliz.

Hi
I'm new in SAP. and I'm in need. Is it possible create Business Role (in CRM) without the possibility (for the user) to personalize the assignment block and the general setting?
Thanks for your future help!
Stefano

Hi,
this is possible by assigning the Function Profile 'PERSONALIZATION' with value 'ALL_DISABLED' to your business Role in the Business Role Customizing.
Kind regards,
Carl

Z Creation of Business Role

Hi,
I am new in CRM and i want to create a business role for a one is for custmoer and one for Call center Agent.
i know some tcode like CRM_UI_Profile and PFCG but dont know how to create it.
Can you explain me in Step by step manner or any privious Forums or link.
I have searched privious forums but i did'nt get expected.
jim

Hi Jim,
Yes you can create a Z Buisness Role in the crmc_ui_profile (img activity>>CRM>>Business Roles>>Define Business Role).
A business Role is made up of several things namely -
1.Role Config Key : You can create a new or use existing ones.
2.Navigation Br Profile
3. Layout Profile
4.Technical Profile
5.PFCG Role ID
Navigation Bar profile is specific to different business roles. It defines what all links you see on the left hand navigation pane on Web UI. E.g. a marketing professional would see different links than a sales pro or a call center agent.
Similarly you can define other profiles or the use the default profile.You can create a pfcg role id in t-code pfcg and assign it your business role.
Jim, what would be best is to copy a standard role, e.g IC_AGENT and then customize it according to your needs and change the config key, nav bar, layout, and technical profile as per your requirements.
Thanks and Regards
Varun Taneja

Business Partner creation for Customer Master creation

Hi
We have customized our system in order to trigger the creation of Business Partner whenever a Customer Master is created.
I created some customers for which the Business Partner creation was not triggered due to some reason.. In order to manage the same, i created a Business Partner manually and tried to link the same to my customer through T Code FLBPD2, but system returned with a message "The business partner could not be linked to the customer selected" Message Number CVIC_UI023.
Can anyone suggest something.
Thanx in advance
Pankaj

Hi Pankaj,
Please check wether you configured all required node under Master Data Synchronization..In SPRO..I am referring to below node.
Active Synchroniztion Options
Set BP role Category for customer Integration
Define BP Role for direction customer to BP
Field Assignment for customer Integration
Thanks
Veman.

Role Creation in CUP 5.3

Hello,
I'm trying to understand the concept of what is called "role creation" in Compliant User Provisioning.
My understanding is that the "create role" option in CUP (configuration>Roles>Create Role) means simply adding the "attributes" such as a business process, functional area, system, or company, to the SAP roles that you imported into CUP.
It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
Please tell me if I'm wrong.
HM

HM,
The create role option in CUP is mainly for legacy/non-cup supported systems. This way you can follow the standard workflow process for LDAP/Windows/legacy system. In this user provisioning and role assignment will not be done through CUP and will be manual. This is very important for some companies as they want user to go through same process if they want to get access to any system and not only ERP system.
The below statement is wrong.
It seems that, with CUP, once you have imported SAP roles and "adjusted" them (adding attributes), you are no longer operating PFCG and SU01 in the SAP backend system. From this point on, everything is done in CUP (provisioning) and ERM (creating additional roles).
If you don't have ERM then you will have to use PFCG. Once you have CUP, you don't have to use SU01.
Regards,
Alpesh

CUA SRM issue with user/business partner creation

Hi Board,
I've already replied to an existing thread in the SRM board, but also quite hopefully to find somebody here who may be able to help. Please find the thread here
error during creation of EBP suers
Any help would be highly appreciated as we can go on with this "work around" for the moment but not willing to change our current architecture.
Many regards,
Richard

Hi Suchandra,
Are you trying to default Business Roles & Authorizations at the time of SAVE of a new CP?
If yes, then everytime you click on SAVE button on CP Create Screen the Save BADi will be triggered.
Cases when its not getting triggered please debug into the event handler method of view-BP_CONT/BPCONTOverview->EH_ONSAVE method.
In this method at line (below) the save badi is triggered:-
IF cl_crm_uiu_bp_tools=>save( ir_message_service = lr_msg_service ) = abap_true.
In the above method - CL_CRM_UIU_BP_TOOLS=>SAVE( ) the save event handler is triggered :-
* trigger ON_SAVE for registered handlers
raise_save_event( ).
If you want the default to happen when you navigate to CP Screen , you'll have to put the defaulting code in an implementation of a different badi - BADI_CRM_BP_UIU_DEFAULTS.
- Dedeepya
Edited by: dedeepya reddy on Nov 15, 2011 2:07 PM

Direct Posting to Contracts and Business roles in SRM

Hi guys,
We have SRM 7 and ECC 6.0.
Please consider the following business scenario:
Invoice creation in SRM against ERP contract that has been previously replicated to SRM;
No PO or GR involved in this process;
Possibility to have one contract to vendor A, and the corresponding invoices for different vendors.
Considering this we thought about the following solution:
Activate Direct Posting to Contracts functionality in ERP;
Contract, supplier and materials / services replication to SRM, through PI;
Allow different partners in the contract, using partner role “Invoicing party” (RS), so that it would be possible to post an invoice to vendor B, with reference to a contract with vendor A.
Questions:
Reporting – as far as I know it’s only possible to run analyses for vendors, which in our case would be vendor A, assigned to the contract. However, we will need to have information about the invoices posted to the other business partners that are assigned to that contract. Do you have any idea if there is any standard approach for this?
Contract and business roles replication to SRM – does the contract and the assigned business roles could be replicated to SRM or is it required any specific customizing in SRM for this to be possible?
Any help would be appreciated.
Thanks in advance.
Regards,
AN

Hi,
For direct posting to G/L in MIRO, follow the path:
SPRO > Materials Management > Logistics Invoice Verification > Incoming Invoice > Activate Direct Posting to G/L Accounts and Material Accounts > Here Activate "Dir.posting to G/L acct = active" and save.
MIRO - It will show additional Tab as "GL Account" along with "Reference"
For more check the links:
http://www.saptechies.com/transaction-mr1m-direct-posting-to-gl-account/
http://www.scribd.com/doc/17887583/MM-FI-Account-Determination
Regards,
Biju K

Create Business role from workflow

We have problem crating a Business role from workflo in SIM 8.1.0.7. Especially we can not set PrimaryObjectGroup of the newly crated role.
Is there a way to set this parameter or to set the type of the tole to be Business Role not ITrole.
Here is the code for the creation
<set name='roleObject'>
<new class='com.waveset.object.Role'>
</new>
</set>
<invoke name='setName'>
<ref>roleObject</ref>
<s>role1</s>
</invoke>
<invoke name='setAuthType'>
<ref>roleObject</ref>
<s>BusinessRole</s>
</invoke>
<invoke name='setDescription'>
<ref>roleObject</ref>
<s>Test</s>
</invoke>

I was able to create the role by this code:
<set name="rolesvar">
<invoke name='getObject' class='com.waveset.ui.FormUtil'>
<select>
<ref>:display.session</ref>
<ref>context</ref>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
</select>
<s>Role</s>
<s>Template</s>
</invoke>
</set>
<set name='roleObject'>
<new class='com.waveset.object.Role'>
<invoke name='getPrimaryObjectClass'>
<ref>rolesvar</ref>
</invoke>
</new> </set>
<invoke name='setName'>
<ref>roleObject</ref>
<s>BusinesRole1</s>
</invoke>
<invoke name='setAuthType'>
<ref>roleObject</ref>
<s>BusinessRole</s>
</invoke>
<invoke name='setDescription'>
<ref>roleObject</ref>
<s>Test Business Role</s>
</invoke>
<invoke name='setMemberObjectGroupRef'>
<ref>roleObject</ref>
<invoke name='getObjectGroupRef' class='com.waveset.object.ObjectGroup'>
<select>
<ref>:display.session</ref>
<ref>context</ref>
<invoke name='getLighthouseContext'>
<ref>WF_CONTEXT</ref>
</invoke>
</select>
<s>Org1</s>
</invoke>
</invoke>
But there Template is a real object which have to be created.Is there a static method for geting an objectClass variable and passing it as an argument to the constructor ??
Edited by: piaggio100 on 2011-10-20 16:13

Navigation Bar Profile - Copying business role SalesPro

Dear all,
i am on CRM 7.0 and i have to create a business role copying the standard one SalesPro. Easy.
Therefore, i want to create a navigation bar profile ZSales pro copying the one already used SLS-PRO for the standard one. But when i make the copy, the system requires an entry in the field Action Object for the entry Object Type: BP_ACCOUNT_CHM, Object Action: "empty in standard", target id: MD_BP_OV and highligth: MD_BP_SR where it is blank in standard !!!
The copy then is not fully done and i cannot create an entry with empty field, how can i manage this, please ?
Thanks for your help,
Jay

Hi,
Refer to this thread Error inNavigation bar creation.
Similarly you can skip those entries for the time being and later maintain it again if needed for dynamic navigation.
Hope this helps.
Cheers,
Sumit Mitta

GRC AC Request Role Creation

Hello all,
I noticed that by default GRC AC doesn´t have a Request Type for Role Creation. Normally how this is done? I mean, if someone realizes that a new role is necessary, how can this person report the need for a new role creation? What are my option here?
Regards,
SAP Legend

Hi SAP Legend,
You can not request a new role to be created via an Access Request workflow. You still need a business governance strategy where someone has to raise a request outside of the GRC system for the new roles through the right channels deemed fit in your company to get the new role made. Maybe you have a support ticketing system in place or some SAP security department you can raise the formal requests to.
The BRM Role creation/maintenance workflow runs separately from the Access Request workflow. Further more, the definition and creation process of roles via GRC should only involve and be used by Business Process Owners/Role Owners and the Authorisation security team only, i.e. not general end users.
A role build methodology will have to be set up and then the underlying approval workflows (based in MSMP technology also, like the AR workflow).
Once the role has been built (either via back end PFCG) or via GRC using the BRM methodology and approval flows, the role will be available to the end user to request via AR.
Hope that helps.

Error while creating Business Role

Dear Frnds,
I am working on webclient , am trying set a Business Role of my own .But it say "You Cannot Assign one PFCG role to different business roles" .As when i copy the standard business role to that role there is no PFCG role assigned. Here i tried copying IC web Manager and do .
Can anyone guide me to solve this.
Appreciate your Help and Thanks in Advance.
Cheers
Ram

Guys,
I got resolved , Follow the Note :-1077251.
Thnxs
Ram

Assigning Business Roles - No such task exists

I am trying to create a user ID and assign a Business Role in the process. The attribute that I am using is MXREF_MX_ROLE. It is defined as a multivalue system attribute with a data type of entry reference and the reference type in MX_ROLE.
From my workflow task, I can select the role from the selection window but when I click OK to save to the identity store, I get an error "You have tampered with the params". From the Monitor UI, I see the message "Failed setting value for attribute Member of Role. No such task exists"
I have a Modify User task that uses the same attribute. When I attempt to use it, I get the "Failed setting value for attribute Member of Role. No such task exists". But I do not get the "you have tampered with the params" message.
I am only trying to set this in the identity store right now. I am not yet ready to provision to my ABAP system.
Any assistance is appreciated.

Hi Lori,
in case you have linked privileges to your role, SAP NW IdM searches for tasks in the related repository (as stated in the attribute MX_REPOSITORYNAME of your privileges). Type in the ID of some test tasks in the repository constants MX_DEPROVISIONTASK, MX_PROVISIONTASK and MX_MODIFYTASK and see if it works.
Otherwise, there could be a missing relation the other way round from the role to the user. See if there is a MXMEMBER_MX_PERSON attribute in your role.
Best regards,
Nils

Z Business Role Creation

Similar Messages

Maybe you are looking for