{"id":1044,"date":"2012-03-11T04:27:21","date_gmt":"2012-03-11T04:27:21","guid":{"rendered":"http:\/\/sapsecurityanalyst.com\/WP\/?page_id=1044"},"modified":"2014-07-26T19:03:43","modified_gmt":"2014-07-26T19:03:43","slug":"how-to-transport-roles-in-sap","status":"publish","type":"page","link":"https:\/\/sapsecurityanalyst.com\/WP\/how-to-transport-roles-in-sap\/","title":{"rendered":"How to Transport Roles in SAP"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><\/span><\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\"><br \/>\nIn a basic three system SAP landscape, roles are first created in Development System and then transported to Production system (after testing in Development and Quality systems). In this topic we will be discussing about two points &#8211; (1) How to create a Role Transport and (2) How to Transport Roles in SAP.<br \/>\n<\/span><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\"> <!--more--><br \/>\nRole Transport can be created via Tcode PFCG. For creating a role transport, go to <\/span><strong><span style=\"color: #0000ff;\">PFCG -&gt; Utilities -&gt; Mass Transport<\/span><\/strong><\/p>\n<p>&nbsp;<\/p>\n<p><strong><!--more--><br \/>\n<\/strong><br \/>\n<span style=\"color: #4c4c4c;\"> <span style=\"font-family: verdana;\">Give all the role names in the &#8220;Selection of Roles&#8221; field. Based on the requirement, we may need to create role transport for one role or many roles. Paste the role names (marked as <\/span><strong>1 <\/strong>in the figure below)\u00a0<span style=\"font-family: verdana;\">as shown in the figure below and execute (marked as <\/span><strong>2 <\/strong>in the figure below)<span style=\"font-family: verdana;\">:<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><br \/>\n<\/span><\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1046\" title=\"role_transport1\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1.jpg\" alt=\"\" width=\"578\" height=\"483\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1.jpg 578w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1-300x250.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1-290x242.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport1-150x125.jpg 150w\" sizes=\"(max-width: 578px) 100vw, 578px\" \/><br \/>\n<\/a><!--more--><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\">You will get the below screen:<\/span><\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><br \/>\n<\/span><\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1047\" title=\"role_transport2\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2.jpg\" alt=\"\" width=\"575\" height=\"195\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2.jpg 575w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2-300x101.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2-290x98.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2-150x50.jpg 150w\" sizes=\"(max-width: 575px) 100vw, 575px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport2.jpg\"><!--more--><br \/>\n<\/a><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\">As we can see in the above figure, there are two check boxes. The second check box is for transporting generated profiles along with roles. This option should be selected since it is not a good practice to manually generate roles in quality and production systems. Click execute. We get the following dialog box. Click the tick mark as shown below:<\/span><\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1048\" title=\"role_transport3\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3.jpg\" alt=\"\" width=\"586\" height=\"404\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3.jpg 586w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3-300x206.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3-290x199.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport3-150x103.jpg 150w\" sizes=\"(max-width: 586px) 100vw, 586px\" \/><br \/>\n<\/a><\/p>\n<p><!--more--><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\">Next, we get a small dialog box called &#8220;Choose objects&#8221;. It asks to select the objects which can be used for transporting the role &#8211; User Assignment and Personalization. We generally select only Personalization as it is not a good practice to transport the user assignment to Quality and Production systems. Select Personalization and click tick mark to proceed.<\/span><\/p>\n<p><span style=\"color: #4c4c4c;\"><!--more--><\/span><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\"> The system prompts for a creating a Customizing Request as shown in the figure below. Since roles are client specific data, the request type is Customizing Request.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1050\" title=\"role_transport4\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4.jpg\" alt=\"\" width=\"499\" height=\"131\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4.jpg 499w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4-300x78.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4-290x76.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport4-150x39.jpg 150w\" sizes=\"(max-width: 499px) 100vw, 499px\" \/><br \/>\n<\/a><\/p>\n<p><!--more--><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\">Click on &#8220;Create Request&#8221; as shown in the above figure. We get a dialog box to Create Request as shown in the figure below:<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1051\" title=\"role_transport5\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5.jpg\" alt=\"\" width=\"601\" height=\"414\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5.jpg 601w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5-300x206.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5-290x199.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport5-150x103.jpg 150w\" sizes=\"(max-width: 601px) 100vw, 601px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><br \/>\n<span style=\"color: #0000ff; font-family: verdana;\"><br \/>\n<span style=\"color: #4c4c4c;\">Give the Short Description as shown above. We have given &#8220;&lt;Ticket no&gt;-Transport request for roles ZTEST_ROLE1,2,3&#8221;. Click on Save. System prompts with a dialog box for Customizing Request as shown below:<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1054\" title=\"role_transport6\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6.jpg\" alt=\"\" width=\"499\" height=\"131\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6.jpg 499w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6-300x78.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6-290x76.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6-150x39.jpg 150w\" sizes=\"(max-width: 499px) 100vw, 499px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport6.jpg\"><!--more--><br \/>\n<\/a><\/p>\n<p><script>\/\/ <![CDATA[\ngoogle_ad_client = \"ca-pub-1241348474673689\";\n\/* All content above *\/\ngoogle_ad_slot = \"3293572617\";\ngoogle_ad_width = 468;\ngoogle_ad_height = 15;\n\/\/ ]]><\/script><br \/>\n<script src=\"http:\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\/\/ <![CDATA[\n\n\/\/ ]]><\/script><\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\">As shown in the figure above, the Request No will be of the format &lt;SID&gt;K9&lt;5digit number&gt;. For example-if the development system id is DEV. Then transport request will be something like DEVK9&lt;5 digit number&gt; where &lt;5 digit number&gt; means any 5 digit number. Every request will have a different 5 digit number and the number will keep increasing with each new request. Click the Tick mark as shown above.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><br \/>\nThis process creates the transport request. Now lets see the procedure to release the transport from Development system so that it can be imported to Quality and later to Production.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><br \/>\n<span style=\"color: #4c4c4c;\">For releasing a transport request, we can use either of the three tcodes &#8211;<\/span> <strong>SE01, SE09 or SE10<\/strong>. <span style=\"color: #4c4c4c;\">Lets execute SE10 tcode. We get the following screen:<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1055\" title=\"role_transport7\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7.jpg\" alt=\"\" width=\"605\" height=\"374\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7.jpg 605w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7-300x185.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7-290x179.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport7-150x92.jpg 150w\" sizes=\"(max-width: 605px) 100vw, 605px\" \/><br \/>\n<\/a><br \/>\n<span style=\"color: #0000ff; font-family: verdana;\"><!--more--><\/span><\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><br \/>\n<span style=\"color: #4c4c4c;\">Since roles are client specific data, the transport request for roles would be &#8220;Customizing Requests&#8221;. And since we have just created the role transport, Request Status (as shown in the figure above) will be &#8220;Modifiable&#8221;. Click on Display Button. We get the following screen:<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><!--more--><\/p>\n<p><a href=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-1057\" title=\"role_transport8\" src=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8.jpg\" alt=\"\" width=\"742\" height=\"313\" srcset=\"https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8.jpg 742w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8-300x126.jpg 300w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8-290x122.jpg 290w, https:\/\/sapsecurityanalyst.com\/WP\/wp-content\/uploads\/2012\/03\/role_transport8-150x63.jpg 150w\" sizes=\"(max-width: 742px) 100vw, 742px\" \/><br \/>\n<\/a><br \/>\n<span style=\"color: #0000ff; font-family: verdana;\"><!--more--><br \/>\n<span style=\"color: #4c4c4c;\">We can see the transport request which we just created in the figure above. Every transport request has at least one task. For releasing the transport request, first of all, all the accompanying tasks are released. This is done by selecting the task and clicking on the truck shaped Transport Button as shown above. Once all the tasks have been released, we need to release the Request.<\/span><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><br \/>\nThis process completes the Role transport creation process and release of transport request. The import of transport request is a BASIS task and should be handled by a BASIS Administrator.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><br \/>\n<span style=\"color: #4c4c4c;\">We are still giving an overview of how this process can be handled in case BASIS and Security both are being handled by the same administrator.<\/span><br \/>\n<\/span><br \/>\n<span style=\"color: #4c4c4c; font-family: verdana;\"> <!--more--><\/span><\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #4c4c4c; font-family: verdana;\"><br \/>\n<strong><span style=\"color: #0000ff;\">Follow following procedures for importing requests to another system :<\/span><\/strong><\/span><\/p>\n<p>&nbsp;<\/p>\n<p><span style=\"color: #4c4c4c;\"><!--more--><\/span><\/p>\n<ul>\n<li><span style=\"color: #4c4c4c; font-family: verdana;\">Login to the target system where the request needs to be imported. As a normal practice, requests are transported first to Quality System (QAS) from Development System (DEV). So for importing the changes made in Development to Quality, login to Quality (QAS) system.<\/span><\/li>\n<\/ul>\n<div><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/div>\n<ul>\n<li><span style=\"color: #4c4c4c;\">Execute tcode<\/span><strong style=\"color: #0000ff; font-family: verdana;\">STMS<\/strong><span style=\"color: #4c4c4c;\">. This takes to &#8220;Transport Management System&#8221; Screen.<\/span><\/li>\n<\/ul>\n<div><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/div>\n<ul>\n<li><span style=\"color: #4c4c4c; font-family: verdana;\">Click on the &#8220;Truck&#8221; icon (at the extreme left) or press F5 (Import Overview).<\/span><\/li>\n<\/ul>\n<div><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/div>\n<ul>\n<li><span style=\"color: #4c4c4c; font-family: verdana;\">This screen (Import Overview screen) shows\u00a0Number of import queues in the system. Select the system (QAS here) from the queue and click &#8220;specs&#8221; icon (Display Import Queue) or press F8.<\/span><\/li>\n<\/ul>\n<div><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/div>\n<ul>\n<li><span style=\"color: #4c4c4c; font-family: verdana;\">This screen shows the list of all requests. Select the request which need to be imported and click on the Grey colored truck icon (Import Request) or press F8. <\/span><\/li>\n<\/ul>\n<div><span style=\"color: #4c4c4c; font-family: verdana;\"><!--more--><\/span><\/div>\n<ul>\n<li><span style=\"color: #4c4c4c; font-family: verdana;\">It will pop up a dialog window. Select the necessary options from the window and click the Tick Mark. Import will begin.<\/span><\/li>\n<\/ul>\n<div><\/div>\n<div><\/div>\n<div><span style=\"color: #0000ff; font-family: verdana;\"><!--more--><\/span><\/div>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/pages\/1044"}],"collection":[{"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/comments?post=1044"}],"version-history":[{"count":17,"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/pages\/1044\/revisions"}],"predecessor-version":[{"id":1906,"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/pages\/1044\/revisions\/1906"}],"wp:attachment":[{"href":"https:\/\/sapsecurityanalyst.com\/WP\/wp-json\/wp\/v2\/media?parent=1044"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}