Download roles from 4.6C and upload into 6.0

[Former Member]

Hi all,

During upgrade :

Method A)

- Copy roles OLD system 4.6C into a TARGET system 4.6C system

- then upgrade TARGET system into 6.0

Method B)

- Upgrade TARGET system 4.6C system into 6.0

- Then Download roles from OLD system 4.6C and Upload into TARGET system 6.0 using PFCG.

Question 1: Method (B) workable?

Question 2: Any possible pitfalls for Method B?

Thanks in advance!

[Former Member]

method B is a pitfall in itself. desist!

use method A. reasons being: only method A will ensure a consistent conversion of the 4.6 profiles and objects to ECC 6.0. also only running SU24 after the upgrade will allow for the newly developed objects (since 4.6 - mind you, you are facing a lot of work) to be updated in your roles.

additionallly, there are objects that are no longer in use ... that will have to be removed.

just for the record. if you make a homogenous system copy of your prd-system to test the upgrade, you will not have to copy the roles. saves work. when going live with the upgrade, method A makes is superfluous to copy the roles ...

[Bernhard_SAP]

...in addition...

there is no advantage in method B.

In contrary: it will cost you more time and trouble with authorization checks failing for users, work on their complaints, arguments with you boss on who is responsible for the mess, clean up roles which do contain too much authorizations...... The latest time you will have to check/update your roles is after you will fail with an audit, because users do have too many authorizations....

So I can only advise too to use version A as Mylene has pointed out already.

Perform SU25 and adapt all your roles or take the chance to update/improve your authorization concept.

The time you are spending for that at upgrade phase will be saved later on a thousand times!

There are several threads already giving some more information, just search for SU25, for instance:

b.rgds

Bernhard