GRC 10.1 Role Maintenance - Remove roles from users

[Former Member]

Hi all,

We are working in GRC 10.1 SP07.

Can anyone tell me if it is possible to unassign roles to users in the backend system trough GRC?

For example, a user has a role assigned to him but now we want to remove that role from him in the backend system.

We know that we can do it in the backend system using tcode SU01 (or SU10 for mass user update).

Our doubt is: knowing that we already have all the roles imported to GRC, can we use GRC to remove the assignment?

Thank you in advance.

Best regards,

Denise.

[madhusap]

Hi Denise,

Yes, you can add/remove/retain roles to user from GRC via GRC access requests.

1. Import all target system roles in GRC.

2. Setup access request workflows as per your requirement.

3. Once above activities are completed, you can submit access request for roles removal.

Just that your request type should have action "REMOVE" included.

Regards,

Madhu.

[Former Member]

Hi Madhu,

Thanks for your answer.

I forgot to say that we want to do this massively, like in ECC with tcode SU10.

Is it possible?

Regards,

Denise.

[madhusap]

Hi Denise,

You can use Request For option as "Multiple"  and can do mass assignment/removal.

Only thing is by this way you will be able to assign/remove same roles for all users.

Regards,

Madhu.

[Former Member]

Thanks Madhu.

I'm going to see if it works and will let you know.

Regards,

Denise.

[Former Member]

Denise, You can do this through a webdynpro scripting. but I would go with option suggested by Madhu if the removals are minimal, If you have massive removals then you can write a webdynpro ecatt script which can be run to create GRC removal requests.

thanks

Rakesh