Skip to Content

Regenerate PFCG profiles after support package upgrade

Hi,

After an upgrade SAPKB73108 in our SAP development system, we have roles SAP_BC_WEBSERVICE_ADMIN* with the status "Current version not generated" (status for the generated authorization profile), and we can see that the profile has different authorizations than the ones defined for the role, for instance S_SRT_CF_C has ACTVT=03 for the role, but * for the profile. I'm not sure, but I guess these roles were previously correct i.e. the profiles were coherent, at least sometime in the past.

I think that we have to run the mass generation for "roles with profiles not current" (transaction SUPC) after an upgrade, but I can't find any documentation which confirms that. Could you confirm that and provide some reference documentations?

Thanks a lot!

Sandra

PS: I couldn't find answers in the forum for words SPAM, post upgrade activities, profile generation, role, etc. Closest topics:

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Jun 11, 2015 at 02:57 PM

    You should not use SAP standard roles (with the exception of a few J2EE UME roles for UME groups, which do not need generated profiles). SAP will overwrite the authorization data with upgrades (as they have done here).

    You should copy the role if you want to use it as a template.

    Cheers,

    Julius

    Add comment
    10|10000 characters needed characters exceeded

    • SAP might deliver the profile names with the PFCG role data (AGR_PROFS), but they are not generated. You are just looking at the surface and that is all that SAP sends you.

      Okay, I understand now 😊 Thanks!