SAP Library - Find your answers

How To Compare The Roles

How to compare the roles where created or defined in two different systems?

For role comparision both the roles must be in the same system, in same client

Transaction code SUIM -> Comparision-> Roles

If the roles are in different system, then tranport the role into one of the system and do comparision. If no transport connection defined then, you can use the upload and download option in the PFCG

Steps for Role Comparing:

How to compare the roles where created or defined in two different systems?

For role comparision both the roles must be in the same system, in same client

Transaction code SUIM -> Comparision-> Roles

If the roles are in different system, then tranport the role into one of the system and do comparision. If no transport connection defined then, you can use the upload and download option in the PFCG

Steps for Role Comparing:

1. Run the t-code SUIM

2. Go To Comparison and select the option of roles

3. Click on Across systems option it will give option to select the sys name under Remote Comparison there enter the SYS ID between which system you want to do comparison and put the role name in compare role section then execute it will give you the result.

4. If there is any difference b/wn the t-codes it will b in red colour otherwisein yellow.

Export them via SCC9, copy profile SAP_USER. This profile copies both roles and user
accounts. Once exported, use STMS to import the transports into the development server.

Use profile SAP_UONL while client copy.

Keyword: BASIS
Title : Derived Roles & Composite Roles

1.Log into Production Server
2.Go to PFCG and enter the role which you want to transfer to other system.
3.Goto Role->Download it will ask the path where to download/save that role on local desktop give the location and save it.
4.Log into Development
5.Go to PFCG
6.Upload and give the Role Path or location

1) Goto transaction SE16
2) Enter the table name : agr_define
3) Enter the master role in the second role field ( this field is in the second row) and execute
4) Then you will see the derived roles based on the master roles

Derived Roles

As the name indications are derived from already existing roles.
There are two scenarios when we derive roles.

• The role menus are identical but the authorizations for the menu actions are different in the derived role.
• The menu and authorizations of the derived role are identical, but the organizational levels are different in the derived role.