Skip to Content
avatar image
Former Member

GRC 10.1 Role Maintenance - Remove roles from users

Hi all,

We are working in GRC 10.1 SP07.

Can anyone tell me if it is possible to unassign roles to users in the backend system trough GRC?

For example, a user has a role assigned to him but now we want to remove that role from him in the backend system.

We know that we can do it in the backend system using tcode SU01 (or SU10 for mass user update).

Our doubt is: knowing that we already have all the roles imported to GRC, can we use GRC to remove the assignment?

Thank you in advance.

Best regards,


Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • Jun 05, 2015 at 04:28 PM

    Hi Denise,

    Yes, you can add/remove/retain roles to user from GRC via GRC access requests.

    1. Import all target system roles in GRC.

    2. Setup access request workflows as per your requirement.

    3. Once above activities are completed, you can submit access request for roles removal.

    Just that your request type should have action "REMOVE" included.



    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Denise, You can do this through a webdynpro scripting. but I would go with option suggested by Madhu if the removals are minimal, If you have massive removals then you can write a webdynpro ecatt script which can be run to create GRC removal requests.