Deleting invalid role assignments

[Former Member]

Hello,

is there a way to delete role assignments automatically if the validity period is out of date? I know that you can do it manually via transaction SU01/SU10 but maybe there is a report that recognizes if there are invalid assignments.

Kind regards

[Former Member]

Hell Dennis,

As pointed out by Juan standard SAP doesnot provide that functionality. However I guess you can do that by writing a simple update report.

Look out for AGR_USERS table as data source.

Regards

Ruchit.

[Former Member]

hello ruchit,

If i got it right, dennis has asked for de- attaching roles to user id and not deletion of roles. so pfcg_time_dependency does that. where as there is not functionailty to delete roles by running a report.

jet l.....i

[Former Member]

Hello Jet,

Then you have some wrong idea of the role of PFCG_TIME_DEPENDENCY. It does clean up of assignment of obsolete roles (deleted roles) not the ones out of validity period. At least this how it behaves on my system!!

Regards.

Ruchit.

[Former Member]

Hi,

schedule the report " PFCG_TIME_DEPENDENCY " in background to run it daily.

jet l.....i

[Former Member]

What will PFCG_TIME_DEPENDENCY do in this case ?

[JPReyes]

As far as i know PFCG_TIME_DEPENDENCY wont clean up the invalid expired roles...

As i mentioned before ... I don't think this is possible.

Regards

Juan

[Former Member]

Hi Dennis Gruschka,

When you create role, I think you can setup experation of role which is equalt to no use of that role.

Thanks,

Feel free to revert back!

[JPReyes]

I think thats not possible.

Regards

Juan