Directly assigned Roles and users.

[Former Member]

Friends,

We are role based secruity in ECC 6.0, however, some of the roles have been assigned directly to the users.

How can I find out the the list of users and Roles that are directly assigned?

SUIM, I did not see it. Is there a report that would provide this list?

Praveen.

____________________________________________________

[Former Member]

Again, just to add to my post

We are HR position based security. Roles are indirectly assigned to positions.

Let me know if you have any suggestions.

Praveen

[Former Member]

I think you mean that roles are indirectly assigned to users by directly assigning them to positions, right? (the other way around?)

As of release 7.01 transaction SU01 provides more information related to the "directness" of the assignment in an additional column, and where it came from.

For normal ABAP authorizations I would still concentrate on profiles for such a "drill down", to be honest.

Cheers,

Julius

[Former Member]

Hi Julius

Thanks for looking into my question.

I was refering the directly assigned Roles to users in SU01.

I need to get the list of those Roles and Users so that I can assigned indirectly to their positions.

Let me know if you have any suggestions where I can pull the list of users who are assigned the roles directly in SU01.

Many thanks,

PT

[arpan_paik]

Check table AGR_USERS for proper checks in 2 field ORG_FLAG, COL_FLAG.

[Former Member]

Hi

Run the transaction PFCG then search the roles related to requirment like FI, SD,PP,MM and put ZMMPO* then press F4, you got the list of roles related to your requirment then put user id in below tab and assigned the roles to the user directly.

Thanks

Manish Gupta

[Former Member]

Hi,

You can have this report from SUIM itself.

1. Excute SUIM

2. Drill down User and then Users by complex selection criteria

3. Execute the node By User ID

4. In the next scree, leave everything blank and then execute

5. In the resulting screen click on the Roles button to get the list of roles assigned to individual users.

Hope this helps.

Regards,

Varadharajan M

[arpan_paik]

Like to add one more point. After this report output in SUIM filter the data as per your need.

Filter -> Assignment Type -> @1G\QDire

In this way it will show the roles that is assigned directly to users regardless of composite or single.

Reg,

Arpan

[Former Member]

Hi Pranav,

You can find the list of directly assigned roles to users in AGR_USERS table.

Roles which are assigned through HR ORg assigned , a "x" will be marked in column " assignment comes from HR Organisational mgmt".

So in the selection screen, give a space " " in the HR ORg mgnt , then you will only get the list of Directly assigned roles to users.

Hope this helps you.

Thanks,

Sanketh.

[Former Member]

Thanks, Sankesh

Pranav

_________________________________________

[Former Member]

This message was moderated.