Maximo Open Forum

 View Only
  • 1.  How to migrate Security Group application permissions from one environment to other?

    Posted 03-05-2021 00:01
      |   view attached
    Hi,
    We have a requirement to Migrate Security Group Application Permissions from Production to UAT Environment.
    For this I tried to make a package from "APPSECURITY" Migration group and deploy the configuration files through "Migration Collection" in the other environment. But, I am getting the error(in the attachment). Even if I select 'Ok', it returns the same error.
    I was searching for the issue on google and found nothing. 

    Any help regarding the issue is appreciated.


    #MaximoUserGroups
    #EverythingMaximo

    ------------------------------
    Harshavardhan Kamepalli
    Eidiko System Integrators
    ------------------------------


  • 2.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-05-2021 02:52
      |   view attached
    Hi Harsha,

    Please refer section 3 in the attached IBM doc. 
    May be it can help you to migrate the security groups.

    ------------------------------
    Ajay Kotapati
    BEUMER GROUP
    ------------------------------

    Attachment(s)

    pdf
    Maximo Migration Manager.pdf   4.20 MB 1 version


  • 3.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-05-2021 03:10
    Thanks for the material Ajay.
    I'll go through it and let you know if it helped me.

    ------------------------------
    Harshavardhan Kamepalli
    Eidiko System Integrators
    ------------------------------



  • 4.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-05-2021 07:44
    Followed the procedure from the Document, But struck with same error.
    My requirement is to not Migrate security groups but migrate the Signature Option permissions that are enabled for each application from one environment to another. I don't know if that's even possible to do so! If there's one, will be really helpful to know it.

    ------------------------------
    Harshavardhan Kamepalli
    Eidiko System Integrators
    ------------------------------



  • 5.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-08-2021 09:05
    That error is specific to Service Provider so I assume Maximo for Service Providers is installed in this environment (or an solution like Control Desk/Aviation which includes it). I don't have a demo app currently with SP that I can test this in but I can say we don't use migration manager for security group changes. It's easy enough to just use Application Import/Export by creating a new object structure (in both source and target). 

    MAXGROUP has to be the parent. APPLICATIONAUTH as the child with the relationship APPLICATIONAUTH. Then you could add the other objects (LIMITTOLERANCE, LOCAUTH, SITEAUTH,SECURITYRESTRICT, etc.) if you need them but if you just need permissions leave it simply MAXGROUP & APPLICATIONAUTH. Then in the More Actions choose "Add/Modify Application Import Support" in the target application and "Add/Modify Application Export Support" in the source application and associate it to either SECURGROUP or PLUSPSECGR (which is the SP specific security group application). Grant the import/export permissions in the Security Group application for the groups you want to be able to do it. Log out of Maximo and log back in and you can now export and import it hopefully. 

    For clarity, this (by default) functions differently than Migration Manager. Think of migration manager as enforcing things to match verbatim (adding and/or removing permissions) while the default action for application import is AddChange which will add new permissions for example without removing existing permissions. Hopefully this will avoid the issue and be a little easier to manage then creating collections too.

    ------------------------------
    Steven Shull
    Projetech Inc.
    ------------------------------



  • 6.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-09-2021 04:12
    Yes Steve, you are right.
    We have Maximo Control Desk installed with Service Providers in the environment.
    I'll look at what you've suggested which I think may work.

    ------------------------------
    Harshavardhan Kamepalli
    Eidiko System Integrators
    ------------------------------



  • 7.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-08-2021 15:01
    Hi, you're talking about two separate things I think. Sigoptions are the are the options you can select in the group security application and belong to the migration object for applications. The actual state of the choices is set in the security group (specifically the applicationauth object/table)...

    ------------------------------
    keith simmons
    Aquitas Solutions
    ------------------------------



  • 8.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-08-2021 15:29
    Good catch, I misread this earlier today (shouldn't respond first thing in the morning). 

    Keith is correct. If you're just trying to migrate the options themselves (not which groups have access to those options) then you need to setup an export of MAXAPPS/SIGOPTION and not deal with groups at all. If you use migration collections and use that to find related data, I'm pretty sure it brings in the groups that have permissions for those apps. Similar to security groups, I would NOT use migration collections for this unless you're also packaging up objects and such. If you are then I would be sure to not add in any security groups it finds.

    ------------------------------
    Steven Shull
    Projetech Inc.
    ------------------------------



  • 9.  RE: How to migrate Security Group application permissions from one environment to other?

    Posted 03-09-2021 04:18
    Yea Keith,
    "The actual state of the choices is set in the security group (specifically the applicationauth object/table)"
    Here, these choices are needed to be migrated from one environment to other.
    To  be more clear, Consider a Security Group "Test" which is in both Environments A and B.
    Now, for "Incident" Application, I granted some permissions for Security Group "Test" in Env. A and these granted permissions are to be migrated into the Env. B.

    ------------------------------
    Harshavardhan Kamepalli
    Eidiko System Integrators
    ------------------------------