11-14-2008 12:19 AM
hello all,
i have a question... i want to keep track of all histories of what are the "user groups" that have been assigned or deleted to the users (in su01 , tab "groups") and i am using suim->change documents for users.... but the problem is that, i can see only certain list of the user group that have been recorded in suim. not all user groups has been recorded in suim.... do i need to enable certain things?
however the history list of roles assignment in suim is good and its all recorded...
thanx for your help/input.
11-14-2008 6:22 AM
Hello guys,
assignements of usergroups are not recorded in the changelogs. There is only one exception, that is the
assignement of a user group for authority-check. This assignement is to be done on the logon-tab in SU01, not on the groups tab. If you want to keep track on the groups-usergroups assignements, monitor changes of table USGRP_USER.
b.rgds, Bernhard
11-14-2008 1:22 AM
Hi
I dont think there is a chance of missing out of history of User Group Assignment when you check change documents for User records. May be that all User groups are not assigned to Users. Pls check with your Security team if they had assigned Users to Usergroups before.
Regards,
Kiran Kandepalli.
11-14-2008 2:16 AM
hi,
thats what i thought too... but unfortunately it happen... by the way i have sap_all authorization... and i have already tested in my prod/qas system... same result... when i put in multiple user groups in su01 under "groups" tab, and then saved it, then i deleted it.... it still doesnt show in the suim.... any idea?
11-14-2008 5:46 AM
Hi,
From my knowledge point of view, the change documents about user groups not get stored in tables. Even I tried to test of assigning user groups and then deleting and after that checked weather change documents for user groups appears in SUIM , but it doesn't.
For more information, please check USH* tables where change documents get stored.
Regards,
Sneha
11-14-2008 6:22 AM
Hello guys,
assignements of usergroups are not recorded in the changelogs. There is only one exception, that is the
assignement of a user group for authority-check. This assignement is to be done on the logon-tab in SU01, not on the groups tab. If you want to keep track on the groups-usergroups assignements, monitor changes of table USGRP_USER.
b.rgds, Bernhard
11-14-2008 7:11 AM