on 12-21-2011 5:42 PM
Hi Security Gurus,
System data:
SAP CRM ABAP 6.0
SAP_ABA 7.0
SAP_BASIS 7.0
What i want to achieve.
1. Create a Sales Empoyee PFCG Role for a region
2. Create a Sales Manager PFCG Role for a region
What i achived so far?
1. I only managed to copy 2 exisiting Z PFCG role that already available in the system and created SALES Employee and SALES Manager for a specific region. but when i copy the same and apply to diffenrent region for second time with specific user+region seems not working correctly at all eventhought the Z PFCG are given full authorization.
Since copying Z PFCG role not working so i tried copying SAP_CRM_UIU_SLS_PROFESSIONAL to ZSAP_SALES
as below;
1. I have copied SAP_CRM_UIU_SLS_PROFESSIONAL to ZSAP_SALES (Copied all option)
2. Authorization (generated authorization object + gave full rights on all objects *)
3. Assigned Specific users called USER1 and completed User Comparison
4. In CRMC_UI_PROFILE - defined Business Role ZSLSEMP added PFCG id ZSAP_SALES
5. In SU01 for USER 1 has ZSAP_CRM_UIU_FRAMEWORK and ZSAP_SALES
6. Logged into WEB UI - seems not getting the result wanted. In webui trying to view ACCOUNT > Search a BP Id > Unable to view PLANNED ACTIVITIES / OPPURTUNITIES and so on. Bare in mind all objects are given * full authorization.
If someone could help. will be great.
thanks.
Edited by: meshnaidu on Dec 21, 2011 6:42 PM
Hi
Another point; you have defined business role ZSLSEMP; did you check if work center/ligical links required by you are inactive/deleted in the role. Even with SAP_ALL if the business role does not support work center/logical links then the user will not be able to access them in Web UI. Hope this helps
Prashsant
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi
Are you able to see corresponding business roles links while you log on into Web UI - Check if a single business role is assigned using the user parameter CRM_UI_PROFILE. This setting overrules any other role assignments.
Best Regards
Prashant
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello meshnaidu,
Try to put authorization trace for the user using ST01, and check if some object is missing for the particular need.
Thanks & Regards,
Amit Barnawal
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
User | Count |
---|---|
4 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 | |
1 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.