Usage column in UAR requests

[sonny_samarak]

Hello All,

When we conduct our User Access Review, most role owners are making their decision to keep or remove a role based on information displayed in the “Usage“ column. Is there a way to create the requests so that it will only report usage for the last 12 months? For example, if a user did not use any of the transactions in a role assigned to him/her during last 12 months, the usage column should report a zero value.

Appreciate any help.

Sonny

[Former Member · Accepted solution]

Hi Sonny,

Could you try to use ADMIN REVIEW stage to save only those requests, which are less than 12 months old.

The UAR generate job, picks up data stored by Role Sync, User Sync,  ACTION USAGE and ROLE USAGE jobs. Since you should not modify these jobs, they will pick up data which are more than 12 months. the workflow requests will also contain data more than 12 months old. So, i think, this is not possible.

However, the 1st stage of the workflow can be sent to Security team , to reject such requests.

Regards

Plaban

[sonny_samarak · Accepted solution]

Hi Plaban,

Thanks for your response.

We do have an Admin Review stage setup. But it will be almost impossible for the admin team to review the usage of each and every role. They will have to check ROLE USAGE table for every user in each UAR request.

Regards,

Sonny

[alessandr0]

Dear Sonny,

this is not possible as the requestes are created based on user-to-role relationships. The usage count (e.g. role usage) is just additional information that are presented to the approver.

It is maybe worth to open an idea on the ideas place that out-dated role usage information can be deleted: SAP Access Control: Home

Hope this helps.

Regards,

Alessandro

[sonny_samarak]

Thank you Alessandro. I will open an idea on the ideas place.

Regards,

Sonny