05-26-2015 5:08 PM
Hi SAP Security comrades,
I've a question from SAP 4.6 system - we need to remove the expired roles (duplicate ones) from users account. I checked in SA38 to run the program PRGN_COMPRESS_TIMES but it says "
Is there any other program or way to remove the expired roles in 4.6 ?
Thanks,
Daya
P.S Manually removing would be the end of the world / last option, which we don't want to get in
05-28-2015 9:30 AM
Hi,
not in standard in 46C....
Suggestion for a manual approach:
- read assignments from table agr_users.
- Filter outdated assignments.
- Pass the rest to bapi_user_actgroups_assign (through a wrapper report) to assign only the valid ones. Mind special handling for indirect assignements (composite roles and hr-org assignments).
b.rgds, Bernhard