topic Re: Role difference in DEV and QAS? in Application Development and Automation Discussions

Role difference in DEV and QAS?

Former Member — Thu, 11 Dec 2008 06:37:45 GMT

I made some changes to role in DEV and moved to QAS.

Whatever changes I made in DEV, are reflecting in QAS, But SUIM comaprision of roles, it's showing 3 objects are existing in DEV, but not there in QAS.

I opened the role in DEV, tried to find these objects.

Actually these 3 objects not at all existing in DEV also.

Then why in SUIM comaprison it's showing these 3 objects existing in DEV, not QAS.

Cheers

Sreenivasu Balaka

Re: Role difference in DEV and QAS?

Bernhard_SAP — Thu, 11 Dec 2008 06:54:15 GMT

Hi Sreenivasu,

maybe the cause is the same as you have mentioned in ....

Try first to generate both profiles in DEV and QAS. run the compare then again....

Still some differences?

b.rgds, Bernhard

Re: Role difference in DEV and QAS?

Former Member — Thu, 11 Dec 2008 07:23:13 GMT

Are you comparing composite roles?

It could be possible that you made changes in a single role and transported only this role and are comparing the composite roles.

In that case the objects in another role in the composite might be affecting the comparison.

Re: Role difference in DEV and QAS?

Former Member — Thu, 11 Dec 2008 07:44:43 GMT

Its single role only. Role is generated both in DEV and QAS.

The things is what ever 3 objects its showing in DEV role in SUIM, not existing in that DEV role.

But why showing objects existing in SUIM comparision?

Is there any thing like inactive, but showing in comparision

Re: Role difference in DEV and QAS?

Bernhard_SAP — Thu, 11 Dec 2008 08:03:45 GMT

Hi,

maybe. That is why I asked that you regenerate both profiles (nevertheless the status of the profile shows 'generated' in PFCG). So did you regenerate that 2 profiles already or not?

b.rgds,

Bernhard

Re: Role difference in DEV and QAS?

Former Member — Thu, 11 Dec 2008 08:34:09 GMT

If you have transported the role then even the inactive objects would get transported alongwith it.

As, Bernard suggested you should regenerate the profile and then check again.

Re: Role difference in DEV and QAS?

Private_Member_119218 — Thu, 11 Dec 2008 15:45:20 GMT

Like already pointed out in this thread - (re)generate profiles in QAS using transaction SUPC and compare afterwards.

(Unless the source system is configured otherwise or You explicitly unchecked this option when transporting roles, they are transported with generated profiles from the source system. Transporting without profiles is the preferred method - to the best of my understanding.)

Re: Role difference in DEV and QAS?

Private_Member_119218 — Thu, 11 Dec 2008 15:49:34 GMT

If you have transported the role then even the inactive objects would get transported alongwith it.

True. But when you compare roles, what you are actually comparing are the current profiles generated from the auth. data contained within the role. And inactive objects are in no way included in the generated profile and thus have no effect on the results of the comparison.

Edited by: Martinsh Shaiters on Dec 12, 2008 8:55 AM

Re: Role difference in DEV and QAS?

Former Member — Thu, 11 Dec 2008 16:17:12 GMT

Sreenivasu,

Open the role in DEV and open the authorization objects.

Here go to Utilities -> Reorganize ( all the authorization objects)

I hope this would solve your problem.

Thanks,

Saga