This website is not affiliated with, sponsored by, or approved by SAP AG.

Non-generation of some profiles during transport

SAP Security

Moderators: thx4allthefish, Snowy, jurjen

Non-generation of some profiles during transport

Postby prasnad » Mon Mar 15, 2010 6:11 pm

Hi,
We have transported a transport request containing 700+ roles from DEV to QA system. All the roles have generated profiles in DEV system. But, in QA, prifiles for some roles were not generated. What could be the reason? Is it a Basis issue? The systems are ECC6 EhP4 SP3 with DB2 9.5 FP4 on SuSe Linux 10 SP3. Thanks in advance.

prasnad
 
Posts: 34
Joined: Thu Jun 01, 2006 2:45 am

Re: Non-generation of some profiles during transport

Postby thx4allthefish » Tue Mar 16, 2010 2:05 am

moved from Basis.
curiousorange wrote:I give up. Humanity isn't worth saving. Why is there never a Vogon Constructor Fleet around when you really need one?
thx4allthefish
 
Posts: 6371
Joined: Sat Oct 26, 2002 6:18 pm
Location: barolo barrel

Re: Non-generation of some profiles during transport

Postby Harters » Tue Mar 16, 2010 3:03 am

I did see this once but the reason was that when the transport was created initially with the first say 50 roles, the check box "also transport the profiles" (or whatever it is called) was deselected. Then when subsequent roles were added to the transport the check box remained checked so out of say 300 roles, only 250 had profiles moved.

Another way I can think of is if the roles were created in a different systems other than dev and had therefore different profile names so this might cause issues as the role doesn't know which profile to use - new or old.

Have you checked the transport to see if the profiles are contained in the table objects (USR12 e.t.c?)
Regards
Harters
______________
SAP Support Ltd
sapsupport.co.uk
Harters
 
Posts: 229
Joined: Thu Feb 07, 2008 8:03 am
Location: Sitting in front of 21 SAP systems

Re: Non-generation of some profiles during transport

Postby henrik » Wed Mar 17, 2010 5:00 pm

Are they by any chance derived roles? I've seen issues where certain derived roles would show up as not generated if not all derived roles from that master was transported.
www.turnkeyconsulting.com.au
henrik
 
Posts: 485
Joined: Wed Oct 23, 2002 6:38 am
Location: Sydney, Australia

Re: Non-generation of some profiles during transport

Postby os » Sat Mar 20, 2010 12:59 pm

If your SID names do not differ in the first and third characters of the names and someone was already regenerating (as others have mentioned and might be the cuplits ;) or creating other roles in QAS which blocked the name of the profile, then this will happen.

You should check your transport log and reset the number range of the profile generation to make them unique. This is a good idea anyway.
os
 
Posts: 452
Joined: Wed Dec 21, 2005 10:51 am


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 4 guests




This website is not affiliated with, sponsored by, or approved by SAP AG.