CUA issue; after roles are removed systems assigned to users remain?

[Former Member]

Hello,

I've had this specific issue with CUA for some time, but haven't needed to try and resolve until now.

The problem is this:

- after security roles for a user have been removed for an entire system, in the system tab entries remain.

- this results in the user account remaining in the child system, even though there are no security roles assigned.

I have tried removing system entries once all roles are removed, however after saving the changes I see that the systems still exist.

So, can anyone comment on why this happens? Is there an SAP note to resolve this?

Appreciate the feedback.

Paul

[Former Member]

What is your problem with that?

Once created / assigned you should not delete users. At least not easily.

Local / global lock or validity is sufficient. Removing all authorizations (also profiles!) also achieves the same (bar program vulnerabilities which require no authorizations).

-> you should not delete users, which is functionally equivalent to removing system assignments.

Or are you really sure that your intention is to delete the user ID completely?

Cheers,

Julius

[Former Member]

Thanks Julius.

My intention is not to delete users. What I'm expecting to happen is that after I remove all the roles assigned to user for a specific child system, that user should not exist in the child system anymore.

This is the way it has worked for many child systems, but not all. For me it's specifically my production systems where a user account remains after all the roles have been removed.

In dev/test systems I've removed all roles assigned to a user and after saving their account no longer exists in those dev/test systems.

Make sense?

Paul

[Former Member]

Hi Paul

If you remove system from system tab then system as well all roles removed.

But If you say that removal of all roles will make removal of respective system that is not correct as due to workflow functionality or notification purpose user id should be there in that system, so as standard removal of system will not happen.

If you still need then perform Partner profile action setting in SALE.

Thanks

Bhupinder Singh Arora

[Bernhard_SAP]

Paul Vipond wrote:

Thanks Julius.

My intention is not to delete users. What I'm expecting to happen is that after I remove all the roles assigned to user for a specific child system, that user should not exist in the child system anymore.

If you delete the system assignment for a child system, A deletion of the user in that system will happen.

Paul Vipond wrote:
This is the way it has worked for many child systems, but not all. For me it's specifically my production systems where a user account remains after all the roles have been removed.

In dev/test systems I've removed all roles assigned to a user and after saving their account no longer exists in those dev/test systems.

Make sense?

If that is so, that is a bug in your dev/test system. I suggest to open an incident wiht SAP then.

It should work like in a standalone system.... Removing all roles there will never lead to a deletion of that user!

b.rgds, Bernhard