Export/Import of users from Weblogic Console does not bring user's group membership

Question

Hi,

OBIEE 11.1.1.7.160119

WebLogic Server Version: 10.3.6.0

Export/Import of users from Weblogic Console does not bring user's group membership. We are using the Migration option on Weblogic Console to export and import users from one instance to another (during cloning instances from production). All the users and groups are imported but not the group membership for these users.

We are using Weblogic native LDAP.

Here is the doc link that we are following to export users and import users.

http://docs.oracle.com/cd/E23943_01/apirefs.1111/e13952/taskhelp/security/ExportDataFromSecurityRealms.html

We have 5 different OBIEE instances. One is prod and other 4 are Development and Test. As always, the source of truth for security configuration is production. Every once in awhile, we refresh our Dev/Test instances from Prod. We want to bring all the security, catalog & folders from Prod to Dev/Test.

When we exported and imported users we noticed the group membership was missing.

Thanks.

Community DW Integration · Answer

Syed,

Thanks for your reply.  My apologizes if I did not explain my problem.

Users present in Prod but not present in development , were created in development environment but assigned group to these prod migrated users did not get assigned to user in development environment even though groups were migrated successfully?

That's right.  All the new users created in prod show up in the dev instance.  All the new groups created in prod show up in the dev instance.  However the group membership granted to those users did not come along.  In the screen shot below, group membership assigned (shown in red box) to the users did not come over.

Thanks.

Syedsalmancs110 · Answer

Could you give a live example from your system on what exactly do you mean by group membership was missing after export/import of users/groups from prod to development environment?

Did the user with same name in prod and development instance had different set of groups assigned and after export and import nothing changed for same users between prod and development instance?

OR

Users present in Prod but not present in development , were created in development environment but assigned group to these prod migrated users did not get assigned to user in development environment even though groups were migrated successfully?