Auth Object for Transport (Import - Export)

[suwandi_cahyadi]

Dear Experts,

What is the authorization object to enable/disable the ability to transport object in PI?

Import Objects & Export Objects in ESR and IB.

I've tried to remove the SAP_XI_ADMINISTRATOR authorization object but the user still able to Import & Export.

Thank you,

Suwandi C.

[suwandi_cahyadi]

Hi All,

I've tried to remove all the Roles for that particular user, and the user is still able to export/import in ESR.

I remove the roles in the ABAP side at the tcode SU01. Is this correct? Or the Java side will use a different role list other than the one listed in SU01?

Thank you,

Suwandi C.

[former_member184720]

You can assign the roles on Java UME too.. but removing from SU01 should work..

However just validate them in user admin..

and i hope you are closing the session and loggin in again after removing the roles

[suwandi_cahyadi]

Yes Hareesh.

I've closed the session and the re-login. The Export/Import Design Objects is still available at the Tools menu and also I can still export/import objects using that particular user..

Could there be a configuration somewhere else?

Thank you,

Suwandi C.

[former_member184720]

Weird...

So even after deleting all the roles you can still export and import??

I'm not sure but it worked for me after deleting the two roles

SAP_XI_CONTENT_ORGANIZER_ABAP

SAP_XI_CONTENT_ORGANIZER_J2EE

may be a final test.. Can you try accessing in different system / instead of removing the roles for a current user.. create a new user and try..

Also restrict the user only to below roles..

SAP_XI_DEVELOPER

SAP_XI_DEVELOPER_ABAP

SAP_XI_DEVELOPER_J2EE

[suwandi_cahyadi]

Hi Hareesh,

Have tried creating new user in a different system and adding only the following roles to the user:

SAP_XI_DEVELOPER_ABAP

SAP_XI_DEVELOPER_J2EE

But still the user can export/import object in ESR. Could this be because the version? I use PI 7.1 SP04.

Thank you,

Suwandi C.

[suwandi_cahyadi]

Hi,

Thank you for the reply.

Sorry my bad, I missed that on Hareesh first reply.

I've tried to remove the two roles:

SAP_XI_CONTENT_ORGANIZER_ABAP

SAP_XI_CONTENT_ORGANIZER_J2EE

But the user is still able to export/import in ESR. Is there any other role that authorize the user to export/import?

This is the user authorization list:

• SAP_ALM_CUSTOMIZER
• SAP_BC_AI_LANDSCAPE_DB_RFC
• SAP_BC_ALM_ADMIN
• SAP_BC_ALM_ALERT_USER
• SAP_BC_ALM_CUST
• SAP_BC_BASIS_ADMIN
• SAP_BC_BASIS_MONITORING
• SAP_BC_CSMREG
• SAP_BC_DB_ADMIN_DB2
• SAP_BC_DB_ADMIN_DB4
• SAP_BC_DB_ADMIN_DB6
• SAP_BC_DB_ADMIN_MSS
• SAP_BC_DB_ADMIN_ORA
• SAP_BC_DB_ADMIN_SDB
• SAP_BC_LVC_ADMINISTRATOR
• SAP_BC_TREX_ADMIN
• SAP_BC_WEBSERVICE_ADMIN
• SAP_BC_WEBSERVICE_PI_CFG_SRV
• SAP_NWA_FULL
• SAP_PAF_ADMIN
• SAP_RS_NWA_ADMIN
• SAP_SLD_ADMINISTRATOR
• SAP_SLD_CONFIGURATOR
• SAP_SLD_DEVELOPER
• SAP_SLD_GUEST
• SAP_XI_BPE_ADMINISTRATOR_ABAP
• SAP_XI_BPE_CONFIGURATOR_ABAP
• SAP_XI_BPE_MONITOR_ABAP
• SAP_XI_CONFIGURATOR
• SAP_XI_CONFIGURATOR_ABAP
• SAP_XI_CONFIGURATOR_J2EE
• SAP_XI_DEMOAPP_EXECUTE
• SAP_XI_DEVELOPER
• SAP_XI_DEVELOPER_ABAP
• SAP_XI_DEVELOPER_J2EE
• SAP_XI_DISPLAY_USER_ABAP
• SAP_XI_MONITOR
• SAP_XI_MONITOR_ABAP
• SAP_XI_MONITOR_J2EE
• SAP_XI_RWB_SERV_USER

I think there could be a role that still authorize the user.

Thank you,

Suwandi C.

[former_member184720]

Hi Suwandi - If he is a developer, i would try removing all the *admin* roles...

[Former Member]

Hi Suwandi,

As already answered by others the two roles should help you.

SAP_XI_CONTENT_ORGANIZER_ABAP  & J2EE

Regards,
Deepanshu Sharma    

[Former Member]

Hi Suwandi,

As Hareesh answered already...below two roles are used to enable transport objects in ESR and ID.

SAP_XI_CONTENT_ORGANIZER_ABAP

SAP_XI_CONTENT_ORGANIZER_J2EE

If you want to disable the ability to transport objects, just delete these two roles for particular user so that they can not transport the objects.

Regards,

A.Neelima.

[suwandi_cahyadi]

Hi,

any help for this?

Thank you,

Suwandi C.

[former_member184720]

Hi Suwandi - Are you talking about file transports?

If so have a look at the below blog -

Michal's PI tips: disabling file transports on PI | SCN

Also check if the user has "SAP_XI_CONTENT_ORGANIZER_J2EE" role.. If so remove it and try..

[suwandi_cahyadi]

Hi Hareesh,

Thank you for the reply.

Yes, for the file transport. Looking at the link given by you, it seems that it will disable file transport for everyone.

But I need to disable file transport for some people, and only the Basis will be able to do the transport.

Because I've been trying to configure CTS+ transport but it fails until I see the following Document:

At the Background Information, it is stated that CTS is only available for SAP NetWeaver PI 7.1 SP06 for older patch levels, only File export import is available.

Thank you,

Suwandi C.

[former_member184720]

HI Suwandi - I tried removing my roles

SAP_XI_CONTENT_ORGANIZER_J2EE and

SAP_XI_CONTENT_ORGANIZER_ABAP

it worked for. It's not allowing me export any thing.

Did you try?