Skip to Content

Best approach for BW roles cleanup

Hello

Please could you guide me the best approach to do role cleanup activities for BW system.

We currently have below roles types:

Composite roles

Single roles / Menu

Analysis Auth roles

Thanks

Add comment
10|10000 characters needed characters exceeded

  • Hi

    Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

    Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

    But this can be done for Reporting roles but how we can do it for AA roles??

    You have any suggestions ?

  • Hi

    Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

    Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

    But this can be done for Reporting roles but how we can do it for AA roles??

    You have any suggestions ?

  • Hi

    Going by each module and creating the Pivot (Module, Job title & Roles and Count of Userid) for ASIS from the system.

    Then again going throu each function and role and check for the corrections(Req or not req or any role changes etc)

    But this can be done for Reporting roles but how we can do it for AA roles??

    You have any suggestions ?

  • Get RSS Feed

2 Answers

  • Best Answer
    Sep 18, 2018 at 03:08 PM

    Hi Harish,

    Roles may need to be cleaned up for 2 reasons:

    - the role is not assigned anymore to any user. First, you will have to identify inactive users (by analyzing their last logon date) and then delete/deactivate them. With some luck, you may end up with roles with no active users. This is the easy part.

    - the roles contains authorizations on Data provider/transaction/reports that are not used anymore. Depending on how you have built your roles, the identification of this kind of roles can be really tricky. You can use the BW statistics to some extent (to identify unused queries or wad).

    Regards,

    Frederic

    Add comment
    10|10000 characters needed characters exceeded

  • Sep 04, 2018 at 11:05 AM

    Check this OSS Note - 313587 - Mass deletion of activity groups

    Apply the corrections provided in note and create custom program as shared in note.

    Additionally check this thread,

    https://archive.sap.com/discussions/thread/1323302

    Thanks,

    Bhavin Vyas

    Add comment
    10|10000 characters needed characters exceeded