Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.