02-20-2009 5:45 PM
Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.
thanks
02-21-2009 12:01 AM
you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.
02-20-2009 6:06 PM
>
> Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.
>
> thanks
Got to SU10 -> In the Roles Tab select the remove option, enter the Role Name + "Valid From" + "Valid To" dates.
The valid from and to date should match what is displayed in SU01 for the user.
Edited by: John Navarro on Feb 20, 2009 7:06 PM
Added Go to SU10
02-20-2009 6:13 PM
John, thanks for the reply but it is not what i want accoplish. I want using SU10, users completely gone from user's tab in PFCG. what you have suggested is the status quo.
02-20-2009 6:56 PM
>
> John, thanks for the reply but it is not what i want accoplish. I want using SU10, users completely gone from user's tab in PFCG. what you have suggested is the status quo.
Friend,
It is not status quo. Did you actually try at least one user ID in SU10 entering the role, valid to and from date. It will not just delimit it, it removes it entirely from any reference in SU01 & PFCG.
It basically answers your question "is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them."
Good Luck!
02-20-2009 11:58 PM
Thanks John ...it really does delete if you have the exact role name valid to and valid from dates as you have in SU01.
02-20-2009 6:53 PM
Hi,
I am not sure if with SU10 you can delete a role...what it does is that it delimits with a date as you have already said and seen.
Why do not you use PFCG instead to delete the users from the Roles itself....this way the roles will not be in the user ids.
02-21-2009 12:01 AM
you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.
02-21-2009 1:39 PM
02-23-2009 11:29 AM
12-23-2013 9:45 PM
Actually, this is the best solution, you can delete roles as Peeyush described, without need of PRGN_COMPRESS_TIMES program.
02-23-2009 8:01 PM
12-24-2013 6:44 AM
Hi ,
But in the PRGC_COMPRESS_TIMES Program please select the option "Delete Expired Assignments", and I suggest please try for one user and then do for all the other users.
When we did for mass users we faced some issues with that, so requesting you to try it for one user and then do for all the others users if its worked.
Thanks!