Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Removing roles using SU10

Former Member
0 Kudos

Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.

thanks

1 ACCEPTED SOLUTION

Former Member
0 Kudos

you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.

11 REPLIES 11

Former Member
0 Kudos

>

> Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.

>

> thanks

Got to SU10 -> In the Roles Tab select the remove option, enter the Role Name + "Valid From" + "Valid To" dates.

The valid from and to date should match what is displayed in SU01 for the user.

Edited by: John Navarro on Feb 20, 2009 7:06 PM

Added Go to SU10

0 Kudos

John, thanks for the reply but it is not what i want accoplish. I want using SU10, users completely gone from user's tab in PFCG. what you have suggested is the status quo.

0 Kudos

>

> John, thanks for the reply but it is not what i want accoplish. I want using SU10, users completely gone from user's tab in PFCG. what you have suggested is the status quo.

Friend,

It is not status quo. Did you actually try at least one user ID in SU10 entering the role, valid to and from date. It will not just delimit it, it removes it entirely from any reference in SU01 & PFCG.

It basically answers your question "is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them."

Good Luck!

0 Kudos

Thanks John ...it really does delete if you have the exact role name valid to and valid from dates as you have in SU01.

Former Member
0 Kudos

Hi,

I am not sure if with SU10 you can delete a role...what it does is that it delimits with a date as you have already said and seen.

Why do not you use PFCG instead to delete the users from the Roles itself....this way the roles will not be in the user ids.

Former Member
0 Kudos

you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.

Former Member
0 Kudos

This message was moderated.

Former Member

If you want to delete all the assignments, the dates for the deletion in

SU10 should be "valid from" as 01/01/1900 and "valid to" as 12/31/9999

Just try it.

0 Kudos

Actually, this is the best solution, you can delete roles as Peeyush described, without need of PRGN_COMPRESS_TIMES program.

Former Member
0 Kudos

Thank you all, for your input.

former_member190027
Participant
0 Kudos

Hi ,

But in the PRGC_COMPRESS_TIMES Program please select the option "Delete Expired Assignments", and I suggest please try for one user and then do for all the other users.

When we did for mass users we faced some issues with that, so requesting you to try it for one user and then do for all the others users if its worked.

Thanks!