Transporting BPC profiles is a tedious process than the one we usually follow for FIORI and PFCG roles.
*Never transport BPC profiles through PFCG.
** BPC auto generated role for Teams or profiles can differ in name in different environments in same landscape. For example, you created a BPC profile directly in test system, which got name ZBPC_******06. And in dev system, there is one profile which needs to be transported to Production with name ZBPC_******06, if moved through PFCG will replace the existing profile. SO its always a better idea to move profiles through RSA1.
Steps to transport.
4. The RSA1 tcode starts in Administration tab by default. Click on Transport Connection.
5. Before you select the objects, first set the Collection Mode to Collect Automatically:
6. Then navigate to the More Types -> Environment and Click on Select Objects. The pop up will appear with all the environments available. Select the one, for which you want to transport the profiles, teams.
7. By default, all the objects (profiles, teams, models, dimensions) in that environment will be selected:
FYI – I am trying to hide all the custom objects with Blue pen, which I have created. So please ignore that.
8. We don’t want to transport any functional objects for sure. So, please click on “Do not Transport Any Below” by right clicking on the environment.
9.
***Please note that in case you are transporting Team, please make sure you select the relevant Data Access profile and Task Profile too, else the TR will be moved with RC = 0 but the objects won’t move.
After selecting the objects, please click on mini truck button, we are familiar with and have been doing all our life:
10. While releasing the TR, you will see the warning about dependent objects in your data access profiles, i.e., Environment, Model, Dimensions and Dimension members referenced:
****Since we are referencing Models and dimensions in our data access profiles, it makes us dependent on Functional teams. So please make sure model and dimension including dimension members are transported before you transport security profile, else the TR will end up in RC 8.
*****make sure you Make the environment status Offline before you move your TR, else the TR will again end up in RC = 8.
So essentially, all the BPC transports cause a Downtime unless you enable users with task “Use System When Offline” which is definitely not a good idea.
****** Once you move your objects successfully, refer to UJE_*_AGR tables accordingly to map your composites to BPC roles. Its always a good practice to map task and data profiles to a team and assign the team specific role to user referring from table UJE_TEAM_AGR.
I am sure, there must be other ways to transport BPC security profiles and teams, but I find this one relatively easier than others. But still open to suggestions. Thanks for reading this. Let me know, in case of any questions.
*Never transport BPC profiles through PFCG.
** BPC auto generated role for Teams or profiles can differ in name in different environments in same landscape. For example, you created a BPC profile directly in test system, which got name ZBPC_******06. And in dev system, there is one profile which needs to be transported to Production with name ZBPC_******06, if moved through PFCG will replace the existing profile. SO its always a better idea to move profiles through RSA1.
Steps to transport.
- Create a new Customizing TR through charm or directly.
- Go to RSA1 tcode.
- You might see below warning, just press continue, another topic for another day 😉 :
Warning when opened RSA1
4. The RSA1 tcode starts in Administration tab by default. Click on Transport Connection.
5. Before you select the objects, first set the Collection Mode to Collect Automatically:
Collect Automatically to enable Checkbox option
6. Then navigate to the More Types -> Environment and Click on Select Objects. The pop up will appear with all the environments available. Select the one, for which you want to transport the profiles, teams.
Select the Environment
7. By default, all the objects (profiles, teams, models, dimensions) in that environment will be selected:
All options are selected by default
FYI – I am trying to hide all the custom objects with Blue pen, which I have created. So please ignore that.
8. We don’t want to transport any functional objects for sure. So, please click on “Do not Transport Any Below” by right clicking on the environment.
Select Do no transport any below option to uncheck all objects
9.
- Everything will be unchecked, now navigate to Teams, Data Access profiles and Task profiles. And click the ones you want to transport.
***Please note that in case you are transporting Team, please make sure you select the relevant Data Access profile and Task Profile too, else the TR will be moved with RC = 0 but the objects won’t move.
After selecting the objects, please click on mini truck button, we are familiar with and have been doing all our life:
Usual truck button for transport
10. While releasing the TR, you will see the warning about dependent objects in your data access profiles, i.e., Environment, Model, Dimensions and Dimension members referenced:
Warning on the dependent Objects such as Env, Model, Dimensions and Dimension Members
****Since we are referencing Models and dimensions in our data access profiles, it makes us dependent on Functional teams. So please make sure model and dimension including dimension members are transported before you transport security profile, else the TR will end up in RC 8.
*****make sure you Make the environment status Offline before you move your TR, else the TR will again end up in RC = 8.
So essentially, all the BPC transports cause a Downtime unless you enable users with task “Use System When Offline” which is definitely not a good idea.
****** Once you move your objects successfully, refer to UJE_*_AGR tables accordingly to map your composites to BPC roles. Its always a good practice to map task and data profiles to a team and assign the team specific role to user referring from table UJE_TEAM_AGR.
I am sure, there must be other ways to transport BPC security profiles and teams, but I find this one relatively easier than others. But still open to suggestions. Thanks for reading this. Let me know, in case of any questions.
- SAP Managed Tags:
