Export specific user master data

[Former Member]

We currently do a full database restore for users (SCC8 & export SAP_USER) when refreshing our QAS data with Production Data.  Each time they refresh, all users and their profiles in PRD overwrite our users and profiles in QAS.

The issue were having at the moment is that it overwrites all our test users & roles still in testing phase .

I would like to know if there is a way to extract only certain user master records and authorization profiles , instead of overwriting it all .

The idea is to restore only those identified users master records and authorization after the refresh id done .

(We currently download all the roles still in testing phase & upload it again after the refresh into the QAS environment as well as recreating the test users after the refresh. But sometime we forget to backup certain roles & neglect to recreate certain test users , which is a bit a pain)

Any feedback would be greatly appreciated)

Regards,
AJ

[bxiv]

Have you taken a look at SAP's IdM product?  It should allow you to filter the roles/profiles you are in the middle of testing as often as you would like and you could choose when to reapply them to the system.

[ACE-SAP]

Hello

Client import, is an implicit client deletion, no way to make it selective or incremental outside of what is defined in profiles.

But there might be a way to customize this... I'm using Oracle scripts to export / import users & roles when doing my refresh, because this action easily fits in a more global script, and this kind of import does not delete existing data.

Roles might not be an issue as far as you can save & import them using CTS orders.

Before the copy delete through SU10 all the users you do not want to keep, export all users that are left at DB level.

After the client copy process import back at DB level what's has been exported. With DB import no deletion takes place, thus you will only add (or overwrite depending on selected option) the exported users.

This import / export could also be done using R3trans script.

I can provide you with the Oracle datapump command if you're interested, I've just created it based on the list of tables that are copied by client copy when using SAP_USER profile.

Regards

[Former Member]

@ Billy , we don’t currently have identity manager installed , but it’s being discussed at the moment , so hopefully we get the green light to have the product implemented soon .

@ Yves , to be honest I’m not too familiar with running Oracle scripts (as I don’t really get involved at database level) , but I’m sure I can run it past our basis guys so that they may have a look at it for me (so if you don’t mind , please send the script me : <email_address_removed_by_moderator>

I also had the following idea , but not sure how possible it is  : Emulate what SCC8 does when doing the export of the profile SAP_USER , but instead of extracting all the users in the system , I want to write a program where I can input which user IDs I would like to extract & then post refresh only run back in those profiles that was backed up pre-refresh if that makes sense . (so essentially this also then creates the transport as per usually via SCC8 but only for certain users & then run that transport back in afterwards so that only those user are restored)

(although I have a feeling there is no getting away from go down to database level for this one)

Please let me know your thoughts

Regards,
AJ

Message was edited by: Julius von dem Bussche

[Former Member]

This may help you.Use the program SCTC_LIST_TABLES --> execute --> select refresh --> select component as users, this will give you the list of table for the user master. You need to just export these table before you perform the system copy on the target system and after system copy just import these table again. This will work for other components as well ie RFC tables, certificates etc... easier way to perform post-system copies activities.

[Former Member]

Hi Sunil ,

Thank you very much for this info , i had a quick look at it & it looks like something i can use in this regard . (do you make use of this as well ? If so , how do you go about it ? i.e which tables from that list do you actually use to export ? the one that stand out most for me is UST04 , since i would only like to restore certain identied users access after the refresh)

Regsrds,
AJ

[Former Member]

I found this recently from note 1619720 - System Rename for SAP Systems based on SAP NetWeaver. We did test on few components (ie strust, license, RFC etc) and it works perfectly. We exported the license from the sandbox system then deleted and after importing the table all looks same as it was before.