There are two different processes for transporting authorization components, roles and user master records, depending on the type of transport:
- Transports between clients (within an SAP System)
- Transports between R/3 Systems
Transport Between Clients
User master records and authorization components are client-dependent. You need to maintain separate user master records and authorization components for each client in your R/3 System.
In the target client, choose Tools ®
Administration ® System administration, Administration ® Client admin. ® Client copy ® Local copy (Transaction SCCL). Here you can transport user master records and authorization profiles from other clients. To do this, enter the profile SAP_USER or choose from the possible entries.Schedule the transport for background processing during the night. This ensures that data remains consistent.
Transport Between SAP Systems
Transport Roles
You use Transaction PFCG to transport an role. Enter the role and choose Transport. The system displays a dialog box that queries whether the user assignment and the personalization data should also be transported. Next, enter a transport request. The role is entered in a Customizing request. Use Transaction SE10 to display this.
The authorization profiles are transported along with the roles. Unlike in previous releases, the profiles no longer have to be regenerated in the target system using Transaction SUPC. However, you must compare the user master records for all roles that are imported into the target system.
If the user assignments are also transported, they will replace the entire user assignment of roles in the target system. If you want to lock a system against importing user assignments of roles, you can specify this in the Customizing table PRGN_CUST. You maintain this using Transaction SM30. Add the line USER_REL_IMPORT and the value NO.
You should only transport user assignments to roles if you are not using central user administration.
After the import into the target system, you must compare the user master records for all roles involved. You can do this in two ways:
- Start report PFCG_TIME_DEPENDENCY
- In Transaction PFCG, choose Goto ® Mass compare. Enter the role in the Role field. Choose Complete compare and start the report.
Transport Manually-Created Profile
To transport selected profiles, proceed as follows:
- Choose Tools
The system also transports the documentation for the profiles and authorizations.
Transport Manually-Created Authorizations
Transporting Authorization Objects and Authorization Object Classes
Transporting User Master Records
Transporting Check Indicators and Field Values
You can use Transaction SU25 (Step 3) to transport all check indicators and field values.
Note that the transport overwrites all existing check indicators and field values in the target system.
Transporting Templates
All SAP templates are automatically identical in all systems following an upgrade. You cannot change SAP templates.
The Workbench Organizer records changes to your own templates. Transport the request. The objects in the transport request have the following syntax:
R3TR SUSV <Template Name>
No comments:
Post a Comment