What authorizations to give to developers in the production environment

Hi,
We have setup our development PI 7.1 environment and are now ready to setup production. Can someone point me in the right direction for determining which authorizations need to be given to the PI developers in the production environment?
Do they have to be the same or is there some other set of roles/authorizations for a production environment?
Any help is greatly appreciated.
Best Regards,
Rick

Hi Rick,
Precisely for configuration XI have separate role: SAP_XI_CONFIGURATOR which is used to configure interfaces in ID. But again this is role provided to very selective people (usually Application Support team) because you need to share some sensitive user/password etc for different systems (SAP/Non-SAP).
We used following roles combinations:
- Dev system
Developers = SAP_XI_DEVELOPER, SAP_XI_CONFIGURATOR, SAP_XI_MONITOR, SAP_XI_BPE* ,
TechLead = Developer + SAP_XI_ADMINISTRATOR
- QA System
Developer = SAP_XI_CONFIGURATOR, SAP_XI_MONITOR, SAP_XI_BPE_MONITOR
TechLead = Developer (in special cases SAP_XI_ADMINISTRATOR)
- PROD System
Developer = SAP_XI_MONITOR, SAP_XI_BPE_MONITOR, (None for Configuration If I have separate team for configuration).
TechLead = Developer + SAP_XI_CONFIGURATOR
It is best practise to keep separate team for configuration on Prod system because of sensitivity of information. Even on PROD system you need to modify SAP_XI_MONITOR role to disallow monitoring of payload because of data sensitivity (HR, Finance data etc).
Regards,
Gourav

Similar Messages

My Iphone4 Home button sometimes work nicely and sometimes it stop working. India Apple care says they cant give me even paid support because i bought phone from Australia. i don't know what to do. i m disappointed with the product and service support

My Iphone4 Home button sometimes work nicely and sometimes it stop working. India Apple care says they cant give me even paid support because i bought phone from Australia. i don't know what to do. i m disappointed with the product and service support

When you buy an iPhone in the U.S. it's locked to that country with the carrier you bought it for.
If you bought the device unlocked in the U.S. it's unlocked, you can use it on any carrier. Even one's outside the country.
If you want to do a repair on a device you bought in the U.S. and your using it in another country, you must send it back to the U.S. Why? That's where you bought it from.
AppleCare Protection Plans and AppleCare Limited Warranties are registered to your hardware.
Your hardware is your iPhone.
Wherever hardware that was bought then that's the country it was designed to be used in and that's where it was manufactured.
Apple is very localized - if you call U.S. tech support, you'll speak to somone in your country.
So, what does all this mean?
In order to do a repair, you need to send it back to the country you got it from.
And we're all customers like you. We understand that you're upset, but Apple isn't gonna bend the rules to one individual.
Policy is policy. Get over it.

HT1338 The Mac App Store shows an update available for iMovie but when I click "update" it gives me this message, "The product distribution file could not be verified. It may be damaged or was not signed." What can I do to update this program?

The Mac App Store shows an update available for iMovie but when I click "update" it gives me this message, "The product distribution file could not be verified. It may be damaged or was not signed." What can I do to update this program?

http://www.apple.com/support/mac/app-store/contact.html?form=account

Use of Emigall for creation of masters in the production environment

Hi,
The EMIGALL objects are normally used for migrating legacy master data and/or cut-over data before production environment is up.
I am contemplating to use EMIGALL object for creation of contract account masters in production environment. One more option that I have is to use standard BAPI for creating contract account masters.
Can anyone tell me whether it is proper to use EMIGALL object for day to day creation of master day in production environment. Is there any disadvantage or risk involved in it.
Kindly reply soon.
Regards,
Ganesh

I've already used emigall multiple times to do delta migrations into an operational prod environment.
Purely looking at the functionalities, it should/would/must be possible to use emigall as a master data generator. I just think you need to look into the requirements:
who will use it? end-user/application manager/...
what's the amount of data to be loaded?
what's the time window of the load? Day/night
how is the data supplied?
As you know, emigall EATS system resources like mad, so using it during the day might not be preferable. emigall is also very picky about the file format, whereas in a custom report you can define the input structure yourself.
On the other hand, the error handling and follow-up of emigall is great...
Personally, I'd go for a custom report with a BAPI... It'll give you more flexibility than emigall.

Dynamic Memory in the production environment

Hi,
We configure all production VMs with static memory on Hyper-v 2012
we need to make sure there is no negative impact on VM performance if we use Dynamic memory , as we read for 2 years
not recommend to use dynamic memory in the production.
I preferred the answer with Trusted URL
Ramy

Hiya,
The best answer you can get is, that it is dependent on the application running on the server O/S.
The reason that dynamic memory is not recommended for production environments, is that many applications are not supporting it. That is usually seen on memory intensive applications(SQL is an example) or simply because of caching types of functions. (SharePoint
is an example).
The major concern here is when VM's are decreasing the memory for a VM, the application does not understand this. Usually it is not a problem when increasing the memory. - Again it will depend on the application.
Think of it as hot swap memory and how you used to use that in the physical machine days.
Also when there is not adequate memory, operating system will use paging. Paging uses disks and disks has a lower access time than memory.
In general dynamic memory is easier to control than dynamically expanding disks, as you can set the buffer size of the memory, which is still not available for the dynamic disks.
Besides the above, the following links states:
"Workloads that are not NUMA-aware will not take advantage of virtual NUMA. However, the guest operating system may perform some NUMA optimization. Enabling Dynamic Memory (therefore presenting only a single virtual NUMA) should not cause performance
degradation"
http://technet.microsoft.com/en-us/library/dn282282.aspx

Unable to import the Internet servivce into Production Environment

Hi,
We put the internet service and its HTML templates in a custom package for integrated ITSMobile. We got everything but the internet service ZXXX in the production. Has anyone come across this before? We were able to transport to the quality system. But it did not create the internet service in the production environment. Is it authorization issue? Your input will be highly appreciated.
Regards,
Subbu

Hi Subbu,
I suggest you to as your basis guys how are familiar with transports between systems. They will find out what the reason is. Without being able to look into transport protocols it is unlikeliy that someone here can advise you.
Regards,
Klaus

Cost estimate of the product

Hi,
Can anyone please let me know what is process for cost estimate for the product in SAP. Just give me a thought in simple terms.....
1. How system will estimate the costs?
2. In which cases we should settle the costs?
3. What is the process to settle the cost through internal orders/gl's etc.,?
4. What are the main requirements for this process?
Please give us your thoughts on the above mentioned queries...
Regards
Krishna

Cost estimate for a material is done by the system through product cost planning.
You have to define the following:
A cost component structure which splits the cost into different components as per your requirement
A valuation variant which decides the various factors such as material pricing, activity pricing, sub-contracting, external activity prices, etc.
A costing variant which controls the parameters for a costing run which helps to update the prices in the material master.
a production run is carried out for a production order, process order, product cost collector etc. Periodically these objects are settled to the material in question.

I just want to get into the desktop environment!

After recently installing Arch Linux0.7.2 , I am stuck at this "myhost login" screen. I type in root, but all it does is log me into root.
I've googled this issue as "my host login arch linux help" to no avail.
I've added users and passwds for users but am unable to get desktop access.
Is there a command I must know in order to access the desktop environment? Perhaps similar to 'startx' as it is in DamnSmallLinux.I cannot last much longer in this DOS environment where i seem only to be chasing my tail!!!

magistrate wrote:I come with peace to the arch forum.
And in peace we have greeted you. Arch linux is what you make of it. If you need to install a desktop environment than do it.
Most guys prefer only Window Managers. Window manager just manages windows so you just add software you need to have a functional environment. No programs you will never use, just the ones you need.
Most of us like this way.
Arch linux is all about choices...that's why there isn't a complete desktop environment provided by install disks. Not anybody need it. If you need it just install it.
Other guys have provided you the links to information you need. But, if you do not want to learn and get your hands dirty than you should probably choose Ubuntu.
Ubuntu install provides you a functional desktop environment. Most choices are made for you by Ubuntu developers and the desktop environment you obtain is ready and functional.
But chances are that still in Ubuntu linux, sometimes, you will have to read a wiki to make things work. So RTFM is a tip you could get also in Ubuntu forum.
And trust me, nobody cares if you choose Windows ME over Arch linux. It's your system, it's your choice.
If you have real problems that cannot be solved by searching on wiki than ask and plenty of Arch users will try to help you for free.
Last edited by ArchArael (2009-09-01 15:59:11)

Costing the production order for the configured material

We are trying to cost the production order for a configurable item. But the system is not calculating any cost in the production order. Sales order related to this configurable material is costed. What additional setting I need to cost the production order for the configured material ?

Hi Niki
If your SO is costed, thats enough from a System's perspective... Planned cost will be the sales order cost estimate because SO saves the Chars required for the Configurable material
Planned cost in Prod order depends on the Costing variant you have assigned in the order type... Check the error log if there is any error in cost calculation in prod order
br, Ajay M

Bunch of workflows just got stuck in the production... may be close to 300!

The stuck workflows doesnot have error statuses, it is just stuck. Does'nt come up in ST22 or whatever. I need these going... Should I restart them? Well these happened exactly at the same time when the production environment was very slow yesterday... Please let me know the best way to solve.. Appreciate your help in advance...
Thanks,
Sukumar.

Hi Sukumar,
Just execute SWPC tcode for the particular date range. If all the workflows are stcuk they will appear here. Before restarting check the workflow log (Step History) tab of the workflow log and diagnose each step why the workflows where. You can Continue workflow using the same tcode (SWPC) if they were really stuck.
Let me know if you have queries.
Regards,
Raj

Developing new version and support the production version

Hi,
I need to work on two diferent versions on my track one with the new features we are developing and the other that is working on the production environment, and I don´t know how to do it. two tracks? branch?
Any idea how to do it?
Thanks and regards,
Eduardo

Hi Eduardo,
please take a look at this blog by Marion Schlotte.
Best Practices for NWDI: Track design for ongoing development:
/people/marion.schlotte/blog/2006/03/30/best-practices-for-nwdi-track-design-for-ongoing-development
I bet, this will help you on choosing the right option for your project.
Hope this helps
Jan

When i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

when i open itunes, it gives me a message "the folder itunes is on a locked disk or you do not have write permissions for this folder" i am the only user and it was working a week ago whats wrong with it? it will not open itunes

Hi lvdmerwe!
I have two articles here for you that should be able to help you troubleshoot this issue further:
Trouble adding music to iTunes library or importing audio CD
http://support.apple.com/kb/ts1387
iTunes: Missing folder or incorrect permissions may prevent authorization
http://support.apple.com/kb/ts1277
Take care, and thanks for visiting the Apple Support Communities.
-Braden

Application Monitor in the Portal - what authorization to use

We would like our super users to use the application monitor transaction, directly from the portal, to be able to keep track of purchase orders etc that are not transfered to backend. The CCMS and RZ20 transactions are mainly for the administrators and included in the administrator roles, like SAP_EC_BBP_ADMINISTRATOR.
What authorization object is needed to give the application monitoring possibility for the super users in the portal, without giving them "too much" authorizaton?
Does anyone know?

Hi,
The bbpwebmonitor transaction includes the following authorization objects :
B_BUPA_RLT
BBP_BUDGET
BBP_CTR_2
BBP_FUNCT
M_BBP_ADM
M_BBP_PC
PLOG
S_ADMI_FCD
S_BTCH_ADM
S_BTCH_JOB
S_DEVELOP
S_DOKU_AUT
S_OC_DOC
S_OC_ROLE
S_OC_SEND
S_RFC
S_SPO_DEV
S_TABU_DIS
S_TCODE
S_TRANSLAT
S_USER_GRP
S_XMI_PROD
For any transaction, just goto transaction SU24 et fill in with your transaction code.
Kind regards,
Yann

On my app store I what to update an app but the e-mail is my husband it in a light color making it so I can't change it to my e-mail address. It ask for a password can't give one because of the e-mail how do I change this I'm lock out?

On my app store I what to update an app but the e-mail is my husband it in a light color making it so I can't change it to my e-mail address. It ask for a password can't give one because of the e-mail how do I change this I'm lock out?

This is your husband's app, only your husband can update it. Apps are forever tied to the Apple ID that purchased them. No other Apple ID can update someone else's app.

Mac OSX, 10.7.5, LR 5.6 After creating a new folder in the Destination section and importing images, the new folder name appears as 2010, no matter what name I give it. Why is it doing this?

Mac OSX, 10.7.5, LR 5.6 After creating a new folder in the Destination section and importing images, the new folder name appears as 2010, no matter what name I give it. Why is it doing this?

I am experiencing Mavericks failing to copy subdirectories from usb sticks, I am backing up game saves from a console. Both sticks I use are fine, same permissions of course since the console wrote the files. Sometimes it copies, sometimes it doesn't. It seems to be related to the mounting process.
Thank God Apple hasn't (yet) broken bash.

What authorizations to give to developers in the production environment

Similar Messages

Maybe you are looking for