My Oracle Support Banner

E-UPG PT8.2x, PT8.4x, PT8.5x: How to Preserve Security through Upgrade Passes (Doc ID 642944.1)

Last updated on MAY 15, 2023

Applies to:

PeopleSoft Enterprise PT PeopleTools - Version 8.50 to 8.59 [Release 8.4]
Information in this document applies to any platform.

Goal


Customers want to migrate the security tables from one PeopleSoft database to another and have everything intact.

SOLUTION:
For PeopleTools 8.1x the following is a list of Datamover scripts, which would do the job for you.

1. EXPOPR.DMS exports operator definitions from one database and stores them in a file in DataMover format.  
2. IMPOPR.DMS reads the file created by EXPOPR.DMS and copies the operator definitions into the target database.
3. USEREXPORT.DMS only exports operator definitions.    
4. USERIMPORT.DMS reads the file created by USEREXPORT.DMS and copies the operator definitions to the target database.

Maintaining operator passwords through the migration. :

If you want to maintain the operator passwords from your source database in your target database, you must change the access

password in your source database to match the access password in the target database before exporting the security tables.

PeopleSoft Security Tables
The following is a list of the tables exported and imported by EXPOPR.DMS and IMPOPR.DMS.

Table Name Description                                        

PSOPRDEFN          General attributes of operators, Passwords, language code, etc.
PSOPRCLS One row for each operator-class i.e if MYOPER is in three permission lists, there will be three rows in this

table
PSACCESSPRFL One row for each access profile defined in the system
PSCLASSDEFN General attributes of classes.  Timeout minutes, description, etc.
PSAUTHSIGNON Valid signon start and end times for classes.
PSAUTHITEM Authorized menus for classes
PSAUTHPRCS Authorized process groups for classes
PSPRCSPRFL Process profile for classes
PSAUTHCUBE Cubes a class is authorized to access
PSAUTHBUSCOMP Business Processes a class is authorized to access
PSAUTHCHNLMON Message Channels a class can view in the Message Monitor

Object  Security Table

PSOPROBJ Object Security Groups for a class

Tables populated from the following  component: PeopleTools --> Utilities --> Use --> Query Security

PS_SCRTY_QUERY Query access profile for classes
PS_SCRTY_ACC_GRP Authorized query access groups for classes

Tables populated from the following  component: PeopleTools --> Mass Change --> Use --> Mass Change Operator Security

PS_MC_OPR_SECURITY Authorized Mass Change Template for a operator definition.
PS_MC_OPRID Operators allowed to execute Mass change on line

Tables populated from the following  component: PeopleTools --> Utilities --> Use --> Operator Alias Type, Operator Alias

Value

PSOPRALIAS Alias values for an operator
PSOPRALIASTYPE Type of Operator Alias

Note: When migrating security between databases you may want to make sure that the SYMBOLIC ID, AccessID and Access

Password in the source and target database are the same, this makes for little headaches. You can always change the AccessID

password or create a new Symbolic ID in the target once the migration is done.

NOTE for PeopleTools 8.4x, 8.5x:
In PeopleTools 8.4 you MUST also update the Portal registry in the target database in order for your new security to take

effect correctly. You will need to run the Application Engine program PORTAL_CSS.  
But there are some known issues with this process when copying security. 

Also, you will want to have the Access ID, Access Password and Symbolic ID the same between the source and target databases in order to alleviate confusion after migration.  If you choose not to have this before the migration, then you will have to
make manual updates to the PSOPRDEFN, PSACCESSPRFL, and PSSTATUS in order to be able to log in.  If you are on Oracle or DB2
databases, then you need to update the PSDBOWNER.  

Question in 8.4x. In PT 8.1x there were scripts to migrate security called IMPOPR.DMS, EXPOPR.DMS, USERIMPORT.DMS, and  USEREXPORT.DMS. Where are these scripts for PT 8.4?

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.