Skip to Content
avatar image
Former Member

Removing roles using SU10

Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.

thanks

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

7 Answers

  • Best Answer
    avatar image
    Former Member
    Feb 21, 2009 at 12:01 AM

    you can run program PRGN_COMPRESS_TIMES once you are done with the mass role assignment removals with SU10. this will remove the expired roles from all users or specific users or specific set of roles.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 23, 2009 at 11:29 AM

    If you want to delete all the assignments, the dates for the deletion in

    SU10 should be "valid from" as 01/01/1900 and "valid to" as 12/31/9999

    Just try it.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 20, 2009 at 06:06 PM

    >

    > Hi fellas. I used SU10 (mass user update) to remove roles from number of users. but it resulted in changing the validity date (expired date) instead of completely removing the role. i dont have any problem with that because the access has removed as intended, but when the process owners pull the report they dont look at the validit dates and just think the access still exist. is there any way we can configure SU10 to remove the roles completely from users instead of just delimiting them.

    >

    > thanks

    Got to SU10 -> In the Roles Tab select the remove option, enter the Role Name + "Valid From" + "Valid To" dates.

    The valid from and to date should match what is displayed in SU01 for the user.

    Edited by: John Navarro on Feb 20, 2009 7:06 PM

    Added Go to SU10

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 20, 2009 at 06:53 PM

    Hi,

    I am not sure if with SU10 you can delete a role...what it does is that it delimits with a date as you have already said and seen.

    Why do not you use PFCG instead to delete the users from the Roles itself....this way the roles will not be in the user ids.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 21, 2009 at 01:39 PM

    This message was moderated.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 23, 2009 at 08:01 PM

    Thank you all, for your input.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Dec 24, 2013 at 06:44 AM

    Hi ,

    But in the PRGC_COMPRESS_TIMES Program please select the option "Delete Expired Assignments", and I suggest please try for one user and then do for all the other users.

    When we did for mass users we faced some issues with that, so requesting you to try it for one user and then do for all the others users if its worked.

    Thanks!

    Add comment
    10|10000 characters needed characters exceeded