Derived roles deactivated when transporting from Dev to other system

[Former Member]

My company uses the CUA and derived roles in ECC6.

We got a situation where the derived roles are sometimes deactivated when we moved from Dev to Int or sometimes to Quality.

We can't pinpoint the exact cause as it is not consistent. The only way for us to resolve it is to save the roles into a new transport and move it to the next system.

I have seen 1 posting where some folks have mentioned no solution available and it is the way derived roles are.

But somehow I wonder if SAP has a solution for it? I have tried searching in SAP Notes but can't find anything close to it.

Has anyone ever faced such an issue when using transporting derived roles and how do you resolve it? If not, is there any sequence of actions that you took such that the derived roles will always be what they should be in the next system from the source system?

[Former Member]

Hi,

Can you check the note number 1263259 which will be helpful for you.

Kindly appreciate if it is useful.

[Former Member]

****We got a situation where the derived roles are sometimes deactivated when we moved from Dev to Int or sometimes to Quality.***

Can you please be more specific and let us know as to what do mean by Deactivated?

Regards,

Ritesh

[Former Member]

Deactivated means that in the PFCG, when we click the 'Authorization' tab, it is 'yellow'.

we actually have to enter the 'Authorization' tab and generate the roles again.

[paula_w_arnold]

Check your transport logs to see if there are any errors.  Sometimes this will happen if there are auth objects that exist in the role but not the environment that that the role is transported to.  When that happens the role will transport but not generate. 

[Former Member]

Hi Paula,

Thanks for the tip. We are in the middle of ECC6 upgrade and will be transporting the roles from Dev to Integration. There are several new authorization in several of the roles. I will take note and see if this is true. If there is anyone who wants to me to update you if Paula's observation, please send your email to my company email yyim@amgen.com and will let everyone knows if this is the case.

[Former Member]

Hi Paula,

Thanks for the tip. We are in the middle of ECC6 upgrade and will be transporting the roles from Dev to Integration. There are several new authorization in several of the roles. I will take note and see if this is true. If there is anyone who wants to me to update you if Paula's observation, please send your email to my company email yyim@amgen.com and will let everyone knows if this is the case.

[Former Member]

Also check whether while transporting the role you are selecting the check box as "transport generated profile".

[Former Member]

Hi Ritesh,

Whenever we transport, we make sure that checkbox is checked.

[Former Member]

I have not encountered the issue at this stage for ECC6.

Thanks everyone for the previous answer.

[Former Member]

Check if you have a conflit with the profile names of the roles between the two systems.