CRM6.0 - CRM WEB UI - Copying SALES PROFESSIONAL PFCG Roles - not working

[Former Member]

Hi Security Gurus,

System data:

SAP CRM ABAP 6.0

SAP_ABA 7.0

SAP_BASIS 7.0

What i want to achieve.

1. Create a Sales Empoyee PFCG Role for a region

2. Create a Sales Manager PFCG Role for a region

What i achived so far?

1. I only managed to copy 2 exisiting Z PFCG role that already available in the system and created SALES Employee and SALES Manager for a specific region. but when i copy the same and apply to diffenrent region for second time with specific user+region seems not working correctly at all eventhought the Z PFCG are given full authorization.

Since copying Z PFCG role not working so i tried copying SAP_CRM_UIU_SLS_PROFESSIONAL to ZSAP_SALES

as below;

1. I have copied SAP_CRM_UIU_SLS_PROFESSIONAL to ZSAP_SALES (Copied all option)

2. Authorization (generated authorization object + gave full rights on all objects *)

3. Assigned Specific users called USER1 and completed User Comparison

4. In CRMC_UI_PROFILE - defined Business Role ZSLSEMP added PFCG id ZSAP_SALES

5. In SU01 for USER 1 has ZSAP_CRM_UIU_FRAMEWORK and ZSAP_SALES

6. Logged into WEB UI - seems not getting the result wanted. In webui trying to view ACCOUNT > Search a BP Id > Unable to view PLANNED ACTIVITIES / OPPURTUNITIES and so on. Bare in mind all objects are given * full authorization.

If someone could help. will be great.

thanks.

Edited by: meshnaidu on Dec 21, 2011 6:42 PM

[former_member204634]

Hi

Another point; you have defined business role ZSLSEMP; did you check if work center/ligical links required by you are inactive/deleted in the role. Even with SAP_ALL if the business role does not support work center/logical links then the user will not be able to access them in Web UI. Hope this helps

Prashsant

[Former Member]

Hi,

Better to run report CRMD_UI_ROLE_PREPARE to export all the objects and navigations to pfcg role.

create empty PFCG role "ZSAP_SALES" and import the exported file into customized pfcg role then adjust the authorizations.

[former_member204634]

Hi

Are you able to see corresponding business roles links while you log on into Web UI - Check if a single business role is assigned using the user parameter CRM_UI_PROFILE. This setting overrules any other role assignments.

Best Regards

Prashant

[Former Member]

Hello meshnaidu,

Try to put authorization trace for the user using ST01, and check if some object is missing for the particular need.

Thanks & Regards,

Amit Barnawal