sapuniversit y.euhttp://sapuniversity.eu/logon-is-not-possible-because-you-have-not-been-assigned-to-a-business-ro le-please-contact-your-system-administrator/

Logon is not possible because you have not been assignedto a business role; please contact your system administrator

Home » SAP Authorizations » Logon is not possible because you have not been assigned to abusiness role; please contact your system administrator

Hi I am sorry, but I thought this t it le would be f unny to use. Whenever I start working/participatingin a new SAP CRM project implementation, a lot of people just starting to work with SAPCRM usually ask me -Hey Davy - I got a User account and I managed to logon via the SAPGUI...butwhen I try out the URL (the link to the CRM WEBUI) that was given to me by the project implementationteam, I get this message? What's the problem and can you solve this f or me?

Whenever you see this screen when you try to logon in the SAP CRM WEBUI, it means you have notbeen assigned a SAP CRM Business role:

If you do not know yourself how to solve this,then make sure you start leaning more about the SAP CRMBusiness role concept.

If you read my previous posts you normally already grasp the basic principles of the SAP CRM Businessrole Concept. If not, please read them f irst:

In essence there are basically 3 possibilit ies by which a User can start using 1 or multiple SAP CRMBusiness roles (only 1 at a t ime of course).

I could also have called this blogpost " Business Role Determination Logic" as this is what I am aboutto explain.

The SAP CRM Business Role Determination Logic

Business role Assignment to a User can be done directly or indirectly. The determination logic is actuallydetermined in the class CL_CRM_UI_PROFILE_DETERM

If you want, you are welcome to debug this class, but if you f unctionally know how this works, than youmight not even bother.

From a f unctional point of view, these are the things you should remember:

The User Parameter CRM_UI_PROFILE

A User's assignment in the organizational model

The PFCG role a user has assigned to his SU01 User master Record, that corresponds thePFCG Role which is maintained/Assigned to a specif ic Business Role in Business RoleCustomizing.

CRM_UI_PROFILE

The User parameter CRM_UI_PROFILE is something most users (that have acces to the SAP GUI atleast) will be able to change themselves using the transaction code SU3.

In the above screenshot, you seethat I put a * (asterisk) as parameterValue. This means I can access ALLavailable SAP CRM Business Roles.This implies that whenever I logon tothe SAP CRM WEBUI, I get af terhaving entered my User ID andpassword I get a selection screen,where I must choose the Businessrole I would like to logon with.

Instead of putting the value *, youcan also specif y a concrete SAPCRM Business role, such asSALESPRO ; SERVICEPRO and so on. That would skip the selection screen, and immediately log you onwith that particular business role.

Normally, this approach of business role assignment is used by SAP Consultants, who want totest out the f unctionalit ies that are delivered by SAP standard Business Roles. Based on their research,they then usually have a good idea which standard business role should serve as the basis of theircustom made business role. They 'll usually make a copy of the standard business role and next starttweaking things such as the navigation bar prof ile, technical prof ile, ... and also deactivate unnecessarywork centers and navigation links.

It is also very useful when you encounter a bug, BSP error or shortdump when perf orming unit andacceptance testing using your customer made business role. Let's assume at a certain point you get ashortdump when perf orming a certain action on e.g. the Account Overview Screen. Now in order to assurethis is either a real SAP Standard Bug, or is caused by custom coding you will want to test the SAPStandard, and theref ore logon with a standard SAP Business role, and even "Switch of f customerenhancements".

Inheriting the Business role by your assignment in the Organizational Model

I hope you already know what an organizational model is, what is used f or and what the basic elementsof such a model are. The organizational model in SAP CRM is also one of the key elements as it usedf or many purposes, like:

organizational data determination (in business transaction processing)

indirect authorization role assignment

indirect business role assignment

can be used within the context of territory management

....

Relevant f or you is that you know a SAP CRM Business role can be assigned to an:

Organizational Unit (O object)

Position (S object)

What's best..not sure..depends on how you are actually structuring your organization model...at mycurrent customer in 90% of the cases we did this on the level of the organizational units...in some casesalso on posit ion level. Why did we use Org unit level...well because the org units were representing

departments such as:

the Call Center (they were using some copy of the IC_AGENT business role -with CTIintegration)

the Backof f ice Complaint Management department (using an enhanced version of the IC_AGENTbusiness role, but without CTI integration)

The Contract Department (using some tweaked copy of the SALESPRO business role)

How do you assign a business role to a organizat ional unit or posit ion?

Launch the transaction code PPOMA_CRM to start maintaining the org model.

Search f or the object (org unit) to which you would like to assign a SAP CRM Business Role. (e.g.ZALL_USERS) which I created during my previous post.

To illustrate this, I quickly created a new organizational unit, posit ion and assigned myself as anEmployee to that particular posit ion.

As you can see, I double clicked on the organization unit called "SAP University Department". I did this toensure that I will be using the right organizational element, when assigning my business roleZALL_USERS.

Now in the menu, click on "Goto --> Detail Object --> Enhanced Object Description".

This will show me the details (with relevant inf otypes) belonging to the O-object which I am currentlyviewing.

Now scroll down a bit in the list of Inf otypes untill you reach the "Business Role". Next click on the button"CREATE".

In the f ield "business role" I can manually type in the name , or select it using the input help button..

Af ter having entered the relevant business role, make sure to press the SAVE-button.

You now see a green f lag next to the f ield,indicating that a business role has been assigned.

Now, this means that when I would logon, I nowam able to logon with the business roleZALL_USERS. (note that you should not use theUser Parameter in that case, as this overrules

this).

Inherit a business role via your PFCGrole assigned in the SU01 UserMaster Record

Last but not least..I guess that when you alreadyhad a closer look at business role customizingyou'll notice that normally a PFCG role is assignedto it!

This PFCG role should be Unique as it servesbasically two purposes:

it allows you to quickly create a a PFCG role based on the Business role assigned to it (using thereport CRMD_UI_ROLE_PREPARE) I'll explain this in a later post!

it can be used to indirectly assign a business role (if at least that business role has assigned thesame PFCG role to it in business role customizing).

Let's quickly look at what I mean:

In the above screenshot you see that in the Standard delivered Business Role SALESPRO, the standardPFCG Role SAP_CRM_UIU_SLS_PROFESSIONAL is assigned to it. Now if a user would get this PFCGauthorization role assigned to him, he would also inherit access to this specif ic business roleSALESPRO.

Remember: the PFCG role you enter here must theref ore be UNIQUE, as otherwise the system can notknow which business role it should take!

Now, in my User Master Record this would look like this:

In the above screenshot you see I have twoPFCG Roles assigned:

SAP_CRM_UIU_SLS_PROFESSIONAL(this I need to have access to theworkcenters and navigation links that

are basically def ined in the businessrole customizing settings made in theSALESPRO business role (alsorelevant f or my UIU_COMPauthorization object values).

SAP_CRM_UIU_FRAMEWORK(consider this role a basic role thateach and every user should GET inorder to be able to start working withinthe WEBUI...basically it contains theobject PLOG.. Without this role, youcan not start the CRM WEBUI in a proper way!

I should now actually tell you about the priority logic, but as I do not remember my testcases on thismatter by heart I"ll leave this f or a potential f uture post..

take care and speak to you soon!

Davy

The SAP University Team

Davy has been working as an SAP Consultant since 2000 and started working in theSAP IS-U Module , but as of 2002 he has mainly worked as f unctional SAP CRMconsultant and SAP Authorizations consultant.More about Davy Pelssers