Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Best practice for SAP generated profile names in /nPFCG

Former Member
0 Kudos

Our company is setting up a new landscape.

The is a plan to have 75% of all security roles to be created on a global DEV system(GBD) and 25% created on a local DEV  (LCD) box

The naming standard for the roles will be different between global & local systems so that is not a big concern.

But the naming standard for profiles is a concern.

Does anyone have recommendation a profile naming standard so we don't accidently overwrite each other?

Do you simply keep the SAP recommendation for the profile name? 

Or is there a good way to change the default profile name suggestion so we won't run into an issue.

We are on ECC6.04 currently.

Thanks  - Bryan

1 REPLY 1

Former Member
0 Kudos

You have a risk if the 1st and the 3rd characters of the system ID's are identical to those of the global source system you are transporting from. If you are download/uploading in the first step then this only applies to the SIDs of the local transport domain and not the global one. Same goes for 2 or more local clients transporting into one target client.

If they collide, then you have the very easy option of resetting the number range in table AGR_NUM_2. This makes the number range unique instead of the first 4 characters of the prefix (T-xx) being unique.

If you which to introduce a type, SID or even client attribute to the profile's origin and are transporting from a global domain and then further within a local domain, then take a look at table USR_CUST. F4 on the IDs will show you a SAP note how you can determine your own prefix variables. This should however be a last resort for complex transport landscapes with colliding SID names and multiple source clients for roles in the same landscapes.

In short, manually naming generated profiles and trying to keep track of it OUTSIDE of the system, is work for village idiots only as within the user administration UIs you cannot assign them directly anyway. You might as well forget about them and let the system keep them unique...  🙂

Cheers,

Julius