Transport Role Problem

Hi Gurus!
I have a problem.
I need to transport a role from Test to Prod, but the role exists in Prod and the user create workbooks in this role.
How can I transport the role without afect the user workbooks??
- It Is a generated profile and i can't transport the profile through SU02
- I need to transport the role becasue the authorizations in the role are wrong
Any suggestion??
Thanks !!
Dani.

If the user has created the workbooks directly in production..
Then as far as I know you can not transport the role without replacing the existing workbooks in Production

Similar Messages

Transport roles and analysis authorization with user assigned

Hi expert,
I face with this problem transport roles and analysis authorization with user assigned. When I have created a transport request to move the roles and analysis authorization from development system to test system. I couldnu2019t maintain the user assigned, after transport I have to assigned manually all of user or create a program to fill AGR_USER table or there are other way.
Thanks for your time,
Luis

Hi,
In role administration, you have the following options for transporting roles:
You can download the roles from one system and upload them into another
You can import the role from a remote system using RFC
You can transport the roles with the transport function.
Role upload loads all role data, including authorization data from a file into the SAP system. The user assignments for the role and the generated profiles for the role are exceptions in this case.
Transporting Roles with the Role Transport Function
       1.      Start the role administration function by choosing Tools ® Administration ® User Maintenance ® Role Administration ® Roles (transaction PFCG).
       2.      Enter the role to be transported and choose Transport Role.
The Mass Transport of Roles screen appears. You can control the default settings for the options Also transport single roles for composite roles and Also transport generated profiles for roles using Customizing switches (see Role Administration Functions in the section Functions of the Utilities Menu).
You should not change the authorizations profiles of the role after you have included the role in a transport request. If you need to change the profiles or generate them for the first time, transport the entire role again afterwards.
For more information go thrpugh the below link
http://help.sap.com/saphelp_nw70/helpdata/EN/6d/7c8cfd410ea040aadf92e1f78107a4/content.htm
Regards,
Marasa.

Transported Roles not Visible for the User Log-in

I have three roles in the development system. These roles show up in the top level navigation for the users in the dev system. All these roles and the underlying BSPs are transported to QA successfully. I could assign them to users without any problems, but when the users log-in they can not see any of these roles at the top level navigation (In fact, they just get a blank screen). "Entry Point" setting and "Sort Priority" is maintained for all the three roles.
As a test, I created a new role with the same BSP links in QA itself and assigned it to the users. This shows up in the top level navigation for the users. I am wondering what's wrong with the transported roles! If someone could help me here that would be great and I will assign points to helpful replies. I have a very basic knowledge in portal.

After applying SP12 in the portal landscape (EP 6.0), the role transports only work in our test environment, but not in production. Even the manual corrections suggested in OSS note 1002832 didn't help. I can preview all the iviews in the roles with my user id (admin id), but as soon as I log-in with the end user id nothing shows up [Not even the top level navigation tabs show up]. The following is the portal authorization methodology I chose.
1. I assign users to the user groups
2. I assign user groups to the roles
I want to emphasize that all is well in our test environment, it is the production environment that shows inconsistency. Let me know if anyone has any pointers.

Error while creating Transport role

Hi,
I have created a new transport role - " Transport manager" but unfortunately the import function of that doens,t work. It gives Error: "Unexpected Error. See System log for more details...."
In the NWA i see: ' ( ' com.sapportals.portal.transport.ui.ImportComponent ')' ImportComponent.doOnUpdatePreviewPage(): unexpected error; action=onBrowse.
The same role assigned to user with content admin and system admin rights works fine.
Any ideas?
Many thanks,
Dharmi

Hi Kotty,
Read it loud......
import of role failed or after importing users unable to see?
>> Neither. I am referring here to the standard ' import' function provided by SAP for System Administration -> Transport -> Transport Packages -> Import..
You told system admins and content admins can able to see that role . So,please check end user permission of that role and assign it to relevant groups or everyone if you want to allo all users to see.
>> I mentioned, that If I (having Content admin and System Admin rights) am assigned the Transport Manager role, then I don't get an error.
Whilst if this role is given to the transport manager wherein he has just this Transport manager role. ...only with import function -> server option selected ->clicking on search gives an error.....
This transport manager role is created by making a copy of System Admin workset and assigning only the Transport related activities.
Regards,
Dharmi

Installing Exchange 2010 on Server 2008 R2 Get error with Hub Transport Role

Hub Transport Role
Failed
Error:
The following error was generated when "$error.Clear();
          install-MsiPackage `
          -PackagePath ($RoleInstallPath + "TransportRoles\agents\Hygiene\ASEntIRS.MSI") `
          -LogFile ($RoleSetupLoggingPath + "\InstallASEntIRS.msilog") `
          -PropertyValues ("ALLUSERS=1") `
          -UpdatesDir $RoleUpdatesDir
        " was run: "Installing product D:\Program Files\Microsoft SQL Server\Microsoft\Exchange Server\V14\TransportRoles\agents\Hygiene\ASEntIRS.MSI failed. Fatal error during installation. Error code is 1603.".
Installing product D:\Program Files\Microsoft SQL Server\Microsoft\Exchange Server\V14\TransportRoles\agents\Hygiene\ASEntIRS.MSI failed. Fatal error during installation. Error code is 1603.
Fatal error during installation
Elapsed Time: 00:00:01
Client Access Role
Cancelled

Hi,
From the description, I recommend you copy the Exchange installation files to the local machine, or download a fresh copy of Exchange 2010 and then reinstall it.
Besides, please ensure that you install Exchange 2010 on 64-bit edition of Windows Server 2008 R2 Standard with SP1 or Windows Server 2008 R2 Enterprise with SP1.
If the issue persists, please refer to the following KB further troubleshooting.
You receive error 1603 when you try to install the Exchange Server 2010 RU1
https://support.microsoft.com/kb/981474
Hope it helps.
If you need further assistance, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support

Service 'MSExchangeADTopology' failed to reach status 'Running' while installing Hub transport role of exchnage server 2010 sp1 on Window Server 2008 r2

Hi
Getting this error while installing hub transport role of exchange server 2010 sp1 on window server 2008 R2.
Hub Transport Role
Failed
Error:
The following error was generated when "$error.Clear();
          if ($exsSid -eq $null -or $exsSid -eq "")
          $exsSid = get-ExchangeServerGroupSID -DomainController $RoleDomainController
          start-setupservice -ServiceName MSExchangeADTopology -ServiceParameters $exsSid,$RoleDomainController
        " was run: "Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.".
Service 'MSExchangeADTopology' failed to reach status 'Running' on this server.
Click here for help...
http://technet.microsoft.com/en-US/library/ms.exch.err.default(EXCHG.141).aspx?v=14.1.218.11&e=ms.exch.err.Ex88D115&l=0&cl=cp
Elapsed Time: 00:25:35
Sandeep Gupta

Hi,
It might be a permission issue.
1 :
Add Manage auditing and security log Properties
Administative Tools > Local Security Policy > Local Policies > User Rights
Assignment > Manage auditing and security
Add
Exchance Servers.
2. Check Exchange Trusted Subsystem
1)Open Active Directory Users and Computers
2)Under domain name (For example contoso.com),navigate to the Builtin Container,on
the right hand side select the Administrator group,goto the properties
3)Click members tab and add Exchange Trusted Subsystem
4)Click ok twice
5)Reboot the Exchange server
6)Rerun the Exchange setup
Best Regards!

Co-Locate Client Access and Edge Transport Role on Same Server?

Co-Locate Client Access and Edge Transport Role on Same Server?
Is it possible/supported to install the Edge Transport Server Role on the same machine that the Client Access role is installed on now that 2013 SP1 has added support back in for the Edge Transport Role?
jon

No.
Unless something has radically changed from before...
EDIT
No, nothing has changed:
"If you want to install the Exchange 2013 Mailbox or Client Access roles on a computer, see
Install Exchange 2013 Using the Setup Wizard. The Edge Transport role can't be installed on the same computer as the Mailbox or Client Access server roles."
http://technet.microsoft.com/en-us/library/dn635117(v=exchg.150).aspx
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

Managing Exchange Edge Transport Role from my workstation

Hi Guys
I want to manage my Edge Transport Role (2010 sp3) that resides in DMZ from my workstation that resides on internal network.
What ports EMC 2010 is using? so I can open them on firewall.
How can I add edge transport server in my EMC when ports are opened?
Thanks in Advance
Farhad

Hi Farhad,
I find a topic that provides information about ports, authentication, and encryption for all data paths. Details for your reference:
http://technet.microsoft.com/en-us/library/bb331973(v=exchg.141).aspx
Information :
1. On servers that have Internet Information Services (IIS) installed, Windows opens the HTTP port (port 80, TCP) and HTTPS port (port 443, TCP). Exchange 2010 Setup doesn't open these ports. Therefore, these ports don't appear in the preceding table.
2. Make sure the Port 25 open by communication between Hub and Edge, Edge and Edge.
Thanks

How to install and configure ms exchange server 2007 both role hub and edge transport role in one network

How to install and configure ms exchange server 2007 both role hub and edge transport role in one network

Hi,
Edge role is design for perimeter networks, to keep security risks minimum. So it’s not recommended to have edge role in internal network. Must have separate network or subnet for edge services.
If you are playing around it in labs, then you can put edge role within same subnet as other exchange roles and no specific requirements in that case.
Thanks.
MachPanel - Premium Cloud Automation Solution

Transporting roles from dev to qa and prod servers ep6sp11

Hi
We have EP6 SP11 -erp2004
I will be transporting roles from the dev environment to a QA(quality assurance) and a production portal server.
Only the roles needs to be transported, <b>no</b> user assignments to be transported.
I have read some docs on this and would just like to confirm this is the procedure:
Basically:
1.Export the roles to a common directory
2.Importing it in qa and prod
3. From here onwards i need help on..Do i add the roles through delta links??? What other steps needs to be done?

Hi Pradeep
Thanx for your reply.
With the exception of the delta link assignment, i will assign it directly, I can just follow the procedure i have written?
RD

Transport Stream Problems

My compressor keep locking up when I set it to export in "MPEG-2/Transport Stream" setting. I would like to export in this setting because I believe that this is how Toast encodes to BluRay.
Any ideas/thoughts/solutions?
Go Hornets!

I'm not sure about your transport stream problem, but Toast doesn't need it; it will use its AVCHD encoder on a regular QT movie; I exported a self contained QT movie from an FCP timeline, dragged it into the Toast window, and let it encode; it worked well.
If you send Toast a previously compressed file, it will encode it again in the AVCHD format, probably at a loss of quality.
Toast can burn the Blu Ray format to a standard DVD, giving you about 30 minutes of HD footage, and using your standard DVD burner.

User Role problems in Sun Java Application Server Platform Edition 8

I am having two problems setting up user roles in Sun Java Application Server Platform Edition 8. At first, I thought that it was a problem with the higher level features that I was using, so I created a very simple example using the simplest authentication I can use, but the problem still occurs. I am using the file realm and configuring the users in the App Server Admin Console. I create 2 users in different roles. One user should have access, the other should not.
1) The first problem is that both users can access the page
2) The second problem is that the isUserInRole() method returns false for both users with the role that it should be authenticating against.
Here is a sample of my code:
Users Configured in Console:
username password roles
user1 ********** admin
user2 ********** noaccess
web.xml
     <security-role>
          <role-name>admin</role-name>
     </security-role>
     <security-constraint>
          <web-resource-collection>
               <web-resource-name>My Protected Area</web-resource-name>
               <url-pattern>/*</url-pattern>
          </web-resource-collection>
          <auth-constraint>
               <role-name>admin</role-name>
          </auth-constraint>
          <user-data-constraint>
               <transport-guarantee>NONE</transport-guarantee>
          </user-data-constraint>
     </security-constraint>
     <login-config>
          <auth-method>BASIC</auth-method>
          <realm-name>file</realm-name>
     </login-config>
     <servlet>
          <servlet-name>
               TestServlet
          </servlet-name>
          <servlet-class>
               mypackage.TestServlet
          </servlet-class>
          <security-role-ref>
               <role-name>admin</role-name>
               <role-link>admin</role-link>
          </security-role-ref>
     </servlet>
     <servlet-mapping>
          <servlet-name>
               TestServlet
          </servlet-name>
          <url-pattern>
               /TestServlet
          </url-pattern>
     </servlet-mapping>
TestServlet.java:
          out.println("admin role: " + request.isUserInRole("admin") + "<BR/>");
Thanks before hand for any responses.
- Brian

Hi Jeanfrancois,
Your suggestion has lead me to find my problem. There were actually three problems.
1) First, you suggestion to reorder my xml file did not cause any errors to occur. I got suspicious that my web.xml file was wrong. I looked at some sample web-xml files and found that I was missing the header as follows:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE web-app PUBLIC '-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN' 'http://java.sun.com/dtd/web-app_2_3.dtd'>
2) When I added this information, the deploy feature failed stating the my web.xml file was out of order. I fixed the ordering. It now deployed, but the security still wasn't working.
3) I then added the sun-web.xml file. This file was missing before hand as I thought it was unnessary. However, this file added the essential mapping from a role to a group. After adding this, it now started to work.
Thanks so much for you time and effort. You really did help me.
- Brian Blank

Transporting role with user assignments

Hi Guru's,
When we transport a role with user assignments then in the target system, the role will wipe out all the existing assignment and show the the users in the original released request.
eg. D->Q
In dev:
role-A has userA, userB
In Qas;
Role-A has UserA and userC
......after import of request:
the roleA will have userA and userB
What I have noticed is even if userB does not exist in Qas, the assignment will be reflected in AGR_USERS. A PFUD or user compare in a role does not remove the ghost entries. Is there any way to remove these inconsistencies ?
I saw note 534010, which is applicable for UST04.
Thank you
Abhishek

Hi Matt,
Yes, I do agree this is not a best practice. However, for a particular requirement, we thought this was the best way to solve the problem. Infact, this was the first time I ever did this
We have a role that needs to ONLY be assigned to every person in a particular team. With more than 30 systems present( out of the production landscape, just the testing systems), we thought this would be the only fast way out than going in each system and assigning this role. This would also ensure unassignment of this role to any other person too
Any other alternative?
Thank you
Abhishek

Transport request problem

Hi all,
when releasing the transport request from developement client subrequest is released properly but when released the main request getting the error
" Test call of transport control program (tp) ended with return code 0232
    Message no. TK094
Diagnosis
    Your transport request could not be exported, since all requirements
    were not fulfilled.
    Calling the transport control program tp
       "tp EXPCHK DEVK904964 pf=/usr/sap/trans/bin/TP_DOMAIN_PRD.PFL
    -Dtransdir=/usr/sap/tr"
    which checks the export requirements, returned the following
    information:
    Return code from tp:    0232
    Error text from tp:     ERROR: Connect to DEV failed (20071030084950,
    prob "
can anyone suggest about this.
thanks in advance .
sk.

Hi SK,
As the transport log itself saying that the connection to development failed. There may be some connection issue in STMS. Ask your basis if there is any problem.
Regards,
Atish

Transport request problem with a ztable

Hello,
I have some problems releasing a customizing transport request. It contains "table contents" of a z table. This z table is marked as "customizing table" (option C).
Error message is "task desk900213 belongs to a different category"
Thanks.

Hi Alberto,
What type of request are you using. Also let me know the classification of task.
I mean if you a workbench request is giving this error then try using a customising one and if a customising one is giving this error try using workbench transport.
I guess this is related to the thread:
Re: change object transport order
Also I hope you have assigned a development class to the Z table.
Please award points accordingly.
Regards.
Ruchit.
Message was edited by:
Ruchit Khushu

Transport Role Problem

Similar Messages

Maybe you are looking for