Max no. of roles in a transport

Just a quick question - what is the max number of roles recommened in one transport.

Hi Auke,
Its a good question.
What is the process which you are following to move requests into PRD.
I mean approval process.
In any business sneario you need to have approval to move the requests to PRD.
Techinically you can add multiple roles into single request.
I am just trying to give real time example which we face problem if we have mutliple roles in single request.
Example
If you have Ten roles changes and you have different BPO's for each role.
You need to wait till all are apporved and all are teste ok.
Even it helps us for audit purpose...
And if dont consider the above seniario. well as you said its time issues.
I hope I am clear.
Cheers
Soma

Similar Messages

GP: Process default Roles Cleared when transported

Hi,
     I have created an impersonalized form that triggers a process in guided procedures.
I have set the default roles for process as impersonalized form needs all the roles to be defaulted.
Its working fine in the test system. When I transport this to Production, the default roles get cleared. I get an error message when the form is submitted - ERROR_NO_DEFAULT_USER_FOR_ROLE .
Version: Adobe Livecycle designer 7.1
NW2004s SP15
Thank you,
Vasu
Edited by: Subramanya Srinivas Mullapudi on Feb 6, 2009 6:41 PM

But as I'm using an Impersonalized form, even when I assign the default roles, the impersonalized form still pointing to the process with no default roles. Its not recognizing the default roles assigned in administration.
I cannot change the process to add default roles (in production). So whenever I submit the form I get the error "ERROR_NO_DEFAULT_USER_FOR_ROLE"
Complete error:
SAP Guided Procedures - Error Page
   What happened?
   An internal error occurred while processing your request
   What can you do?
   Try again later. If the problem persists, contact your system
   administrator.
Additional Error Information
   FormPostprocessor.ERROR_NO_DEFAULT_USER_FOR_ROLE
   com.sap.caf.eu.gp.base.exception.EngineException:
   FormPostprocessor.ERROR_NO_DEFAULT_USER_FOR_ROLE at
   com.sap.caf.eu.gp.model.iforms.postproc.FormPostprocessor.createProcessRoleInstance(FormPostprocessor.java:176)
at
   com.sap.caf.eu.gp.model.iforms.postproc.FormPostprocessor.prepareProcessRoles(FormPostprocessor.java:157)
at
   com.sap.caf.eu.gp.model.iforms.postproc.FormPostprocessor.initiateProcess(FormPostprocessor.java:289)
at
   com.sap.caf.eu.gp.model.iforms.postproc.FormPostprocessor.processData(FormPostprocessor.java:564)
at
   com.sap.caf.eu.gp.model.iforms.FormPostProcessor.doPost(FormPostProcessor.java:182)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760) at
   javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at
   com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at
   com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at
   com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at
   com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at
   com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at
   com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
   at
   com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at
   com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at
   com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
   at
   java.security.AccessController.doPrivileged(AccessController.java:207)
   at
   com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
at
   com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
   Sorry for any inconvenence

Positioning and role of Edge Transport Server

Good afternoon, all!
I'm working on a new Exchange design and implementation project. I had some research that seemed to indicate that I could have my Edge Transport server in the DMZ to receive Internet mail and to act as a web proxy for the Client Access server residing
in the internal network. However, in my testing I haven't found where that is possible.
Will the Edge Transport server provide that capability or will I need to open a path to the Client Access/Mailbox server? Is there a tradeoff in separating the Client Access server into a separate machine in the DMZ for remote access, that is, if the
Edge Transport server won't supply web proxy services, will I need to make a separate machine for Client Access?
Thanks!
Gregg

Hi Gregg,
Based on my knowledge, Edge Server role handles Internet-facing mail flow and act as an SMTP relay and smart host for Exchange servers in your internal network. We can use Edge server if don't want to expose internal CAS and MBX. We can also
configure Anti-Spam on Edge server to block specific emails.
Unlike other Exchange server roles, the Edge server doesn’t need to be a member of an AD domain, so locating it within a DMZ does not create any difficult firewall configurations.
Confirm that any firewall between your Exchange servers and Edge servers allow port 53 for DNS resolution and port 25 for SMTP traffic.
Thanks
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Mavis Huang
TechNet Community Support

Can portal role assignment be transported to another portal?

Hi, Gurus:
i need to transport portent, role, uses, etc from one portal (EP6 on NW04 )to another (EP7 on NW04s).
can you tell me that if portal role assignment can also be transported?
same question to ume role.
very confused at this area.
hope i can get your advice
Thank you
Br,
Nikko

Strictly speaking the user/group/role assignment is not part of the normal transport process in that it will not make those mappings when you transport the content to the next system in your architecture.
However - you can export users / groups which includes the mappings details. This can be used in your downstream systems.
Subsequent transports of objects do not "break" existing mappings.
Haydn

Transport request for BW queries and roles.

Hi All,
we need to craete 20 bw queries on 4 multiproviders. We need to save 18 queries as workbooks in one role and the other 2 queries in other role. Both the roles and queries does not exist and will be created in Developement environment.
We just want to know how we can transport them in the quality environment. What is the right method to transport them.
Can we transport all the object queries, workbooks and roles in number of transport requests so that if few queries or workbooks needs any changes then we do not have to transport all objects just the request which includes the changed objects.
Thanks & Kind Regards,
Hardeep

Thanks a lot for all of you for your quick response. But i still have questions.
If we create one transport for roles and one transport for each query then we will be having 21 transport requests. But the transport request on same multiprovider can lock the clacuated key figures and restricted key figures, if they are present in more than one query, it means they will be present in more than one transport requests, so they can be locked and trasport request will be failed.
If i just create one transport request for all the objects roles, quaries & workbooks it will not loack any object, and transport request will not fail. But i have to transport all the objects again if i need to change one of the queries.
Please let me know if there is a method that i can divide my queries as per multiprovider and can create transport requests as per multiprovider so that we can not lock calculated keyfigures and restricted key figures. Is workbooks can be published in the role in the same transport request. If it is and if in more than one transport request we are publishing the different workbooks to the same role, will it lock the role.

Transport roles and analysis authorization with user assigned

Hi expert,
I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
Thanks for your time,
Luis

Hi,
In role administration, you have the following options for transporting roles:
You can download the roles from one system and upload them into another
You can import the role from a remote system using RFC
You can transport the roles with the transport function.
Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
Transporting Roles with the Role Transport Function
       1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
       2.      Enter the role to be transported and choose Transport Role.
The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
For more information go thrpugh the below link
http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Marasa.

Transport of the query under some role................

Hi,
I created new query in development and saved it under one role.
I transported the query and workbook to production but didnt transfer the role with query.
When I checked the query in production it is not reflecting under the required role.
Do I need to transfer the role also with the new query? However it is present in the Info area trea of Queries.
now as I have alreday transported the query and workbook to production do need to again transport these with the Role OR I can transferring the role only will be sufficient?
Thanks
Jeetu

It's enought to trasnport the role in production.
Hope it helps.
Regards

How to transport a role in portal

All,
I created a new role and I would like to transport it. Could anyone tell me which steps am I supposed to follow and which role am I supposed to have to create a transport in portal?
Regards,

Hi Mike,
Role is PCD object by using Transport package you can move from one server to anither server.
Procedure:
1)SystemAdminstration>SystemConfiguration>Transport-->Export
-->create TransportPackage
2)Add the Role to the transport package
3)Start export and then download to the local machine.
4) if want to import in another server
SystemAdminstration>SystemConfiguration>Transport-->import
import the .epa file
Thanks
Srikanth

Error During Exchange 2013 Mailbox Transport Role Install On Server 2012

I was installing Exchange 2013 on Server 2012. The server is not a DC, but is a member of a domain with a 2008 R2 functional level, and I was logged in as a domain admin. There has never been an Exchange instance on this domain. I got past
the prerequisite checks, and the installer showed 15 steps, so I walked away. When I came back, I saw this:
Step 8 of 15: Mailbox role: Transport service
Error:
The following error was generated when "$error.Clear();
          $maxWait = New-TimeSpan -Minutes 8
          $timeout = Get-Date;
          $timeout = $timeout.Add($maxWait);
          $currTime = Get-Date;
          $successfullySetConfigDC = $false;
          while($currTime -le $timeout)
            $setSharedCDCErrors = @();
            try
              Set-SharedConfigDC -DomainController $RoleDomainController -ErrorVariable setSharedCDCErrors -ErrorAction SilentlyContinue;
              $successfullySetConfigDC = ($setSharedCDCErrors.Count -eq 0);
              if($successfullySetConfigDC)
                break;
              Write-ExchangeSetupLog -Info ("An error ocurred while setting shared config DC. Error: " + $setSharedCDCErrors[0]);
            catch
              Write-ExchangeSetupLog -Info ("An exception ocurred while setting shared config DC. Exception: " + $_.Exception.Message);
            Write-ExchangeSetupLog -Info ("Waiting 30 seconds before attempting again.");
            Start-Sleep -Seconds 30;
            $currTime = Get-Date;
          if( -not $successfullySetConfigDC)
            Write-ExchangeSetupLog -Error "Unable to set shared config DC.";
        " was run: "Unable to set shared config DC.".
The only option on the screen was exit, so I did. I checked the start menu, and there were two new Exchange icons, but I did not click them. I ran the installer again, and it detected an incomplete install, the only option was to click next to
finish the install, so I clicked next. This time, I eventually got the same error, except the screen showed "Step 8 of 15: Mailbox role: Transport service." I did install some Exchange 2010 prerquisites on the server before Exchange Server 2013
came out, and I can rebuild the server and try the install again if that would be best, but I thought I should post here first and try to work through this since the product is so fresh. Any suggestions?

I've tried three times since my last post, following
http://msexchange2010.info/archives/2330 as closely as possible the most recent time. I am consistently getting the same error that appears to imply I don't have write access to the domain. I don't understand this, because I am using the
same domain admin account I have been using all along. Nonetheless, here is the powershell output starting with the first Exchange setup.exe step (all other steps were already performed, all available updates were installed, and the server was rebooted
prior to this):
Windows PowerShell
Copyright (C) 2012 Microsoft Corporation. All rights reserved.
PS (domain admin home)> D:
PS D:\> .\Setup.exe /PrepareSchema /IAcceptExchangeServerLicenseTerms
Welcome to Microsoft Exchange Server 2013 Unattended Setup
Copying Files...
File copy complete. Setup will now collect additional information needed for installation.
Performing Microsoft Exchange Server Prerequisite Check
Prerequisite Analysis COMPLETED
Configuring Microsoft Exchange Server
Extending Active Directory schema COMPLETED
The Exchange Server setup operation completed successfully.
PS D:\> .\Setup.exe /PrepareAD /OrganizationName:PRD-INC /IAcceptExchangeServerLicenseTerms
Welcome to Microsoft Exchange Server 2013 Unattended Setup
Copying Files...
File copy complete. Setup will now collect additional information needed for installation.
Performing Microsoft Exchange Server Prerequisite Check
Prerequisite Analysis COMPLETED
Setup will prepare the organization for Exchange 2013 by using 'Setup /PrepareAD'. No Exchange 2010 server roles have b
een detected in this topology. After this operation, you will not be able to install any Exchange 2010 servers.
For more information, visit: http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.NoE14ServerWarning.
aspx
Configuring Microsoft Exchange Server
Organization Preparation COMPLETED
The Exchange Server setup operation completed successfully.
PS D:\> .\Setup.exe /Mode:Install /Roles:ClientAccess, Mailbox, ManagementTools /t E:\Exchange /IAcceptExchangeServe
rLicenseTerms
Welcome to Microsoft Exchange Server 2013 Unattended Setup
Copying Files...
File copy complete. Setup will now collect additional information needed for installation.
Languages
Management tools
Mailbox role: Transport service
Mailbox role: Client Access service
Mailbox role: Unified Messaging service
Mailbox role: Mailbox service
Client Access role: Front End Transport service
Client Access role: Client Access Front End service
Performing Microsoft Exchange Server Prerequisite Check
Configuring Prerequisites COMPLETED
Prerequisite Analysis COMPLETED
Configuring Microsoft Exchange Server
Preparing Setup COMPLETED
Stopping Services COMPLETED
Copying Exchange Files COMPLETED
Language Files COMPLETED
Restoring Services COMPLETED
Language Configuration COMPLETED
Exchange Management Tools COMPLETED
Mailbox role: Transport service COMPLETED
Mailbox role: Client Access service COMPLETED
Mailbox role: Unified Messaging service COMPLETED
Mailbox role: Mailbox service FAILED
The following error was generated when "$error.Clear();
if ($RoleIsDatacenter -ne $true)
if (Test-ExchangeServersWriteAccess -DomainController $RoleDomainController -ErrorAction SilentlyContinue)
$sysMbx = $null;
$name = "SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}";
$dispName = "Microsoft Exchange";
Write-ExchangeSetupLog -Info ("Retrieving mailboxes with Name=$name.");
$mbxs = @(Get-Mailbox -Arbitration -Filter {name -eq $name} -IgnoreDefaultScope -ResultSize 1 );
if ($mbxs.Length -eq 0)
Write-ExchangeSetupLog -Info ("Retrieving mailbox databases on Server=$RoleFqdnOrName.");
$dbs = @(Get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController);
if ($dbs.Length -ne 0)
Write-ExchangeSetupLog -Info ("Retrieving users with Name=$name.");
$arbUsers = @(Get-User -Filter {name -eq $name} -IgnoreDefaultScope -ResultSize 1);
if ($arbUsers.Length -ne 0)
Write-ExchangeSetupLog -Info ("Enabling mailbox $name.");
$sysMbx = Enable-Mailbox -Arbitration -Identity $arbUsers[0] -DisplayName $dispName -database $dbs[0
].Identity;
else
if ($mbxs[0].DisplayName -ne $dispName )
Write-ExchangeSetupLog -Info ("Setting DisplayName=$dispName.");
Set-Mailbox -Arbitration -Identity $mbxs[0] -DisplayName $dispName -Force;
$sysMbx = $mbxs[0];
# Set the Organization Capabilities needed for this mailbox
if ($sysMbx -ne $null)
# We need 1 GB for uploading large OAB files to the organization mailbox
Write-ExchangeSetupLog -Info ("Setting mailbox properties.");
set-mailbox -Arbitration -identity $sysMbx -UMGrammar:$true -OABGen:$true -GMGen:$true -ClientExtensions
:$true -MailRouting:$true -MaxSendSize 1GB -Force;
else
Write-ExchangeSetupLog -Info ("Cannot find arbitration mailbox with name=$name.");
else
Write-ExchangeSetupLog -Info "Skipping creating E15 System Mailbox because of insufficient permission."
" was run: "Database is mandatory on UserMailbox.".
The following error was generated when "$error.Clear();
if ($RoleIsDatacenter -ne $true)
if (Test-ExchangeServersWriteAccess -DomainController $RoleDomainController -ErrorAction SilentlyContinue)
$sysMbx = $null;
$name = "SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}";
$dispName = "Microsoft Exchange";
Write-ExchangeSetupLog -Info ("Retrieving mailboxes with Name=$name.");
$mbxs = @(Get-Mailbox -Arbitration -Filter {name -eq $name} -IgnoreDefaultScope -ResultSize 1 );
if ($mbxs.Length -eq 0)
Write-ExchangeSetupLog -Info ("Retrieving mailbox databases on Server=$RoleFqdnOrName.");
$dbs = @(Get-MailboxDatabase -Server:$RoleFqdnOrName -DomainController $RoleDomainController);
if ($dbs.Length -ne 0)
Write-ExchangeSetupLog -Info ("Retrieving users with Name=$name.");
$arbUsers = @(Get-User -Filter {name -eq $name} -IgnoreDefaultScope -ResultSize 1);
if ($arbUsers.Length -ne 0)
Write-ExchangeSetupLog -Info ("Enabling mailbox $name.");
$sysMbx = Enable-Mailbox -Arbitration -Identity $arbUsers[0] -DisplayName $dispName -database $dbs[0
].Identity;
else
if ($mbxs[0].DisplayName -ne $dispName )
Write-ExchangeSetupLog -Info ("Setting DisplayName=$dispName.");
Set-Mailbox -Arbitration -Identity $mbxs[0] -DisplayName $dispName -Force;
$sysMbx = $mbxs[0];
# Set the Organization Capabilities needed for this mailbox
if ($sysMbx -ne $null)
# We need 1 GB for uploading large OAB files to the organization mailbox
Write-ExchangeSetupLog -Info ("Setting mailbox properties.");
set-mailbox -Arbitration -identity $sysMbx -UMGrammar:$true -OABGen:$true -GMGen:$true -ClientExtensions
:$true -MailRouting:$true -MaxSendSize 1GB -Force;
else
Write-ExchangeSetupLog -Info ("Cannot find arbitration mailbox with name=$name.");
else
Write-ExchangeSetupLog -Info "Skipping creating E15 System Mailbox because of insufficient permission."
" was run: "Database is mandatory on UserMailbox. Property Name: Database".
The Exchange Server setup operation didn't complete. More details can be found in ExchangeSetup.log located in the
<SystemDrive>:\ExchangeSetupLogs folder.
PS D:\>
I am cleaning out in ADSI and rebuilding the server for now, because the server is behaving oddly (not as oddly as it was with 6GiB, but oddly, nonetheless). I probably won't try to install Exchange again before tomorrow. What should I do to prevent
encountering the above again and/or if I encounter it again?

Is transporting two groups of derived roles separately an issue?

Hi Gurus,
We have a situation where we need to transport 150+ child roles of same Parent. As these roles are very bulky in content, we though of creating two transports having 70+ roles each. While doing so, we released first transport and when it reached test system we release another one.
Final result in test system is all the child roles which were moved in first transport now have authorization tab "red". While one which were transported in second tp are perfect.
I have tried sending all the roles in 1 transport but due to its huge size it failed and got stuck many times before we deleted it from the buffer. Please let me know the best possible way to move the changes to test environment and later to prod. Increasing tp file size or increasing the ideal run time of the dialog/background work process are the option. But looking for some other alternatives.

That you have such large derived roles should be suspect in itself. How many org. fields have you promoted and did you transport that change to the field definition through first (just to double-check)?
How many users are these roles already assigned to? --> The import events for role transports also perform the user compare and "after change" user buffer syncs. This can have performance impacts, if that is the ponit of failure you are referring to.
> I have tried sending all the roles in 1 transport but due to its huge size it failed and got stuck many times
Take a look in ST22 for the short dumps related to this. Give us more infos about the bottleneck and perhaps we can help further.
PS: When doing performance tests, you should not give up after the first try... (memory area management and syncs which the system does - some of them you can do in advance and only need to be done once / repsctively the first time).
Cheers,
Julius
Edited by: Julius Bussche on Apr 4, 2010 10:43 AM

Transporting Individual Child/Derived Roles

Suppose I have 5 Child/Derived Roles of 1 parent role.
If I make an Org Level change to 1 of teh Child Roles, do I need to transport all the other child Roles as well?
My peers say that if I do not transport the remaining child roles there are some side-effects. But they do not know the exact reason.
Please guide me with teh reason for this.
Thanks in advance.

Once you make a change to the Org level content in the specific derived role, it can be transported independently of the other sister derived roles from the same parent.
When you enter that specific derived role in the transport request, it will automatically bring in the parent role but not the other sister derived roles.
I have not seen any side effects to this approach and it is SAP recommended.
Thanks,
Guru.

Role Transport

Hi All,
I am changing single role at authorization level,and i saved it.But this single role is contained in Master composite role .Now while transporting what should I transport..? is it only single role or whole composite role and its derived compoites.?Please advice I am new to forum..!

Hi,
Please transport the single role only and use generated derived roles in quality and production if this role is derived.
Regards,
Gowrinadh C

Transport of translation authorization role menu

Hello,
I have translated node of authorization role menu with transaction PFCG.
How to make to transport this translation in others systems ?
Is it necessary to put the role in a transport request with PFCG or with SLXT ?
Thanks for your help.

I dont think so that there is a way doing this in ABAP.

Mass transport: how to select more than 7 roles at a time

I have about 50 roles I need to transport. I would like to use mass transport, but when I select all 50 roles, only the first 7 are actually added to the transport list.
I have to repeat the selection many times before all the roles are included in my transport request.. still a rather time consuming process. How can I select more than 7 at a time?

> And now we're back to my original problem.
Oh, dear....
> We have a structured role naming convention that would make it very easy to select with wildcards.. however, when I try to do it that way, the system won't let me select more than 8 roles at a time.
This is where I think you do not have a problem but a misunderstanding. Never mind, we see those quite often.
> See if you can reproduce this problem in your environment:
I had to start it first (minisap Nw2004), renew the license and wait for the transport tool to compile. You've got me busy here on a saturday
> 1. Start PFCG
done
> 2. Utilities -> Mass Transport
yep, watched it compile.
> 3. Click multiple selection button
yep
> 4. Enter a mask that would match more than 8 roles,
yep
> press F4
NO! NO! NO! NO! NO! NO! NO! NO! NO! NO!
This is where the misunderstanding starts
> 5. Click select all (make sure more than 8 roles are selected)
No
> 6. Click copy button
No
> 7. Observe that only the first 8 role are actually copied to the multiple selection list
Instead, hit F8 where you have hit F4 and find out all roles that fit the mask will be entered into the transport.
You have mixed up the actual report selection and the search functionality of the selection screen. Play with it, it's fun.
One word of caution: Mass transport can cause perfromance problems and errors. I always try not to enter more than 500 roles into a transport at a time.
Cheers!
Jurjen

BP ROLE TRANSPORTS

Hi,
I have created new BP roles in "development" by copying the pre defined SAP roles.
When we transported the roles to Testing server, roles have been reflected in the transaction BUSD, but the dependences have not been transported. The roles have not been replicated in BP.
Could any one suggest what would have went wrong.
Thanks in advance
Vamsi

Hi Vamsi,
Transporting roles will not transport dependencies.
You have to manually add all dependencies in a request and then transport this request to the testing server.
Regards,
Bapujee Naidu

Max no. of roles in a transport

Similar Messages

Maybe you are looking for