ERM5.3 - Role generation in SAP QA & SAP Prod

[Former Member]

Good day Chaps.

My client requested wants to generate a role 1st in a QA system, test

the role and then generate the same role in production.

The challenge is that on ERM > Config Tab > System Landscape >

Landscape Name > Associate Actions. There is only one default Role

Generation connector.

What is best practise to allow a Role to be generated in a QA system

and the a Production system?

Thank you.

Michael Hannie

[Former Member · Accepted solution]

Michael,

SAP does not recommend to generate role directly in prod system. The way my clients do is simple. They generate a role in Dev/QA. Test the role and then transport it into Prod. If you still want to generate the role QA and Prod together than you need to configure one setting in ERM.

Second option in Miscellaneous tab is Allow role generation with violations. Change this to Yes and you can generate role in default system and other systems also in the landscape.

You won't be able to generate role in QA and prod one by one unless you change the default system every time role is generated in QA.

Regards,

Alpesh

[Former Member · Accepted solution]

Good day Alpesh.

Thanks for the good and quick reply. I will inform my project manager of our options. Below is the reply from SAP AG for the same issue that I logged, for anybody that might come across the same issue -

[https://service.sap.com/sap/support/message/E/012002523100001743122009]

17.02.2009 - 08:42:55 CAT - Reply by SAP ,

Thanks for messaging us. At a time, you can generate the Role only in

one System. Please a create a Landscape and assign the related

Systems as Connectors to the Landscape.

In the Associated Actions, you can assign as many Connecors(Systems)

as you want in Risk Analysis & Role Generation.

Please assign the QA System & Production in one Landscape and make the

QA system as default for Role Generation and start creating the Role

and generate it, and test it.

Then change the default System of Role Generation to Production System,

and generate the Role.

Hope this will solve your issue and kindly confirm the Message, Once

you are able to solve the issue.

Thanks,

Babu

[Former Member · Accepted solution]

Hi Alpesh.

Please advise if the solution below is suitable to the issue of Role Generation -

My colleague added the QA as default for Role Generation in Associated Actions via ERM > Config > Systems Landscape > Select Landscape > Change > Click on Assigned Systems -

During the final stage (Generation in Production) of the Role creation methodology, we are able to select both the default QA and the Production system for generation and the Role successfully generated in Production.

Problem solved for us.

[Former Member]

Michael,

That is what I mentioned in my note earlier. Either you can generate roles in QA and Prod same time or one after another. If you want to do it simultaneously then you can turn the configuration on but if you want to test the role in QA and then generate in Prod then you can swap the default system after generation in QA.

Regards,

Alpesh