Removing roles using SU10
Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.
you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.