Security in CRMD_ORDER by sales org CRM_ORD_OE

[Former Member]

CRM 5.0 SP11

Putting in a 2nd sales org, want to limit the agents access by sales org in either creating or displaying a sales document.

In the role we limited CRM_ORD_OE to sales org A. But in CRMD_ORDER the user can see all documents in sales orgs A & B and create orders for sales org B.

This will be for the ICWC but I figure if I can get it to work in CRM online it should work in ICWC same way.

I do not want to explore ACE, can anyone help? this seems simple but am lost. I have been reviewing the 100+ page CRM 5.0 security guide. Copied our role from delivered role SAP_PCC_IC_AGENT

[laercio_azevedo · Accepted solution]

Hello friend,

Here you can get good example about how to set Security in CRMD_ORDER by sales org CRM_ORD_OE.

http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm

I hope this tip help you.

Lalas

[Former Member · Accepted solution]

Hi Lalas,

From that url I could see this page;

http://help.sap.com/saphelp_crm60/helpdata/en/4a/b9f63a8ab2c745e10000000a114084/frameset.htm

If I limited the role to CRM_ORD_LP to "A" own sales organization that seem to work better than CRM_ORD_OE

What was interesting was in CRMD_ORDER doing a search on OR orders did bring back all orders (not desired) but only orders in my users sales org did it allow me to display or change.

The example using only CRM_ORD_OE in this url in the help didn't seem to work

1. A user should receive authorization to process sales transactions with the transaction type TA in sales organization 0001 and for distribution channel 01.

You assign the following authorizations:

CRM_ORD_PR: PR_TYPE u2018TAu2019, ACTVT u2018*u2019

CRM_SAO: ACTVT u2018*u2019

CRM_ORD_OE: SALES_ORG u20180001u2019, DIS_CHANNE u201801u2019, SALES_OFFI u2018u2019, SALES_GROU u2018u2019, ACTVT = u2018*u2019