Skip to Content
author's profile photo Former Member
0
Former Member

Role Validity Period Problem

Posted on Oct 31, 2007 at 05:18 AM 233 Views

Hi guyz,

I have a few questions,

1) I want to know the roles that are going to expire in this month, suppose say from NOV 1 to NOV 30. Is there any Program or any TCODE that can give me the details.

2) In which table are all the roles that have been created stored. I believe the name of the table starts with "AGR*" , but i dont know which one.

Thanx in Advance

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • author's profile photo Alex Ayers
    Alex Ayers
    Posted on Oct 31, 2007 at 08:49 AM
    0

    Hi,

    1. This info will be in table agr_users - you can filter on the validity dates (fields from_dat, to_dat)

    2. Role data is most easily accessible with table AGR_1251 & 1252. The data for the profiles that give the actual access reside in various US* tables, most notably the USR* ones.

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Dec 03, 2007 at 12:34 PM
    0

    The tables list related to role is :

    AGR_1016 Name of the activity group profile

    AGR_1016B Name of the activity group profile

    AGR_1250 Authorization data for the activity group

    AGR_1251 Authorization data for the activity group

    AGR_1252 Organizational elements for authorizations

    AGR_AGRS Roles in Composite Roles

    AGR_DEFINE Role definition

    AGR_HIER2 Menu structure information - Customer vers

    AGR_HIERT Role menu texts

    AGR_OBJ Assignment of Menu Nodes to Role

    AGR_PROF Profile name for role

    AGR_TCDTXT Assignment of roles to Tcodes

    AGR_TEXTS File Structure for Hierarchical Menu - Cus

    AGR_TIME Time Stamp for Role: Including profile

    AGR_USERS Assignment of roles to users

    This will solve your issue.

    ***********Kindly, follow the best practice of rewarding points ********

    Add a comment
    10|10000 characters needed characters exceeded

    • Alex Ayers Former Member
      Dec 04, 2007 at 04:03 PM

      You can only make it valid for a period of time against a user. This is done in the roles tab of SU01, although I think (haven't checked it) you can do it in the users tab in PFCG too. You need to have PFUD scheduled for this to work properly though.

      There is no way in standard SAP of flagging a validity period on a role directly

    Comment on This Answer

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.