Role Removal for users

[Former Member]

Hi Guys

How do we remove the role Y.R3.IS-XX.xxxxxx from all test users (T-) and assign the role Y.R3.IS-XX.RPT_FI_XXXX to all test users (T-) in Q

Any input on this is highly appreciated

Thanks

SV

[Former Member]

Hi,

Inorder to remove the role from the users , go to the role using pfcg and under the user tab you can select all the users and remove them . In this way you can remove the role from the users.

Assignment of Role is also done in the same way.

Chav

Pradeep.Gali

[Former Member]

Thanks Pradeep for the reply. But users tab in PFCG does not have delete button to remove the desired users. Any suggestions on this would be helpful

Thanks

SV

[Former Member]

Ven

there is a delete button, select the users you want the role to be removed from, if you want all to be removed choose the 3rd button from left (Select ALL) and then push the 2nd buttom from left (the one with the MINUS SIGN).

[Former Member]

Hi Visser

Do we have to do in CUA or the child system(QA here)

Thanks

SV

[Former Member]

Hi,

1. Use T-Code SCAT and create template for adding or removing roles for user.

or

2. Use T-Code SCAT and create template for removing or adding users from roles.

User this template as and when required.

If you need further information let me know.

Cheers

Soma

[Former Member]

Soma

Can you please give me detailed procedure on how to create a template in SCAT to remove and add users for the desired roles.

Thanks in advance

SV

[Former Member]

Hi,

if you want a perticular role to be deleted you can go to pfcg give the role name and press edit and goto user tab and select all the user and here you will find one tab similar to <b>selectall with redminus</b> symbol this symbol is used to delete the user list

If you requirements are must you can use the following method.

You can use T-Code “SCAT “

This is a very best tool to execute any work which is repetitive in nature.

For example if you are delete a single role in multiple user

First record a single process. Then this will give you a template in which you can add the reset of the role names (you can go up to 1000 also)

Once you follow the process the system updates automatically all the roles mentioned in the template (in a very shot time)

Samrat

[Former Member]

Hi,

you can also use transaction SU10 for mass changes.

regards

Holger

[Former Member]

Hi,

If you need to do changes to two roles then the best method is

Using T-Code PFCG.

If you have multiple roles and mutiple user then its better to user T-Code SCAT.

Let me know which method do you want (PFCG or SCAT)

If you need step by step I can help you

Cheers

Soma

[Former Member]

Soma

Can you please mention the step by step procedure using SCAT

Thanks in advance

SV

[Former Member]

Hi,

I am just sending you a sample of how to delete role using SCAT. you can modify to delete User from Role.

Use T-Code SCAT.

You will be prompted with initial screen

Test case enter some name ex: Z_MASS_ROLE_DELETION

Click on Create (Blank page icon)

In the initial screen on left corner button TCD click on this for recording a transaction.

Enter T-code in PFCG

Click on -> arrow button to continue

In the next screen you will be displayed with PFCG screen

Enter the role Name which you want to delete

Click on the Delete button (Bin icon)

You will be prompted with message box with yes or no and cancel

Click on Yes

You will be prompted with information acknowledge it by click on continue

Now the role is deleted.

Click on Back button (F3)

You will prompted with Intial screen where you have enter T-code in the pop-up box (PFCG)

Click on RED small button to stop of recording the transaction

You will be prompted with next screen for Title.

Enter the Title ex: Mass Role Deletion

Click on SAVE button

Save as local object (click local object button)

Go Back by click F3 (Back arrow button on the menu)

Pop up box with save option appears save

Click on YES

You are ready with recording of T-Code PFCG

To create a variable click on the edit (Pencil icon)

In the next screen you will be prompted with

C Funct. Object Text

TCD PFCG Role Maintenance

Double click on TCD column

In the next screen you will have the following information

Test case Z_MASS_ROLE_DELETION PFCG Role Maintenance

Transaction PFCG Role Maintenance

Permitted msg.

Processing Mode

In the above screen click on FILED LIST button which is on top left menu bar.

In the next screen you will find the list of values check for the Variable part (ie role name what we have mentioned at the time of recording (TEST123 ROLE)

Role AGR_NAME_NEU 030 TEST123

Replace TEST123 with & (this is done for the variable to be replace in future for new values)

Go back (F3) twice into initial screen and save

In the initial screen SCAT first screen

Go to the menu

GOTO -> Variant -> Export

Export will create a Text file (Z_MASS_ROLE_DELETION.TXT) save it on your desktop for easy editing

Open with EXCEL above text file (Z_MASS_ROLE_DELETION.TXT)

You will find below values

[Variant ID] [Variant Text] &AGR_NAME_NEU

--> Parameter texts Parameter contents

--> Default Values TEST123

• Changes to the default values displayed above not effective

Place the list of roles which you have decided to delete under the column TEST123

Just Save file for any message just click on yes button.

Come back to SCAT initial screen click on execute (F8) clock icon on the right corner of menu tab.

In the next screen you will have option to choose

Log Type Processing Mode Variants

Long Errors External From file Choose

Choose the file (Z_MASS_ROLE_DELETION.TXT) which was edited with new values

Then Execute all the roles which are in file will be deleted.

I hope this helps

Try this with test roles first then on the Actual roles

If you have any problems let me know

Cheers

Soma

[Former Member]

Thanks Soma for all Step by Step process

But actually i was stuck in the 2nd step where you wanted me to record(TCD)

When i click on the TCD button i get the message below

<b>Releases higher than 6.20 are not permitted

Message no. TT005

Diagnosis

With Web Application Server Release 6.40, you cannot create new automated CATT test cases. However, you can still create manual CATT test cases.

Editing and executing existing automated CATT test cases is still possible. For more information, see the release notes.</b>

[Former Member]

William

The most simple solution is to go to the role using PFCG and manually removing the users.

For assigning a different role. Go to SU10 and input the list of users if you have or if you know the User Group then go to the Authorization Data tab

Once you go into the tab then type your user group in the GROUP FOR AUTHORIZATION and execute. This will pull in all the users in that group. Now select the users that you want and then click change pencil

Go to the role tab

Add the role you want them to get access for and click save

Log will show you how many users were touched.