Role comparison between clients

[Former Member]

Hi All,

We are in the process of upgrading SAP from 4.7 to ECC 6.0. Until go-live we need to do dual maintenance for security changes. Is there a way to compare roles/authorization objects between clients? I tried using SCMP for AGR_1251 but does not seem to work. Any suggestions will be very helpful

Thanks

Vijaya

[Former Member]

Hi All,

We are in the process of upgrading SAP from 4.7 to ECC 6.0. Until go-live we need to do dual maintenance for security changes. Is there a way to compare roles/authorization objects between clients? I tried using SCMP for AGR_1251 but does not seem to work. Any suggestions will be very helpful

Thanks

Vijaya

[Former Member]

Hi,

SUIM->Comparisons from roles->Across systems.

Other soultion would be manual comparisons

Tables AGR_1251, AGR_1252, AGR_AGRS, AGR_TCODE,.., etc will help you.

Rakesh

[ps0907]

You may want to check in transaction SUIM under the Comparisons section, there is an option for comparing Roles. Within this report, there is an option to compare across systems, which would used RFC's that you could prepare in SM59 pointing to the system/clients that you want to compare.

[Former Member]

Is it possible to do a the comparison for multiple roles via SUIM / PFCG? I do not seem to get any results if I enter Z* for example

Thanks

Vijaya

[Former Member]

>

> Is it possible to do a the comparison for multiple roles via SUIM / PFCG? I do not seem to get any results if I enter Z* for example
> 
> Thanks
> Vijaya

How would you imagine that to work? Which role from A compared to which role from B?

I don't know of a standard report to do that. I think your best option is to build (single) roles at a higher level and compare less roles.

Cheers,

Julius

[Former Member]

Agreed. But SCMP for AGR_1251 does not seem to work either. Any suggestions to check the authorization object values in roles across systems?

Thanks

Vijaya

[Former Member]

Hi,

Try tcode SM31->Table->utilities->comparison.

If you are comparing the tables from a unicode system to a non unicode system then look through notes #611125 and #788327.

Also check tcode SCU0 and try to compare the tables by manual selection.

Rakesh

[Former Member]

Hi:

I used the cross client role comparison function in SUIM for a 4.7 to ECC 6.0 upgrade and it worked fine. The only issue I have is that they changed the format of the report in ECC 6.0 and I really don't care of it because it is difficult to do side by side comparisons with the ECC 6.0 version. Each auth was listed with a "twistie" in a hierarchical structure as opposed to side by side in 4.7. I found the new format to be pretty useless.

I did my comparisons from 4.7 to ECC 6.0 as opposed to ECC 6.0 to 4.7 and it worked fine.

Matt

[Former Member]

Did you do a comparison of multiple roles? Also, is it possible to capture differences in object/filed values via the role comparison tool?

Thanks

Vijaya

[Former Member]

Yes, we compared each parent role. That was at the request of my client. We documented each before and after change. The report shows role, object, field, value and auth name, but as I previously said, I found it much easier to do the comparison from 4.7 to ECC 6.0 as opposed to doing if from ECC 6.0 to 4.7.