SAP BI 7.3 security problem

[Former Member]

HI ,

We have a requirement to build a new SAP 7.3 system which is not an copy of the existing system.

But the requirement is to copy the users and Z roles if possible .

We will be able to copythe users along with teh standard roles assigned to them but our question is on Z roles .

Can we upload the roles and import the role sinto the  new system first (without any objects )and later import the users through client copy ?

Regards

madhav

[former_member189725]

If you do a client transport  from the source system to the target system using the SAP_USER profile , all the users along with authorization roles and profiles would be copied . It will only overwrite the user data and the authorization roles and profiles in the client of NW 7.3 system . The client transport would also copy the Z roles as well along with standard roles. Also is the source system on a lower version than the target . This should not be a problem. The client copy/transport using SCC8/SCC7(with copy profile SAP_USER) would only copy table data of client specific tables specific to USERS, ROLES and AUTHORIZATION PROFILES. The only thing that you need to look after the client transport is to check the individual roles for any obsolete authorization objects .

Client copy/transport would not bring in repository objects , so if you have custom repository objects (Z objects) , both custom ABAP code and custom DDIC objects related to security , Please transport the entire package which has the Z objects, prior to doing the client transport.

Regards

Ratnajit

[former_member209924]

Install the new BW system and do Client Copy for Users from the old system.

In the old system, put all the Z roles in a transport (with user assignments) and move it to the new system and imported it.

Ravi

[Former Member]

Hi Ravi ,

Thanks for your reply .

We are thinking on the same line but what will happpend to Z roles if they are assigned to  Z objects .

For exmaple use a z role to run some z transaction .

Regards

Madhav

[former_member209924]

You also need to transport all z objects before importing the roles.

1.) Client Copy for users.

2.) Import Z objects.

3.) Import Z Roles.

Ravi