User export / import with a CUA system

[Former Member]

Hi

I was wondering if it were possible to re-import users and their authorisation roles after a system refresh.

I ran SCC8 and did a SAP_USER export from our QA system. The system was then refreshed using the system copy/restore method, SID changed etc. Unfortunately because the source system (PRD) was also the CUA system, the refreshed system 'thought' it was the CUA system and the only way I could get CUA happy again was to delete the CUA entries in BD64 in both QA and PRD and re-add QA as a child system using SCUA.

The problem is that all the QA user - authorisation mappings in the CUA system have been lost.

Could I re-import the user export? Or would this only work for non-CUA systems? I tried importing the transport into QA and got a multitude of errors...!

Many thanks

Ross

[Former Member]

Thanks Ruchit, but the project team had a list of user to authorisation mappings for some of the users and set these back up in CUA, so we didn't want to 'upset' any other users.

We created an empty client and tried the import in here. We discovered that the user export didn't contain the desired information.

I've been sent some info by one Authorisations guy and combined this with some other info and apparently the below method is the way to export and import this CUA user info:

Replace client=ALL with your client number or leave for everything and create a file called User_export with following contents:

export

file = 'EXPUSR.dat'

client = ALL

1. CUA USERS #######################################

select * from USBAPILINK

select * from USZBVLNDRC

select * from USZBVLNDSC

select * from USZBVPROT

select * from USZBVPROTC

select * from USZBVSYS

select * from USZBVSYSC

select * from USL04

select * from USLA04

select * from USRFLD

select * from USRFLDDEF

select * from USRFLDGRP

select * from USRFLDSEL

select * from USRFLDT

select * from USRFLDVAL

select * from USRSYSACT

select * from USRSYSACTT

select * from USRSYSPRF

select * from USRSYSPRFT

1. AUTHORIZATIONS #######################################

select * from ADCPS

select * from ADR10S

select * from ADR11S

select * from ADR12S

select * from ADR13S

select * from ADR2S

select * from ADR3S

select * from ADR4S

select * from ADR5S

select * from ADR6S

select * from ADR7S

select * from ADR8S

select * from ADR9S

select * from ADRCOMCS

select * from ADRCS

select * from ADRCTS

select * from ADRGPS

select * from ADRGS

select * from ADRPS

select * from ADRTS

select * from ADRVPS

select * from ADRVS

select * from AGR_1016

select * from AGR_1016B

select * from AGR_1250

select * from AGR_1251

select * from AGR_1252

select * from AGR_1253

select * from AGR_AGRS

select * from AGR_ATTS

select * from AGR_BUFFI

select * from AGR_CUSTOM

select * from AGR_DATEU

select * from AGR_DEFINE

select * from AGR_FLAGS

select * from AGR_FLAGSB

select * from AGR_HIER

select * from AGR_HIERT

select * from AGR_MINI

select * from AGR_MINIT

select * from AGR_NUMBER

select * from AGR_PROF

select * from AGR_SELECT

select * from AGR_TCDTXT

select * from AGR_TCODES

select * from AGR_TEXTS

select * from AGR_TIME

select * from AGR_TIMEB

select * from AGR_TIMEC

select * from AGR_TIMED

select * from AGR_USERS

select * from SMENUSENEW

select * from SMEN_BUFFC

select * from SMEN_BUFFI

select * from SMEN_DATEU

select * from SSM_STAT_H

select * from SSM_STAT_P

select * from TVARUVN

select * from USCOMPANY

select * from USCOMPANYS

select * from USERS_SSM

select * from USERS_TMP

select * from USGRP

select * from USGRPT

select * from USGRP_USER

select * from USR01

select * from USR02

select * from USR04

select * from USR05

select * from USR06

select * from USR08

select * from USR10

select * from USR11

select * from USR12

select * from USR13

select * from USR14

select * from USR21S

select * from USR22

select * from USRACL

select * from USREXTID

select * from USREXTIDH

select * from UST04

select * from UST10C

select * from UST10S

select * from UST12

Execute the following command to export the data:

R3trans -w <log_file> RFC_export

Save the export file EXPUSR.dat somewhere safe and use to reimport back later (if CUA data lost by having to delete a CUA child in order to add it back, for example, after a refresh):

Create a import file called User_import with following contents:

import

file = 'EXPUSR.dat'

Where EXPUSR.dat is the export file created before the refresh.

Execute following command to import:

R3trans -w <log_file> User_import

Check the log file to make sure all okay and then check CUA.

Anyone ever done this / can try it / prove it works?

Very wary of doing this as our CUA system is our Live SAP system - wouldn't want to mess up our 3000 odd users!!!

Cheers

Ross

[Former Member]

Hi Ross,

Try doing the child import into the child system after disconnectiong it from the CUA. After that re connect it to CUA and then do SCUG in parent system of CUA.

Hope it works.

Regards.

Ruchit.

[Former Member]

The previous errors for the client/user import were red herrings - tried again and okay now. Can see loads of entries loaded into USR10, USR11, ADR7S, AGR_TCODES etc etc - can see the roles have been imported in PFCG - but there are no users in the system! Nothing showing in SU01... no entries in US01 or US02...??

Even if this had worked I thinked I'd still be stuffed as the user export only seems to contain user information, and authorisation roles, but NOT mappings of users to roles (AGR_USERS)...

But any ideas or suggestions appreciated!