Best approach for BW roles cleanup

[former_member584868]

Hello

Please could you guide me the best approach to do role cleanup activities for BW system.

We currently have below roles types:

Composite roles

Single roles / Menu

Analysis Auth roles

Thanks

[FCI]

What approach do you have in mind ?

[former_member584868]

Hi

Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

But this can be done for Reporting roles but how we can do it for AA roles??

You have any suggestions ?

[former_member584868]

Hi

Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

But this can be done for Reporting roles but how we can do it for AA roles??

You have any suggestions ?

[former_member584868]

Hi

Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

But this can be done for Reporting roles but how we can do it for AA roles??

You have any suggestions ?

[FCI · Accepted solution]

Hi Harish,

Roles may need to be cleaned up for 2 reasons:

- the role is not assigned anymore to any user. First, you will have to identify inactive users (by analyzing their last logon date) and then delete/deactivate them. With some luck, you may end up with roles with no active users. This is the easy part.

- the roles contains authorizations on Data provider/transaction/reports that are not used anymore. Depending on how you have built your roles, the identification of this kind of roles can be really tricky. You can use the BW statistics to some extent (to identify unused queries or wad).

Regards,

Frederic

[bhavinvyas]

Check this OSS Note - 313587 - Mass deletion of activity groups

Apply the corrections provided in note and create custom program as shared in note.

Additionally check this thread,

https://archive.sap.com/discussions/thread/1323302

Thanks,

Bhavin Vyas