Skip to Content
avatar image
Former Member

Moving roles with user assignment

Hi There,

Need your help...

We have roles and users created in QA for training, now we want to move roles from QA to Production with user assignment.

Users that are created in QA for training have also been created in Production, is it possible to move the roles from QA to Production with the user assignment.

Thanks and Regards,

Azher.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Dec 31, 2010 at 12:40 AM

    Hi,

    When you create the transport from PFCG, there is a "Choose objects" pop-up. There is a check box for "User assignment" and "Personalization". There you can choose the user assigment checkbox to include user assigment in the transport which will move into the target system.

    Prior to that check the Customizing table PRGN_CUST if any entry has been set as USER_REL_IMPORT with value NO, if it does then you need to remove that using transaction SM30 for transporting user assignment along with roles.

    But make sure all users assigned to a role in your QA are present in Production also, any additional user in production having this role would lose the assigment once your transport moves in.

    Thanks

    Sandipan

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Dec 31, 2010 at 08:03 AM

    Hi Sandipan,

    Table PRGN_CUST does'nt contain any entries, its an empy table in QA.

    When I am creating a customizing TR for roles the TR is geting created in Local change request which cannot be moved to Production. I even tried manually copying the cofiles and datafile, but that didn't work.

    Thanks and Regards,

    Azher.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      We uploaded and downloaded the roles from QA to Production and user assignment was done manually in Production system.

      You have to be carefull of this.... because of profile name collisions. Also if you have not always transported SU24 changes all the way through or someone maintained SU24 or Su22 in QAS or PROD (as they sometimes do when they have too much access and too little training...) then you can very easily create inconsistencies.

      It is quite likely that when you transport the roles again, some suprises will happen...

      You should avoid this - which is also why some companies restrict this access (upload in PROD) and have the basis folks control the transport system as a last resort.

      If you now do a remote comparison between your DEV and PROD system for this role (see transaction SUIM --> comparisons --> roles) then you will see what might happen.

      ps: Using "edit old status" is the ultimate "low-brainer"...

      Cheers,

      Julius

  • avatar image
    Former Member
    Dec 31, 2010 at 09:02 AM

    Hi Azher,

    How you are creating the transport request. Are you using the Mass Transport option. Your reply seems that you are following an alternative method, in which it is not possible to include user assignments for roles.

    BTW, it is not a good practice though.

    Regards,

    Raghu

    Add comment
    10|10000 characters needed characters exceeded