Skip to Content
avatar image
Former Member

Reg: Generating Roles

Hi

Is it acceptable as a general process, to generate the roles in the production environment, if they are transported without being generated ? Or it the only option left is re-transporting the generated roles..?

Note: The roles have already been tested in a different system of the same landscape (say some intermidiate fix systems) successfully.

Regards,

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • avatar image
    Former Member
    Jul 28, 2009 at 02:49 AM

    Hello Arravind,

    It is always advisable for transporting the roles only after generating them in the development servers. Because there are chances of getting another profile name when you generate it automatically in the production server.

    Let me know if you need more details.

    Regards,

    Bhargav

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 28, 2009 at 03:25 AM

    Hi Arvind,

    Never generate profiles in Production systems .Generaly procedure ,Profiles are generated in Development systems

    then Roles are transported to Quality and then after testing Roles are transported to Production systems .

    Note: If roles are tested in a different system of the same landscape (Say Validation & quality systems) successfully ,

    then we can transport to production system.

    Regards

    Vikas rana

    Add comment
    10|10000 characters needed characters exceeded

  • Jul 28, 2009 at 08:02 AM

    Hi Arravind

    As the others have mentioned, It's not usually a good idea to generate in production, though in many cases it won't do any harm if done properly and you aren't re-creating the profile. It wasn't that long ago that roles needed to be regenerated after each transport.

    Where you could get problems is that it will appear in your role change logs and these could get out of sync etc. If you go into a role in merge new auth mode then you could potentially pull in new auths (if SU24 isn't consistent across systems).

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 28, 2009 at 03:24 PM

    You should not do generation of profiles for the roles in PRoduction system.

    If the roles are transported without generation also ignore that.. please generate the roles again in the quality system and capture the roles in the transport request.

    then transport the request from the quality system to production system.

    Yes. only option is to re-transport it from the quality system. you can do the profile generation in production. but it is not recommendable one in production system.

    Hope this would give you clear pic.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      > You should not do generation of profiles for the roles in PRoduction system.

      It is possible and there are some special cases where it even makes sense.

      Actually if your config is insync as it should be and you are carefull with it, then there is nothing against generating the profiles in the target systems.

      It is only unusual, not forbidden.

      Cheers,

      Julius

  • avatar image
    Former Member
    Jul 30, 2009 at 11:54 AM

    Hi All,

    Thanks for making it clear. Would try to re-transport the roles after generation.

    Regards

    Add comment
    10|10000 characters needed characters exceeded