Roles & Authorization for Solution Manager 7.1

[Former Member]

Hi,

I'm working on SOLMAN 7.1 SP05.

I have copied the business role SOLMANREQU to ZSOLMANREQU and assigned to user id ABC the following roles:

ZSAP_SM_CRM_UIU_FRAMEWORK

ZSAP_SMWORK_BASIC_INCIDENT

ZSAP_SUPPDESK_CREATE

ZSAP_SMWORK_MYHOME

ZSAP_SM_CRM_UIU_SOLMANREQU

Now when I execute solman_workcenter for that user, I get the below info:

And when I execute SM_CRM:

Need help to figure out what is missing. I was able to get My Home & Incident Management Work centers earlier. But can't get it now for this user.

Regards

[former_member45419 · Accepted solution]

Hi Shincy,

pls refer below links,

Regards

Nayeem

[Former Member · Accepted solution]

Hi Nayeem,

Your first link helped me get the Incident Management Work center!

What do I do for the business role?

Regards

[former_member45419 · Accepted solution]

Hi Shincy,

Find the document for business role ,

http://wiki.scn.sap.com/wiki/display/SAPITSM/IT+Service+Management+Roles+and+Authorizations

Regards

Nayeem

[Former Member]

This can be controlled using IMG--> UI Framework-->Define Business Roles

To see all available options please change profile parameter on your user ID in SU01 from SOLMANREQU to SOLMANPRO.

It's recommended to copy original roles to Z* version and modify.

Regards,

[prakhar_saxena]

Hi Shincy

Just assign the below role for incident management in addition to roles you have mentioned.

SAP_SMWORK_INCIDENT_MAN

this will give you incident management tab in the workcenter

This will resolve

Regards

Prakhar

[Former Member]

Hi Prakhar,

ZSAP_SMWORK_BASIC_INCIDENT is already assigned to the user.

Regards

Shincy

[prakhar_saxena]

Hi Shincy

this where you went wrong ....the role i have mentioned is a different one and required on top of your list

SAP_SMWORK_INCIDENT_MAN

just to clarify more..you need one

BASIC role( ZSAP_SMWORK_BASIC_INCIDENT) + one Workcenter type role (SAP_SMWORK_INCIDENT_MAN)

why you need above is already mentioned and clarified in secuity guide

Regards

Prakhar

[Former Member]

Hi Prakhar,

Sorry and thank u for the clarification.

ZSAP_SMWORK_INCIDENT_MAN is assigned to my user.

Regards

[prakhar_saxena]

Hi Shincy

no need to copy this role to Z use as it or standard role SAP_SMWORK_INCIDENT_MAN like i have mentioned earlier

you can refer the roles required for a creator of incident in the solman_setup ->IT SM configuration as below ..these are assigned to reference users(dialog user)

so try assigning standard role

also in the CRM UIU role if you have copied to Z* make sure the business role is also copied and linked to PFAC Z* role otherwise use standard SAP_SM_CRM_UIU_SOLMANPRO only

Thanks

Prakhar

[Former Member]

could you please guide me ,, i am using SOLMAN 7.1 and i need to create users for the developers team , What Authorization role and profile parameter should be assigned for the developers team ?

Regards , Thanks

[Former Member]

it purely depends on what kind of activity they are planning to perform on solman system.

[Former Member]

Dear Sunil,

They will be working on DBM 8.0

Component

ST-SER

ST-PI

ST-ICO

Regards

[Former Member]

Also Could you state the basic authorization roles and profile parameters for developers ?

[Former Member]

Hi,

Can somebody please guide me with the below screen?

Kind Regards

Shincy

[Former Member]

there is a security guide for solman 7.1

http://service.sap.com/instguides/ --> SAP Components --> SAP Solution Manager --> Release 7.1 --> Operations --> Security Guide SAP Solution Manager 7.1

[former_member541232]

Hi Shincy,

Check if assigning SAP_ALL profile resolves it. If yes then you need to generate profiles for your Z roles.

A security consultant can help in case of profile generation.

Regards,

AD

[Former Member]

Hi Sunil,

I had gone through the security guide couple of months ago.. But I think I'll go through that again..

Thanks.