Security copy to a different environment

[Harv]

When an app is copied to a different environment, first we extracted & loaded the security XML (users & groups). Then the app copy was made to this new environment using Cloud Admin tool. Even after this the artifact level security on the metadata, workflows, cube views etc. did not move. All the security groups in the artifacts showed "Not Found". What did we miss? Appreciate your response.

[JoakimK · Accepted solution]

When exporting/importing the security, all the artifacts in here get new IDs in the database. These IDs are what are referenced in the database of the application. There are two solutions here:

1: Make a db copy also of the framework database, this contains the security, leaving the IDs intact.

or

2: After your db copy of the full app, go back to the original app and do a full app export, then import this into the newly restored app. The Import/Export will leverage the names of the security objects rather than the IDs.

[Harv]

Thanks for your response. How do I make the db copy of the framework database?

[JoakimK]

If you are on our cloud/SaaS offering, just raise a request to our support team and they will assist you with this. If you are self-hosted I would recommend involving your DBA team and have them copy this the same way your application db is copied.

[kberry]

In the future extract the security xml with Extract Unique IDs checked. This will keep the unique IDs the same between the environments without having to copy the Framework database each time. When you migrate be sure not to overwrite the primary admin ID or Admin Group.