Best Practices for Role Transport in AS ABAP Systems

Guidelines for Role Transports

1. Single Role Transport

For changes in a single role, transport it using the standard process.

2. Parent and Child Roles

For parent-child role scenarios, follow these guidelines:

Scenario 1: Addition of T-code and Authorization Object

• When adding a T-code to a parent role and distributing it to child roles, include both the parent and all child roles in the transport request.
• If all child roles are added to the transport, the parent role is automatically included.

Scenario 2: Modification of Org Level in a Child Role

• Since child roles are primarily used for organizational-level maintenance, any org-level changes should be transported by including only the modified child role.
• The parent role will automatically be included in the transport.

Important Note:
To prevent inconsistencies, especially when dealing with a large number of parent-child role modifications, always include all child roles in the transport request.

3. Composite and Single Roles

For composite and single roles, follow these transport scenarios:

Scenario 1: Addition of T-code and Authorization Object

• When adding a T-code or authorization object to a single role that is part of a composite role, transport the modified single role independently.

Scenario 2: Creating a New Single Role and Adding it to an Existing Composite Role

• If a new single role is created and assigned to an existing composite role, include both the new single role and the composite role in the transport.
• Do not select the option “Also Transport Single Roles from Composite Roles” in the transport request.

Scenario 3: Creating a New Composite Role with Multiple New Single Roles

• When creating a new composite role along with its associated single roles, transport only the composite role.
• Do not select the option “Also Transport Single Roles from Composite Roles”, as this will automatically include all associated single roles.

Scenario 4: Adding or Removing an Existing Single Role from a Composite Role

• In this case, transport only the composite role.
• Do not check the option “Also Transport Single Roles from Composite Roles” in the transport request.

Scenario 5: Transporting Composite Roles in BW Systems

• In BW systems, always transport composite roles without selecting the “Also Transport Single Roles from Composite Roles” option.
• This ensures that users such as query designers and administrators can directly modify roles in the production system without overriding their daily updates.

By following these best practices, you can ensure a smooth and error-free role transport process in AS ABAP systems.