topic Re: Reg: Generating Roles in Application Development and Automation Discussions

Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 01:55:30 GMT

Is it acceptable as a general process, to generate the roles in the production environment, if they are transported without being generated ? Or it the only option left is re-transporting the generated roles..?

Note: The roles have already been tested in a different system of the same landscape (say some intermidiate fix systems) successfully.

Regards,

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 02:49:09 GMT

Hello Arravind,

It is always advisable for transporting the roles only after generating them in the development servers. Because there are chances of getting another profile name when you generate it automatically in the production server.

Let me know if you need more details.

Regards,

Bhargav

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 03:25:33 GMT

Hi Arvind,

Never generate profiles in Production systems .Generaly procedure ,Profiles are generated in Development systems

then Roles are transported to Quality and then after testing Roles are transported to Production systems .

Note: If roles are tested in a different system of the same landscape (Say Validation & quality systems) successfully ,

then we can transport to production system.

Regards

Vikas rana

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 04:36:29 GMT

This message was moderated.

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 08:02:41 GMT

Hi Arravind

As the others have mentioned, It's not usually a good idea to generate in production, though in many cases it won't do any harm if done properly and you aren't re-creating the profile. It wasn't that long ago that roles needed to be regenerated after each transport.

Where you could get problems is that it will appear in your role change logs and these could get out of sync etc. If you go into a role in merge new auth mode then you could potentially pull in new auths (if SU24 isn't consistent across systems).

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 15:24:59 GMT

You should not do generation of profiles for the roles in PRoduction system.

If the roles are transported without generation also ignore that.. please generate the roles again in the quality system and capture the roles in the transport request.

then transport the request from the quality system to production system.

Yes. only option is to re-transport it from the quality system. you can do the profile generation in production. but it is not recommendable one in production system.

Hope this would give you clear pic.

Re: Reg: Generating Roles

Former Member — Tue, 28 Jul 2009 16:21:01 GMT

> You should not do generation of profiles for the roles in PRoduction system.

It is possible and there are some special cases where it even makes sense.

Actually if your config is insync as it should be and you are carefull with it, then there is nothing against generating the profiles in the target systems.

It is only unusual, not forbidden.

Cheers,

Julius

Re: Reg: Generating Roles

Former Member — Thu, 30 Jul 2009 11:54:40 GMT

Hi All,

Thanks for making it clear. Would try to re-transport the roles after generation.

Regards