cancel
Showing results for 
Search instead for 
Did you mean: 

CRM Authorization /Security concept

former_member954801
Participant
0 Kudos

Hi,

Can any one please explain me about the authorization concept in CRM its different from R/3. Can you please help me in providing a document.

Like Creating BP,Creating Profiles, Creating Regions,mapping roles with Business roles and all the stuffs of authorization.

Thanks

Arun

Accepted Solutions (0)

Answers (2)

Answers (2)

Former Member
0 Kudos

Hi,

In SAP ECC you still work in the SAPGUI using transaction codes such as VA01 , XD01 and so on.

In CRM end-users only work in the CRM WEBUI, which is a BSP web-based environment based on business roles.

Business roles are assigned to a user either via the user parameter CRM_UI_PROFILE, via the organisational assignment (where you assign a business role to a position or org unit) where the employee inherits a business role assignment through the position or org unit to which he is assigned to, and last but not least you can also assign a business role by assigning the PFCG role that is assigned in Business Role customizing to the SU01 user master record.

The business role consist out of different profiles , of which the navigation bar profile is very important, as this profile determines what kind of workcenters and navigational links ( so functionalities) the user will be able to see and use within the SAP CRM system.

_Example:_ you have defined in your business a workcenter 'Sales operations' with some logical links of which Opportunity management is defined. This means that the employee having this business role will be able to use this logical link when clicking on his workcenter page "Sales operations'. This merely opens the View containing the screen with "Opportunity management". This still does not mean he actually can display or create an opportunity in the system. Therefore he still must have all necesary authorizations in the system .

The fact that you have access to the busines role also does not necessarily mean the user will have access to the navigation link "opportunity management' as access to workcenter and navigational links can also be controlled using the authorization object CRM_UIU_COMP¨.

Additionally behind opportunity management functionality several "external Services" are being checked each containing specific checks regarding particular authorization objects..

External services can be checked using SU24 (work more or less the same as the good old SAP ECC transaction codes).

Concerning your question regarind the organisation model /.structure: this can be created manually in the system , or for example also using the HR structure which one can distribute from SAP ECC (HR) into SAP CRM via ALE distribution (there exist several OSS notes on this topic).

In SAP CRM we do not know the concept of Company code, but only have Sales & Service organisation levels .

PS: you might want to subscribe for more information on www.sapcrmsecurity.com or also look at www.mysaptube.com for further information on these topics in the future.

cheers

Davy Pelssers

Former Member
0 Kudos

Hi,

These might help you :

http://help.sap.com/saphelp_crm60/helpdata/en/0d/2bba0a5f4411d2b45300609419ed29/frameset.htm : Gives you the info for BP & BP roles, Concepts & Functions.

http://help.sap.com/saphelp_crm60/helpdata/en/44/d9acfe7a012754e10000000a1553f6/frameset.htm : PFCG Roles and info with NW concepts.

Regards,

Ravi

former_member954801
Participant
0 Kudos

Hi Ravi,

I am looking for How the ORG Structure / Region is created in CRM system.

Arun