How to find any ungernated role having only Old auths in Step 2C of SU25

[former_member275658]

Hi All,

We are in a process of updating roles in Step 2C of SU25 upgrade. When we executed step 2C, it provided us a list of all the affected roles. But out of these roles many roles are having OLD auths only. (Nothing is there in yellow or red)

I mean Maint.: 0 Unmaint. org. levels 0 open fields, Status: Unchanged.

So to reduce the manual work of just generating each role. We want to use a CATT script which will mass generate all these roles.

Questions:

1. how to get a list of roles in which nothing is changed due to upgrade in step 2c.in order to use catt and just generate them ?

2. Are there any AGR tables for this to see the roles with Maint.: 0 Unmaint. org. levels 0 open fields, Status: Unchanged. ?

Regard's

[Former Member]

Check out AGR_1251

Why dont you use SUPC for all the roles excluding the SAP delivered ones before you do this step.

or if you have already upgraded then run SUPC on the system where the role resides now

Try out AGR* string one among those tables AGR_F* or so should help you

Check out this link

"

Edited by: Franklin Jayasim on Jul 20, 2010 8:00 PM

[former_member275658]

I tried with AGR_1251 before but cannot find roles which are not affected at the object level.

Our plan, is to reduce work by manually picking each role and generating it(We have to do this activity in many systems). I think, SUPC will generate all the roles irrespective of affected and not affected at object level.

How to find a list with not affected at the object level from Step 2C ?

[Former Member]

Hi Salman,

please go through this link , some of the Admins have shared experiences regarding the same.

"

I thought may be run SUPC in the system make sure you have all the generated profiles , why dont you transport them

and use SUPC in the destination system

[Former Member]

Salman,

1. how to get a list of roles in which nothing is changed due to upgrade in step 2c.in order to use catt and just generate them ?

As roles are not generated,you will not get upto date information thru AGR_1251

2. Are there any AGR tables for this to see the roles with Maint.: 0 Unmaint. org. levels 0 open fields, Status: Unchanged. ?

Use AGR_1251 / AGR_1252 if roles are generated.

In su25, 2c itself you should know the impacted roles(red color)

What about 2b step any new tcodes?

You need analyse why Su25 2c is not showing up the impacted roles

What about Su24 values in new version?

or

Pull out all the tcodes from the system using TSTC

upload them USOBT_C

Compare it with old sytem values. (old Vs ECc)

or

try SUPC(it gives you listt of ungenerated roles)

choose non current profiles

Thanks,

Sri

Edited by: sri on Jul 20, 2010 9:23 PM

[Former Member]

HI Salman,

1. From which version to which version you have upgraded to.

Because definetely there would be some changes in the roles from earlier version to new version.

Also, check if SU25 2(a) step is executed, unless it is executed the changes in new version will not be added the roles.

What abt su25 2(b) step , are there any tcodes affected in this step.

thanks,

Sanketh.