Transporting Authorization Components

You can use two different procedures for transporting authorization components, roles, and user master records, depending on the type of transport.

• Transports between clients (within an SAP system)

  User master records and authorization components are client-dependent. Maintain individual user master records and authorization components for each client in your system.

  To transport user master records and authorization profiles from other clients, start the client copier (transaction SCCL) in the target client. Use the profile SAP_USER. You can select it using input help, for example.

  Note

  Schedule the transport for background processing during the night. In this way, you can avoid data inconsistencies.

• Transport between SAP systems

  You can copy authorization components, roles and user master records from one SAP system to another. Decide on the transport method that is appropriate for you, depending on the components to be transported.

You can transport the following authorization components:

• Roles

• Manually-created profiles

• Manually-created authorizations

• Authorization objects and authorization classes

• Check indicators and field values

• Templates

• Globally-deactivated authorization checks