profiles

[Former Member]

By mistake I run the progrm pfcg_time_dependency in production system. In SUIM history its showing profiles deleted. Does it causes any problem

[Former Member]

You should have it scheduled to run periodically (usually overnight during a quiet time) anyway, usually there is no problem when running it.

Have a look at transaction PFUD and read the F1 documentation associated with the user compare function

[Former Member]

Hi

This report is supposed to be scheduled to run on ur system on a daily basis.

Also I suggest you not to assign gererated profiles to user master rather assign the roles to them

For furthere reading

http://help.sap.com/erp2005_ehp_04/helpdata/EN/52/671583439b11d1896f0000e8322d00/frameset.htm

[former_member701183]

Hi,

Dont worry. It will delete the profiles only assigned to users against which there are no roles present. It is recommended as discussed before to assign roles via pfcg and not generated profiles, else this situation will take place. Just assign the roles to users whose profiles got deleted.

Regards

Aveek.

[Former Member]

Hi Sreenivasu,

Yes,whenever the report is run,all the profiles,which are assigned to the users,without the corresponding role(s) will be removed from users' account.

Hence it is always recommended not to assign profiles directly to users,but instead assign roles to users.

Peeyush

[Former Member]

Apart from all these....(one thing which may worry you for your "mistake".. is it will show your ID in the change history for role removal... which may bother you !!

Its a good idea to have it run under some non-dialog user ID.

Cheers !!

Zaheer

[sdipanjan]

Is it the forst time this Job has been executed in Production system? If yes, then how you used to maintain temporary assignment of roles?

> By mistake I run the progrm pfcg_time_dependency in production system. In SUIM history its showing profiles deleted. Does it causes any problem

This is not a "Mistake".. This program (main program name is: RHAUTUPD_NEW) is not meant to create problem, rather to solve problem.

It will remove the profiles of Roles which have passed the Validity date.. so that the user doesn't get the access any more.

It also put the authorization instances in the user buffer in the current status every day.

So, schedule it on daily basis (during idle time of server) and of course use a Non-Dialog user id. (as already instructed in other Posts)..

Regards,

Dipanjan