SAP Knowledge Base Article - Preview

2320352 - Clarifications on the 'PFCG Role ID' in business role definition and authorization assignment

Symptom

  • When defining a business role, a PFCG role can be assigned (as in following graph, PFCG role ZSAP_CRM_UIU_IC_AGENT is assigned to business role ZIC_AGENTGW3).

            1.png

This PFCG role contains authorizations. However, sometimes, when the users make operations in this business role on WEBUI, it behaves like the authorizations are not assigned to them.

  • We are confused by this 'PFCG Role ID': What's the relationship between this PFCG role and other PFCG roles which are assigned to users? For example, the PFCG roles assigned in 'Roles' tab in T-code SU01, or in 'User' tab in T-code PFCG.

This article will make some explanation on 'PFCG Role ID'. It will also give two samples in which users easily get confused on authorizations so that we can understand better of this 'PFCG Role ID'.


Read more...

Environment

  • SAP Customer Relationship Management (CRM)
  • SAP enhancement package for SAP CRM
  • SAP enhancement package for SAP CRM, version for SAP HANA 

Product

SAP Customer Relationship Management 7.0 ; SAP Customer Relationship Management 7.0 on SAP enhancement package 1 for SAP NetWeaver 7.0 ; SAP enhancement package for SAP CRM all versions ; SAP enhancement package for SAP CRM, version for SAP HANA all versions

Keywords

Business Role, PFCG role, authorization objects, authorization check, SUSR_USER_AUTH_FOR_OBJ_GET , KBA , CA-WUI , WebClient UI , CA-WUI-UI , User Interface , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP ONE Support launchpad (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.