Is there a good way to check if the user exist in all the systems within the company?

[Former Member]

H SAPers,

I am a SAP Security guy. Once there is a user leaves the company, i have to check if the user exists or not in all SAP systems. Have to logon each of them and check in SUIM or SU01. I wonder if there is a good way to do it just once. For example, program an excel script to logon all the systems with my user and pull out all data of USR02 table and check with vlookup function. (just a thought, i could not do it). Just wondering what the other security guys do. Thanks.

best regards,

L

[JPReyes]

You should consider the use of Identity Management or Central User Administration so you can handle User Master Data Centrally.

Regards, Juan

[Former Member]

Hi Louis,

Why we need to get into the trouble. Actually whenever a user leaves the company the HR talent managers terminate their user master record in SAP

They have a separate report which we can able to schedule this on daily basis on background job. The report provide you the user name and their end date and their join date.

With the help of this we can easily found the user name in SAP. Appreciate if it is useful.

[Former Member]

Hello Louis,

Many security guys would be using CUA so it will make the job easy for them.

As for downloading data via excel connection it ain't so straightforward. I mean you are going to connect to DB directly and that will have its own steps for every database. So I don't that approach would be followed by anyone.

And as Joe said please check on security forum as well.

Regards.

Ruchit.

[Former Member]

I haven't got an answer, just a hint, regarding your last question.
>>> Just wondering what the other security guys do.
I suppose they ask in SAP security forum:
http://scn.sap.com/community/security/content

hope this helps