Question:
Hi
When our basis team refreshes a development or QA client with productive data, it copies all EVERYTHING from production i.e. users, roles, profiles. This means whenever it is done I have to go through the affected clients and delete users and make sure the ones left have to correct access for that system and not production. This is quite time consuming and very frustrating, is there any way around this? or is this a problem that affects everybody
Answer:
Create an ABAP that downloads the essential info to and excel sheet for recreating/changing the and us a BDC calling tcode SU01_NAV to Create/change the users after the copy.
There is a copy that can exclude user id info but if they use a database copy to accomplich this it will do not good.
Answer:
I always do remote client copies to another system for as many client I need to individually get back to a certain state after a refresh (usually only one remote client copy). I move back that client onto refreshed system/clients, as part of the refresh actions.
Hope it helps.
_________________
Thanks and best regards,
Juan-Carlos Garcia
SAP Basis and OS/DB Migration
Certified
Answer:
Check out SAP notes. There are a lot of them that show how to do a refresh then restore the old security. Dr. Jarboe's suggestion is ok but it really isn't necessary.
Answer:
Do you know any of the SAP note numbers related to this! its like looking for a needle in a haystack sometimes
Answer:
If you rely on the addresses to be correct so workflow operates, you will have to be as the most update versions of SAP. The Client copy WITHOUT user profiles may work but is slow. MOst basis groups do a database copy since it is faster but bypasses the Client copy features. Your IDs then get hosed.
If you use the CLient copy USER INFO only to "store the info" to reinstall, NOt all versions of SAP restor it properly and the address info gets hoses. If you do not care about the address info and not using workflow or failed update messages then use it... But the fail safe is to extract the user info to excel before the copy, delete the ids after the copy and reinstall usning a CATT or BDC to SU01_NAV. THe address info then gets create properly.
Answer:
We do User export ( via SCC8) of the profile SAP_USER. This exports the " User master records and authorization profiles ". After the refresh, we do a import. Everything stays the same .. ids, role, passwords...
_________________
regards,
rob
Answer:
Is the import also transaction SCC8?
Answer:
SCC7 for the import
regards
Answer:
Our approach is as follows, the Basis team does a redirected restore of Production to our QA system, they then have some system type clean-up. The Basis team is setup as Euro Administrators in EWZ5, they use EWZ5 to lock all users. The support staff has a user group assigned to their user ID in Production that identifies them as support staff (user group field on Logon tab in SU01). In the refreshed QA system, these users are pulled up in SU10 by the user group and are unlocked and given the authorizations needed for the QA system. This process with EWZ5 and SU10 takes about 10 minutes or less.
Hopes this help.