Known Issues when using ACE, Business Role and PFCG

[Former Member]

Hi everyone,

my concern is the following:

Are there any known issues that might occur if ACE, Business Role and PFCG are used,all at the same time? I am aware that on the one hand PFCG is only applicable to ECC and on the other hand that ACE and the Business Role is only used in CRM.

Can there be any troubleshooting? Does anyone have a best practice if I want to implement all three access control mechanisms.

Thanks in advance,

Rahul

[former_member13738 · Accepted solution]

Hi Rahul,

Each authorization technique has its own unique use based on the concept. No issues in using all 3. You will realize how it works once you come across each of them.

You can read the ACE blog for better understanding.

http://scn.sap.com/people/boris.dingenouts/blog/2006/09/18/the-concept-and-implementation-of-crm-ace

Thanks & Best Regards,

Leon

[Former Member]

That resolves the doubt. Thanks guys.

[Former Member]

Rahul,

There will not be any issue. You have to remember that system checks for ACE Engine security first and if finds valid security role for ACE, it only performs whatever designed in ACE and doesn't go to other Authorizations. So ACE will be user first layer. Eventhough you have Business Role and PFCG setup and the user has ACE Security, ACE Security willt take the priority.

If you still need information, you can look at the below link which will give you more info.

http://howcrmworks.com/