Show TOC

ProcedureCreating Authorization Profiles

 

You use this procedure to determine which users can access which pipeline performance management (PPM) functions and to define whether the users can create, edit or delete business objects in the different areas of PPM.

Note Note

Complete the steps in the procedure below in SAP GUI.

End of the note.

Procedure

  1. Go to User Maintenance (transaction su01) to assign the business role SALESPRO to each user position in the various organizational levels. This role determines the layout of the user interface (UI).

  2. In the User Maintenance (transaction su01), assign the additional business role SAP_CRM_UIU_SLS_PROFESSIONAL to each user position in the various organizational levels. This is a generic sales role valid for all users in PPM.

  3. Go to Role Maintenance (transaction pfcg) to create authorizations.

    It is still necessary to differentiate between the sales managers and the sales representatives. The Sales Professional role contains sufficient authorization for sales representatives but insufficient for sales managers.

    In PPM, you want sales representatives (users can be determined to be sales representatives through the organizational model) not to be able to see or use the following functions:

    • Options for PPM

    • Quota Planning

    • Opportunity Churn Rates Management

      However, you want specific sales managers (users can be determined to be sales managers through the organizational model) to be able to use the functions, but with authorization to only display the information or some of the information. For example, one sales manager may be responsible for quota planning while another is responsible for opportunity churn rates management. The authorization profiles you create restrict individual users' access to PPM functions.

      You want specific sales managers (users can be determined to be sales managers through the organizational model) to be able to use the functions, with authorization to display, create, and change the information.

      1. Create authorizations for sales representatives.

        No additional authorizations are required for sales representatives. PPM checks automatically whether the user has the correct InfoType or not. Additional user authorization is, however, required for the various sales managers.

      2. Create authorizations for sales managers.

        The authorization object CRM_PPM is available with the following field names:

        Field Text

        Field Name

        Field Value

        OrgUnitID

        ORGUNITID

        If you enter a wildcard (*), you have authorization for all organizational units. If you enter a range (From and To) or a single organizational unit, you restrict the authorization to those specific organizational units.

        Process Type in PPM

        PROCTYPE

        If you check the following activities, they are activated for the authorization profile:

        • Churn Rates in PPM

        • Options in PPM

        • Quota Planning in PPM

        Activity

        ACTVT

        If the value Change is checked, you have authorization to edit.

        The authorization profile S_PPM_ALL, which is delivered as part of the standard Sales Performance Management business scenario, contains the full authorization of the CRM_PPM authorization object. If you want to restrict the user's access and authorizations, do not use this profile.

        So a user in a sales manager position who can edit quotas, opportunity churn rates, and the Options page in PPM, needs to have the user authorizations (transaction su01) assigned to the business role (transaction pfcg) SAP_CRM_UIU_SLS_PROFESSIONAL. This user also needs to have the user authorizations assigned to the authorization profile S_PPM_ALL. A sales representative needs to have only the SAP_CRM_UIU_SLS_PROFESSIONAL role assigned.

        1. Generate authorization profiles.

          Once you have created the authorizations, you generate the authorization profile for the sales manager(s). Activate and save each profile.

          S_PPM_AUTH is the authorization profile that is delivered as part of the standard. You can create additional profiles using this one as a basis.

        2. Assign the authorization profile to individual users in User Maintenance (transaction su01).

          Example Example

          User1 and User2 are both are sales managers.

          User1 can edit quotas, opportunity churn rates, and the Options page in PPM in OrgUnit1.

          User 2 cannot edit the quotas, but can edit opportunity churn rates and the Options page in OrgUnit2.

          To distinguish between the two sales managers, do following:

          End of the example.

          • Generate two authorization profiles, using the S_CRM_PPM authorization object and specifying the authorization values that User1 and User2 are allowed.

          • Assign the generated authorization profiles to the User1 and User2 Profiles tab pages in User Maintenance (transaction su01).