just a quick update about the usage of the SAP CRM User Parameter CRM_UI_PROFILE.
In my previous posts I already elaborated the usage of this User Parameter.
See other posts like:
- Logon is not possible because you have not been assigned to a business role; please contact your system administrator
- The SAP CRM Business Role Concept
- How to quickly start testing the functionalities of a specific SAP CRM business role
Now,what I explained actually does work this way, BUT I overlooked one important remark!
In order to use the User Parameter as shown below (I think also if you would only set 1 value as parameter value - not tested yet)
you NEED authorization for the object S_DEVELOP but only OBJTYP = DEBUG as shown below! it's not necessary to add any other authorization value for this object.
Now, before the "expert authorization consultants" start shooting at me (as they''ll probably claim no-end user should get any access for the object S_DEVELOP..hold your horses.. I actually have had this checked and confirmed by my contact person (THE SAP CRM authorization expert at SAP Walldorf) who confirms that this is the case and that they'll include it in the future in their course manual (SAP CRM Authorizations deepdive workshop).
But, if you read my previous posts, you also should have noticed that I already mentioned that the usage of that parameter is basically intended for consultants to quickly test out SAP CRM business role functionalities on a development or Quality system..and business role assignment for an end-user on a production system is typically done by the User's assignment in the organizational model OR by the PFCG authorization role that is defined in business role customizing.
I just point out this currently works like I am describing above.. and now you know!
The reason I did not mention it before is because typically I have authorization rights as a Consultant, and not that of an end-user. So by definition I usually have debug "Display"' rights.
The SAP University Team