SAP profile exists with expired role

[Former Member]

Dear Support,

We have a weird scenario here. We had delimited an SAP role with date validity which got expired already. However, despite that the corresponding profile still exists and we're able to use the related transactions as well. We used FireFighter user id to assign & de-limit this role. Moreover, the background job with ABAP program PFCG_TIME_DEPENDENCY runs daily and shows that the user comparison for this role has been adjusted. We noticed this issue on our NetWeaver 7.40 & 7.51 SAP systems. Could you please let us know what could be the cause of this and how can this be prevented ?

[Colleen]

Hi Manor

Have you looked in the user buffer to see how they are getting the profile - confirm it is definitely a role removed?

Try running PFUD cleanups if the role validity has been expired to see if it's a table synch issue.