S_TCODE in CRM Roles

[Former Member]

Hi all,

I am relatively new to CRM and have the following question regarding design of CRM security roles.

We have a marketing manager who needs to log on directly to the CRM production system to execute a transaction. I have used the CRMD_UI_ROLE_PREPARE programme to create the PFCG role from the business role and this all works ok.

Now they need to be able to execute the transaction so I am wondering:

Is it good design to add s_tcode to the role with all the UIU* components?

Should transaction roles be kept seperate?

Is S_Tcode the only object used for this or are there further considerations for CRM?

Thanks.

[Former Member]

Hi all,

I am relatively new to CRM and have the following question regarding design of CRM security roles.

We have a marketing manager who needs to log on directly to the CRM production system to execute a transaction. I have used the CRMD_UI_ROLE_PREPARE programme to create the PFCG role from the business role and this all works ok.

Now they need to be able to execute the transaction so I am wondering:

Is it good design to add s_tcode to the role with all the UIU* components?

Should transaction roles be kept seperate?

Is S_Tcode the only object used for this or are there further considerations for CRM?

Thanks.

[Former Member]

Richard,

Since you are relatively new to CRM I suggest you obtain and look through the Security Guide for your version of CRM. From there you might have more specific questions regarding your CRM role design. Its a great start.

https://websmp208.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000401180

Thanks,

Matt