How To Delete The Role We No Longer Needed

[Former Member]

Hi Experts,

We implemented the standard SAP application architecture: DEV,QAS,PRD.

Now my problem is: There are some roles we no longer needed in our PRD circumstances, I don't want to delete them directly in PRD. How to do it? Anyone knows?

Thanks in advance!

Jason

[Former Member · Accepted solution]

Hi,

You can delete roles from tcode PFCG. Enter the name of the role and click on delete.

For deleting many roles at a time you can use LSMW.

Hope this helps.

Regards,

Pranay

[Former Member · Accepted solution]

Hi Pranay,

Thanks for you reply.

(1)----

---

I still don't know how to process. I try to delete a ROLE via PFCG, SAP popup a message like below:

'First enter the object belonging to the role in a transport request if

you want to transport the deletion. If you continue processing now, you

can then only transport the deletion if the role was already entered in

a transport request.'

(2)----

---

The relationship between 'PFCG' and 'LSMW' like 'SU01' and 'SU10' , right?

Hope you can tell me more details at your convenient time.

Thanks!

Jason

[Former Member · Accepted solution]

Hi Partha,

Thank you very much!

You said:

'One remote way is by client export-import using sap_prof and sap_user.

I hope you can test it and confirm it.'

What does 'Client export-import' mean? Client copy?

And what does 'Using sap_prof and sap_user' mean?

Hope you can give me more explanation and the Tx the operation needed.

Regards,

Jason

[Former Member · Accepted solution]

Hi Jason,

It is client copy by client export import method.

For client export in source system --> SCC8

For import in target system --> SCC7

But I think the way prescribed by Ruchit is a better way ... You can do it in following way

Steps :

1) In Dev box --> PFCG --> give the role you want to delete --> click the transport button --> create a transport request .

Remember the transport request number.( don't release the request )

2) Delete the role in Dev box in PFCG by clicking the delete button.

3) Now in SE09 in Dev box, release transport request created in step 1.

4) Import the released the request to your test and prod box.

Now you can find the the roles has been deleted.

Please check and confirm.

Hope this will help you.

Regards,

Partha

[Former Member · Accepted solution]

Hi Partha,

Sorry for delay, I want to say you are right!

I've deleted a role successfully between DEV&QAS according to detailed steps you posted on Jan 27, 2009.

I am very happy! Thank you very much! You help me resolved the problem.

I will close this thread later because I have one more question:

If I want to delete a lot of useless roles between DEV&QAS, How can I do? (You just taught me how to delete a role between DEV and QAS. )

Is there a way to wrap the useless roles as a package and then transport it into QAS or PRD?

Hi Pranay,Ruchit Khushu,

You also gave me very valuable information about this problem. Thank you very much!

Jason

[JPReyes · Accepted solution]

I will close this thread later because I have one more question

Only one quetion per thread, read the "Rules of Engagement".

Please open a new thread.

Regards

Juan

[Former Member · Accepted solution]

Hi Juan,

Thanks for your kindly notification.

I will post a new thread later.

Regards!

Jason

[Former Member]

Hi,

You can't do this if you not logged in your production box. There is only one way to do this using t_code pfcg in production box.

Goto --> pfcg --> provide your roll --> press delete button.

Hope this will help you.

Regards,

Partha

[Former Member]

Hi,Partha

Thank you very much.

I know the method you posted above. But the operation process in my company is:

(1)Make Changes in DEV (For example: Configure SYS or Strengthened Develop.)

(2)Transport the request generated in DEV into QAS.

(3)Test the new changes in QAS.

(4)Finally, transport the request into PRD if test in QAS is successful.

So We do our best to avoid changing anything directly in PRD (Included deleting the role).

Someone told me we can delete the role we no longer needed by STMS.

I want to know how to delete the role we no longer needed via STMS or other methods you know.

[Former Member]

Hi Jason,

I got your point. What you are telling is the standard SAP recomendation . But your reqirement canot be met as transport request generates during your role generation , but no request generates in time of role deletion.

One remote way is by client export-import using sap_prof and sap_user.

I hope you can test it and confirm it.

Regards,

Partha

[Former Member]

Hello Partha,

If you read the standard popup message that comes while deleting a role you would easily know how your requirement can be met. Before deleting the role include it in a transport request. Carry out the deletion and then release this transport across your landscape i.e to QAS and PRDN systems. The roles will get automatically deleted.

Regards.

Ruchit Khushu.

[Former Member]

Hello Ruchit Khushu,

Yes, you are right! I try to delete a role via PFCG. It popuped a message like:

'

First enter the object belonging to the role in a transport request if you want to transport the deletion. If you continue processing now, you can then only transport the deletion if the role was already entered in

a transport request.

'

It looks I can delete a role using the SAP transport system across the DEV,QAS and PRD clients.

Could give me more details of deleting a role via PFCG?

Regards.

Jason