How to migrate authorization(role) to external sap system.

[sjitsukata]

Hi, I'm Satsuki,

My project want to migrate only authorization(role) to external SAP with using tool if we have standard tool. I think it is not possible or take huge time to set authorization(role) in external system manually(PFCG) because our system has Z role over 300.

Question1: Do we have tool to migrate authorization to external SAP?

Question2:If we do not have good tool, anybody has nice idea to set authorization(role) ?

[S_Sriram · Accepted solution]

Hi Satsuki.

Question1: Do we have tool to migrate authorization to external SAP?

Yes, it is possible, one think your source and target system version should be same. you can do either download /upload or create the change request in the source system, copy the co & data file in the target system import using the transaction STMS.

Regards

SS

[sjitsukata · Accepted solution]

Hi Sriram.

Thank you very much for your help. I think transport is good idea. I will try that role includes in one TR and import to external system. And I will check external system version and sauce system version is same.

[former_member581314]

Hi Satsuki,

You have three options:

1. Create a trasnport and add required roles in it. Copy Cofiles and Data files to external system and import given that both systems are on same version.

2. Create a Client Export from Source system with profile SAP_USER. Import it in Target System.

3. Export Roles from PFCG in Source System and Import in Target System.

Thanks,

Ravinder

[sjitsukata]

Hi Ravinder,

Thank you very much for your answer.

I have question about No2 and 3.

2. If I choose No2 option, I think that role has to be create in target system. Although SAP_USER has user information includes role but the role does not become "active" because role does not exist in target system.

3. If I choose No3 option, I want to ask you,

3-1, How to export from PFCG (From Utilities tab?)?

3-2, Do the systems have to be same version?

It is too hard to be same version the systems. I am becoming change my mind to that I have to create role manually in target system.　How do you think?

[kashyap_shah3]

Hi Satsuki,

You should be able to capture all Roles in a transport request, copy over transport files to external system and deploy the transport there.

In general, recommendation is to transport between systems with same release/patch-level but it's not unusual to do it otherwise as well. Depending on the variation you may have to fix some things.

Let me know if that helps.

Best Regards,
Kashyap Shah

[sjitsukata]

Thank you very much Kashyap,

I'll check sauce system and target system are same release and patch-level. And I will import to role TR with STMS.

[venkateswaran_k]

Can you please refer to this

http://www.saptechnical.com/Tutorials/Basis/Roles/Export.htm

Regards,

Venkat

[sjitsukata]

Hi Venkat,

Thank you very much for URL. I got how to create excel file with authorization matrix.

[venkateswaran_k]

Please check with Basis Team.

There is an export / import facility of authorization matrix.

Venkat

[sjitsukata]

Thank you very much for your answer.

Can we export and import authorization matrix to external system?

As per my knowledge, authorization matrix can generate a report and get the out put to some excel file. Do I import the file to external system? Or export something table and import?

Satsuki