Mass user Administration

[Former Member]

Guys...

I have strange problem... In our environment i need to remove all the roles assigned to particular users ( some 300 users with different authorizations) and give them one new role which i have created. how can i do this mass change.. i have tried this through su10, but i cant do it.do i need to do it by going to table "agr_users" and delete them or can i do this in su10....please advice....Thanks in advance..

sri

[Former Member · Accepted solution]

hello Sri A,

The solution is simple.

However there can be 3 approaches to solve this.

1. Since you want to delete all role assignments done to all the three hundred users it does not matter if you choose only the roles assigned to them or even the ones not assigned to them .

So go to SU10 and uplaod the list of all the three hundred users.

Then under role tab select do an F4 on the roles field without giving any input.

You will get the entire list of all the roles in the system. use select all option and all roles will get populated. Press enter now Next in the field Valid From give a very old date say : 01.01.1900 and Valid To you may give 31.12.9999. This date part is very critical and very important.

Select the radio button Remove and press save.

A better option than this is to actually find all the roles assigned to these 300 users through RSUSR070 and give only these roles in SU10 and follow the remaining steps mentioned above.

The third solution is to develop a CATT tool. Do a recording for one user and implelement it for remaining 299 users.

Please award points if issue got solved.

With Regards.

Ruchit.

[Former Member · Accepted solution]

Hi Ruchit ,

How tho develop a CATT script..Could u plz elobrate the process...

Regards

Umesh K

[Former Member · Accepted solution]

Hi,

You can configure catt scripts with the using of tcode scat.

call transaction and then enter the catt script name...which u desired. then click on create and enter the description.

then click on tcd button(to record transaction) or fm for function module.

then call the transaction which you want to record.

[Former Member · Accepted solution]

Hi,

After this how to proceed..how to change username to variant in catt..

Regards

Umesh k

[Former Member]

Hi,

Hi

Try this out

run program RSUSR070 for roles based on multiple user selection

give selection criteria(like user group etc) based on usergroup or address etc in user selection

you will get the list of roles

But before deleting make sure if these roles are also shared by other users by cheking in user assignment in the same screen

Regards,

Phani

[Former Member]

Hi All...

First of all..thanks for the replies..they showed me the way...i have solved it by using catt scripts...

in catt scripts ..i went to su01, after that i went to roles tab ......select all tab...delete all tab ...then went to profiles tab...select all ...delete all tab...and then save and come back out to transaction and recording in catt...then i changed the username to variant in catt ... then went to variant and export default ...exported the variant txt file to desktop...opened it in excel...added the user to be added and imported the file while execution..it all worked...

I will be adding the role by user assignment in pfcg...

Thanks....

[Former Member]

Good to hear that..

Also you can assign the same role to various users Via SU10

Mass user- role assignment

All the best Sri

Br,

Sri

Award points for helpful answers

[Former Member]

Hi Sri,

A bit confusing, as u say you are removing some properly set Authorizations for 300 users and assigning them One single role. What in SAP does this one role copntain .. looking from other perspectives...

Anyways, for such Mass changes to users standard recording routine can be written with the help of abapers.

Infact i generally do the Mass assignment Via SU10 only . After indicating Add/remove please note that the Tick option on the right hand side which shows CHANGE shd be ticked. Else the changes would not reflect in child systems or so on.

-

---

Inputs from fellow blogers on a similar issues in another forum is as below..

you may want to run an ecatt or catt script that execs pfcg/delete role

and supply the 3800 roles via excel spreadsheet as input.

or

copy a client that only has the needed roles/users with sap_user copy

profile.

or

have an abaper write a program to exec pfcg and delete the roles.

Eric Griscom

IBM Global Business Services

IT Infrastructure/SAP Basis

-

---

Hope it helps.

Br,

Sri

Award points for helpful answers

[Former Member]

Hi,

i think you cannot delete role using su10.

try this link

what i can suggest is delete all the user in su10

and again create in su10 and assign role (since it is comman to all)

Samrat