Mass selection of roles in SU10

[Former Member]

Hi

I have to remove lot of roles from 2000 users which have more than 20 roles in SU10.

I am doing part by part by pasting 20 roles in SU10.

Is there a way to select mass roles in su10 like the user selection.

Thanks

Baskar R

[sdipanjan]

No.

Regards,

Dipanjan

[Former Member]

>

> Hi
> 
> I have to remove lot of roles from 2000 users which have more than 20 roles in SU10.
> 
> I am doing part by part by pasting 20 roles in SU10.
> 
> Is there a way to select mass roles in su10 like the user selection.
> 
> 
> Thanks
> Baskar R

Not in SU10. If you just want to empty the users in a role, you can do it in PFCG.

[Former Member]

I have to do for selected users for that role. i donot think pfcg useful here.

Do you know an idea if i want to remove all users from 500 roles in a single shot.

Is there a way to do it.

Thanks

Baskar

[sdipanjan]

i would like to request you to have a look into the following Note:

[Note 312943 - SU10:Deleting role assgts, SU01: 01/01/0001 problem|https://service.sap.com/sap/support/notes/312943]

[Note 163059 - SU10: Role and profile assignments deleted/added|https://service.sap.com/sap/support/notes/163059]

Regards,

Dipanjan

[arpan_paik]

In SU10 give all the user IDs and in roles tab put all the roles. check remove in both role and profile tab. Save it. However my suggestion would be break the process into 2-3 steps.

Even a role does not assigned to any user/s that will not be problem. Any user you enter having access to any of the 500 roles you enter will loose access to the above process.

[Former Member]

Arpan,

I think you understood in other way.

The reason why i have asked is.

I have to enter every 20 roles in su10 roles tab. Instead of that,

i want to paste entire 500 roles in one short in su10 roles tab.

Do you know how to do that?

[sdipanjan]

> I have to enter every 20 roles in su10 roles tab. Instead of that,

>

> i want to paste entire 500 roles in one short in su10 roles tab.

You want to assign 500 roles to each user!!!!!!! Did you think about the maximum number of profile assignment limit for each user id? If not, then i would like to request you to check the following SAP Notes:

[Note 841612 - Maximum number of profiles per user|https://service.sap.com/sap/support/notes/841612]

[Note 410993 - Maximum number for profiles and authorizations|https://service.sap.com/sap/support/notes/410993]

[Note 511200 - PFCG/PFUD/SU01/SU10: Role assignment and profile comparison|https://service.sap.com/sap/support/notes/511200]

Also, if you need to assign so many roles to each user id then it is missing the important topic SOD. Also the design is itself Incorrect.

Regards,

Dipanjan

Edited by: Dipanjan Sanpui on Oct 22, 2009 3:21 PM

[Former Member]

Baskar,

perhaps you can do this on the following way:

in tab roles enter F4 to choose the concerned roles. System shows you all roles, you can limit them by giving the first letter.

Regards,

Julia

Edited by: Julia Bayrhammer on Oct 26, 2009 8:48 AM

[Former Member]

This reply gave the me the clue.

I put F4 and copy and paste selected roles and pushed.

All roles(500) pushed to su10 roles.

Issues resolved.

Thanks

Baskar R

[Former Member]

Are these single roles or composite roles, or a [collage|http://en.wikipedia.org/wiki/Collage] of both?

Cheers,

Julius

[Former Member]

All are single roles

[Former Member]

Good.

I assume that you have these users and their role assignment to be deleted already and that it is okay to go ahead.. without any implications for personalization keys attached to the roles or other roles not being able to "survive" on their own without these ones. Please check this if you have not yet done so.

You have two easy options:

- A CATT script, if you are familiar with transactions SCAT or SECATT.

- A little ABAP program which downloads your file and calls the BAPI for unassigning roles, your developer can find this business object in transaction BAPI.

The hard way is to look into where these pieces of moss and dead moles came from and implement a process to prevent it in future.

Cheers,

JUlius