ICWC Authorization

[Former Member]

Hi Experts,

I am working on CRM 5.0 and need to setup user authorization in ICWC. I didnt get much help from the standard authorizations in the system.

Following are the problems I am facing:

1) A particular user is assigned to 2 different positions. However, on launching the IC, the user directly gets into the profile "DEFAULT" instead of getting the option of selecting from 2 IC profiles. When I try adding SAP_ALL to the user, then the 2 IC profile selection page comes up. It is clear that this is due to some authorization problem. What authorization do I need to provide to the user here?

2) I need to restrict views in IC for the user. How do I do this?

3) I did a authorization setup for the user which works fine in SAP GUI, but not in IC. Following is the setup:

Transaction - BP

Create - nothing

Change - In Sold-to-party role:

i) the user should be able to change only the Name1, Name2 and long texts.

ii) Add/change Contact person relationship

Display - BP with role 'Sold-to-party' and only BP employee of self.

The above works in GUI, but not in IC (Account Identification). How can I achieve this in IC?

Look forward to your help.

Thanks in advance!

Regards

Vicky

[Former Member]

Hi,

A particular user is assigned to 2 different positions. However, on launching the IC, the user directly gets into the profile "DEFAULT" instead of getting the option of selecting from 2 IC profiles. When I try adding SAP_ALL to the user, then the 2 IC profile selection page comes up. It is clear that this is due to some authorization problem. What authorization do I need to provide to the user here?

Ans ---.for this problem are you assigning you user id or Business partner -->make sure that you assign

the business partner then you should see the two profile to select

did a authorization setup for the user which works fine in SAP GUI, but not in IC. Following is the setup:

Transaction - BP

Create - nothing

Change - In Sold-to-party role:

i) the user should be able to change only the Name1, Name2 and long texts.

ii) Add/change Contact person relationship

Display - BP with role 'Sold-to-party' and only BP employee of self.

The above works in GUI, but not in IC (Account Identification). How can I achieve this in IC?

Answer --> y dont you go for the authorisation of BUP 001 ,BUP002, BUP003 for create/maintain/display of business partners.

Account identification creates a BP in genersl role and hide the other files in the create account screen

hope it helps

Regards

Raj

[Former Member]

For #1 we copied our role from the 5.0 delivered role SAP_PCC_IC_AGENT and we get the selection choice when an agent is assigned to multiple profiles

For #3 we didn't use security but wrote logic around whether the customer existed as a CRM006 or CRM000 as to which fields could be updated.

[Former Member]

Hi Glenn,

Thanks for your reply.

For #3, what kind of logic you wrote and where? Also, any idea whether it can be done through security?

Regards

Vicky

[Former Member]

Hi Experts,

With respect to point 3 in my question, I have already created a Z role and have generated an authorization profile for it.....and this Z role works fine for the mentioned requirement in the BP transaction in GUI (which means I have already setup the B_BUPA* roles)

However, in IC, I can still make changes to all the fields of Sold-to-party.......what futher authorization should I setup so that the same works in IC? Or do I need to code something?

Look forward to your reply.

Regards

Vicky