Reg : Transportation of roles

Hi Experts,
I have made changes to a role and I was waiting for approval to move that particular changes to
Production system. In the meantime other person who is working on the same role made some changes and he had moved his change to the production system.
Problem is when he released the Transport to Production, changes moved along with changes what I made to the role.
This would be dangerous if suppose my changes were rejected to move to production system.
Can any one advise me 1) How to Transport roles only with changes made by particular user were transported instead of transporting the entire role ? so that only If my transport is released, changes gets effected into the production system.Is there any mechanism in SAP for it.
2) should I follow some other process to avoid two people working on the same role.
Kindly clarify my doubts. Awaiting for your replies.
Thanks,
Sanjeev anand

Hi Sanjeev,
This issue with roles is compounded by the fact that roles may be downloaded from one system and uploaded in another, leaving no transport trace. Of course download/upload can be prevented.
One approach would be for the Security and Authorization team to take care of changes in roles.
But many organizations would not have such a team. Another approach would be for custom roles to be changed only by the creator or last changed person as far as possible. This would of course be a matter of discipline.
Mathew.

Similar Messages

Transporting a role from DEV to QAS in a Workflow

Hi,
I assigned a Role as the possible agent for a std task in DEV. I transported from DEV to QAS, first the Role (where I see the Std. task to which it is assigned and the corresponding WF template in PFCG for the role) with a Customizing Req. and then transported the WFlow template & associated std.task with a WBench TReq.
The transport is successful without any errors.
But, when I see the agent assignment for the task in QAS, the role is gone. Also, When I see the role Maintenance PFCG for this role, I don't see any WFlow tasks in the Workflow tab.
I tried to trasport this sequence(first role and then the wflow & std. task associated with it) twice, but in vain.
Can somebody pl tell me what's going on with the transport of the roles(that should include the wflow tasks & templates).
Thanks in advance
venu

Mike,
Infact I did first time transport in the sequence of WB req and then Cust. Req. It didn't help and then I tried the other sequence too.
And Could you tell me how to look into the WF configuration of the system to see if it is set to transport the Roles?
Actually, i tried transporting 3 roles under one Cust. Tran.Req, but only one Role got transported correctly and the rest two have been failing.
Pl. tell me if I am doing it correctly...
thank you
venu

BASIS query :how to transport user roles

BASIS query :how to transport user roles
regards
Mave

Hi Mave,
Pls follow this
Goto PFCG
Enter the role there.
On the application toolbar you can find the button for transport. Click on that and assign this to a transport request
Release and transport to the other system.
Cheers
Vinod

While transporting a role getting issue - Role type is undetermined

Hi
While trying to transport a single role getting the below error :
Role type is undetermined.
Can somebody help?
Regards
Saurabh

Saurabh,
I faced something pretty much similar and snote:: "770358 - PFCG: Role copy fails due to data inconsistency" worked perfectly for me.
Snote describes quite nicely about the root cause.
Please note this error might come up when you try to copy this role, perform pfud as wel.
Thanks,
Brahmeshwar

How to Transport a Role

hello, Experts.
I have a small problem.
I have added a New Workbook to Developer Role, i want to Transport it to QA . what are the steps i need to do.
i went to Transport Connections and in that i selected the Role which i want to Transport , and in the Grouping which one i need to select? can please send me the steps so that i can do it.
Thanks in Advance
Sharp

Hello,
I dont have Access , In PFCG its not Giving an Option for Transports.
I have takled to Secuirty Team to help they said they will do it.
Waitting for them to get back to me.
Thanks
Sharp

How to transport a role in portal

All,
I created a new role and I would like to transport it. Could anyone tell me which steps am I supposed to follow and which role am I supposed to have to create a transport in portal?
Regards,

Hi Mike,
Role is PCD object by using Transport package you can move from one server to anither server.
Procedure:
1)SystemAdminstration>SystemConfiguration>Transport-->Export
-->create TransportPackage
2)Add the Role to the transport package
3)Start export and then download to the local machine.
4) if want to import in another server
SystemAdminstration>SystemConfiguration>Transport-->import
import the .epa file
Thanks
Srikanth

Transporting a role from QAS to DEV

Hi,
I have a role in QAS system.
I want to transport it to the DEV system,. I have released the request in QAS, but i could nto see the data file and co file in the transport directory
The tR route is as follows
DEV-> QAS--> PROD
Pls help

Hi,
You can just download the role to your front end system by going to pfcg enter the name of the role and then go to Role-->download this will download the role then you can upload the role to your dev system.
Transporting in the reverse way is not possible.
Regards,
Vamshi.

Transport All Roles to Another System

Hi Experts,
I have one requirement. I want to create same roles in Development System that I have made in QA System.
So is there any technic, I dont have to make it again in Development system and copy from QA system?

Hi,
Transport is not possible from QAS to DEV system.
So in this case you can use upload download roles.
Go to PFCG. Create one composite role and add all the roles that you want to transfer.
Then select that composite role in PFCG screen. Go to Role --> Download. It will ask to save the role file. Save it on your machine.
Now login into the DEV system, go to pfcg. Go to Role --> Upload and select the file which you have stored earlier.
It will create all the roles in DEV same as QAS. You have to create profile of all that role.
You can generate mass profile using SUPC. Go to SUPC and select all the roles which you have transfered and generate their profile.

Transport Deleted Roles

Hi
I would like to get some information regarding transport of deleted roles from one system to another.
For some reason we have a set of derived roles in PRD (Around 12) and dont have it in QA.
I would like to have the same created in the QA. After that I would like to delete all these derived roles in QA. I would like to have the changes cascaded to production as well.
My question here is that Since i am going to delete these derived roles I do not want to go through the trouble of assigning the exact authorizations for these derived roles (as what is present in PRD) coz doing so would consume a lot of time. I would just like to create the child roles (with the same name as its in PRD) and then I would like to cascade the deletion. Is that possible ? How ?
Is it sufficient to just have a role by the same name (without all the authorization data) and do a cascade delete ?
Should you have some reference document which can be shared please do so.
Please advise
best regards
Ravi
Note: I am not using Central User Administration.

Hi ,
The roles ( the main role and the derieved roles will also be downloaded ) can be downloaded from the PRD by using the T code PFCG -
> utilities -
> mass download or role----> download from the menu bar onto the desktop and log on to QA and and again use PFCG Transacion then uploaded from role -
> upload after which the roles uploaded need to be generated .
This will have all the roles in the QA system with the derieved roles as well and if the roles are deleted in the QA and then if the main role is again uploaded to PRD the it will overide the existing roles with the new ones from QA with all the new changes done in QA .
Hope i am not missing anything ,
Regards,
Sagar

CREATING TRANSPORTS FOR ROLES, SAP_ALL ISSUES

Hi all,
i have created a role , while creating a transport i have the options
personalization,
user assignment which one should i select while creating request.
what 's the difference between this two.
DOES SAP_ALL EFFECTS THE OTHERS AUTHORIZATION ROLES.
THANKS

Hi Venki,
I found some of your replys regarding ztable replication from r3 to CRM very helpful.
Could you please send me any docu that you followed to acheive this.
plase reply to the thread 'ZTABLE real time synchronization'.
my email id would be [email protected]
Any help will be appreciated....
regrads,
Sameer

Reg:Auto Approve Roles without Approvers for GRC 10.0

Hello,
Is anyone using this option on GRC 10.0 as according to my understanding , if someone selects a role and it has no approver then the role has to be assigned to the user automatically but it is not happening in my system..The request is going to decision pending and it is still looking for role approver.
Can someone provide their expertise on this issue .
Thanks
Uday

Hi Uday,
I have not used that functionality myself, as I find it too risky if a SOD or Critical risk would be introduced by assigning that role.
I would have thought that by setting the correct values in SPRO would have enabled this functionality. It might be worth checking the settings again and resaving it.
However, if you are purposly leaving the approver value blank for non-risky roles, as an alternativethe document below is worth a consideration for implementing via BRF+ in GRC 10. (I know the document is more GRC 5.3 related, but the concept is valid).
Link: [http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/203d2716-ef84-2d10-3f81-a6f6643e308d?QuickLink=index&overridelayout=true]

Reg:Transportation Information

Dear All
I have no idea about the transportation, plz explain me in detail regarding the transportation so it will help to me alot to my carrer.
Regards
manikanta
Please search the forum.
Edited by: Pravender on Jun 2, 2010 4:24 PM

Check the below table
ROOSOURCE Header Table for SAP BW DataSources (SAP Source System/BW System)
RSOLTPSOURCE Replicate Table for OLTP Sources in BW
Regards
KP

Reg: Transporting Authorization Objects

Hi,
If a custom authorization object has been created, can someone please guide on it to be transported across landscape.
Regards,

Hi,
Yes. create a workbench request and open it in change mode.
Now you will have table with editable fields with 3 fields.
1. In programID field enter R3TR
2. In object type field enter SUSO
3. In Object name field enter the respective Z authorization object.
You also need to make sure that the respectie class is available in the target systems. if not, repeat the above procedure with object type as SUSC.
Regards,
Gowrinadh

Reg:- Transportation Management

Hi SD Gurus
Can any body sends me the Transportation Management configuration in SD. And please explain me some secnarios.
My e-mail id: [email protected]
Thanks in advance.

HI Rajesh,
And also Please Fallow Below steps.
Step1: T.Code: VL01N: Just Create Delivery Note here. Do not do the Picking and Packing.
(This is Client Specific)
Step 2: T.Code: VT01N: Create Shipment.
Here mention your Transportation Point and Shipment Type you Configured for this and Click on deliveries ICON.
GO to W.ref to
Outbound Delivery : Give your Delivery Number that you created earlier for this shipment and F8( Excute)
Then Select the Delivery and Click on OverView
Here Click on Planning then automatically Route( If route determination is done) and Vendor Number get generated and Save the Data.
Step.3: T.Code: VL02N: Change Delivery.Here give the Delivery no and
Do picking, Packing ( If necessary) and PGI.
Please Reward Points if really Helpful,
Sateesh.Kandula

Reg: Hiring Manager role in E-Recuitment EHP4

Hi all,
           i am working with Ehp4 . My business package for Recruiter is Recruiter1.4.1 . I am trying to create a requisition from the recruiter login . I have a field HIRING MANAGER . Wat is the role tat we should assign for the Hiring Manager.
Thanks
Priya

Hi,
I have the same problem on ERECRUIT604 EHP4 SP4. I cannot retrieve managers using Find Hiring Manager search on the Create Requisition page.
I have though found out that there are 2 cases.
On the one-instance solution with HR and ER on the same server an employee is retrieved as a Manager if there are following relationsships to his CP object:
B     207     Is identic     BP
B     208     Is identic     US
B     209     Has employ     P
B     650     Has candid     NA
Especially the relationship CP B208 US is critical. The problem is though that this relationship is not created automatically be the system as on the one-instance solution the user is retrieved from IT105 subtype 0001 via P object, so you have to create this relationsship manually. Or am I wrong?
On the two-instance solution with HR on one machine and ER on another the above solution does not work at all. Here the relationship CP B208 US is created via ALE, but it does not help for retrival of Hiring Managers.
I have also added the 'manager' role to the employee, the employee is the manager in the Organizational Structure, and still I cannot retrieve him.
Maybe it's a bug in the system. Anyway I cannot find any hints telling what are the assumptions for using this functionality.
Waiting for an answer
Best regards,
Beata

Reg : Transportation of roles

Similar Messages

Maybe you are looking for