05-12-2011 5:48 PM
Hello Gurus,
When we do a client copy from source to target client - Do we have to do mass generation of profiles in the target client?
Sorry to keep the question too general. I got like more than 5000 roles copied from source to target and i am wondering if i need to generate them. Is SUPC the right tcode if in case i need to generate them ? Please let me know. Thanks in advance for your answers
Venkat
SAP Security Consultant
05-12-2011 10:03 PM
You can import the all the roles, profiles and user masters with with client copy only with the profile SAP_USER. Ask your basis team client copy only profile SAP_USER
05-12-2011 6:14 PM
Venkat,
Which profile was used for the copy... However i dont think a regenration is necessary for all the roles.
I have hardly come across situations which involved role regenrations after client copy. From a security side, all we have to take care is CUA set up (If it exists in your landscape), Back up of User-Role mapping for any issues later and lock's/unlocks to make sure no unwanted users gain access to the new clients... But as far as i go, it was not a post client copy steps list that we used to maintain...However it would be interseting to see if you find any ungenerated roles in SUPC that were in generated status in the Source Client.
Hope it helps.
~Sri
05-12-2011 10:03 PM
You can import the all the roles, profiles and user masters with with client copy only with the profile SAP_USER. Ask your basis team client copy only profile SAP_USER
05-13-2011 2:07 PM
Hi Venkat,
You must go to transaction PFCG - > Utilities Mass Generation .
And Click Roles With Non-Current Profiles and click Generate Automatically.
And Execute (F8)
You can Execute in Background or Online...
Regards
Maikel
05-15-2011 11:08 PM
05-16-2011 3:14 PM
Thanks everyone !, each and every answer has something to learn ! thanks guys.........