Problem in SUIM

[Former Member]

Hi expert,

I have removed the authorization of one T-code from one user.T-code is not showing in that User’s role ,even user cannot access that t-code.But problem is that when I go through SUIM,T-code is showing on that user’s role.It is showing that user have the access of that t-code whereas user can’t access.Can anyone tell me the reason?

[Former Member]

Hi,

did you remove tcode from role menu or from authorization -> profile -> S_TCODE object

regards,

kaushal

[Former Member]

Hi,

I have removed fron Role menu.In S_Tcode it is also not showing.Only when I execute SUIM it is only showing that the user have the authorisation..

[Former Member]

Hi,

in SUIM what you execute?

SUIM -> Transactions ->Executable for User

or

SUIM -> Users by Complex Selection Criteria -> By Transaction Authorizations

regards,

kaushal

[Former Member]

Hi,

SUIM -> Users by Complex Selection Criteria -> By Transaction Authorizations

[Former Member]

Hi,

might be user have another role attached which contain that tcode,

if user have single role attached then check following.

SUIM -> Transactions -> Executable for Role check for that tcode whether it exists or not?

did you make user comparison after remove tcode from role ?

regards,

kaushal

[Former Member]

If I go through --SUIM -> Transactions -> Executable for Role check ,t-code is not showing.

I have done user comparison,it is also showing green.

[Former Member]

Hi,

i already told you that user have another role which contain this tcode.

check the other role of user.

regards,

kaushal

[Former Member]

Hi expert,

User have only one role attached.

[Former Member]

Hi,

for which tcode is make conflict?

any profile is attached to user?

regards,

kaushal

[Former Member]

Tcode is OB52.

there is one profile attached to it i.e SAP_ALL

this profile contains tcode OB52

Can i removed from profile?How can i removed?please suggest.

[Former Member]

Hi,

if SAP_ALL profile attached to user than attached role does not take the effect.

remove SAP_ALL profile from user master

SU01 -> userid -> change ->select profiles tab and remove SAP_ALL profile.

save.

regards,

kaushal

[Former Member]

Hi expert,

Thanks!!!! I have done it.When i removed from profile,it is not showing..Can u please tell whether it creates any other problem to that Role or User.Because this Role has been attached to other user also.

[Former Member]

Hi,

no it did not affect to the ROLE

your problem is solved please close this forum thread.

regards,

kaushal

[Former Member]

Hi expert,

Thanks !!!!

[Former Member]

Hi,

Make sure that you have made the user comparison for that role

Thanks and regards,

Meghan Kambli

[Former Member]

Hi,

I have done it.Even User Comparison is showing green.

[former_member204746]

try the Security forum to get a better chance of good answers. you can access it at

good luck!