Skip to Content

SAP profile exists with expired role

May 29, 2017 at 01:54 PM


avatar image
Former Member

Dear Support,

We have a weird scenario here. We had delimited an SAP role with date validity which got expired already. However, despite that the corresponding profile still exists and we're able to use the related transactions as well. We used FireFighter user id to assign & de-limit this role. Moreover, the background job with ABAP program PFCG_TIME_DEPENDENCY runs daily and shows that the user comparison for this role has been adjusted. We noticed this issue on our NetWeaver 7.40 & 7.51 SAP systems. Could you please let us know what could be the cause of this and how can this be prevented ?

10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

1 Answer

Colleen Hebbert
Jul 07, 2017 at 11:14 AM

Hi Manor

Have you looked in the user buffer to see how they are getting the profile - confirm it is definitely a role removed?

Try running PFUD cleanups if the role validity has been expired to see if it's a table synch issue.

10 |10000 characters needed characters left characters exceeded