Skip to Content
avatar image
Former Member

Reg: Role assignment

Hi Team,

I am new in to basis security part can you please help me on the below query .

While executing the user report the role assignment its shows 2-3 time with different  assignment dated,

in what is the case i am getting this issue.

PFA the screen shot for the reference

Regards,

Kishore Jak

SCN.png (4.1 kB)
Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

5 Answers

  • avatar image
    Former Member
    Feb 11, 2013 at 08:08 AM

    Hi Kishore,

    Which it mean , same role assigned to user on different dates.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Prasana ,

      yes, Same role assigned to user on different dates.

      Kindly advise

      Regards,

      KishoreJak

  • avatar image
    Former Member
    Feb 11, 2013 at 08:18 AM

    Hi Kishore,

    Yes, sometimes the change docs shows like that, but on the same day if you assign it will not show

    two entries, since it is different date it is showing like that, even though the role is same.

    Even I have come across like this, is this giving any problem for your reports?

    Thanks!

    Regards,

    Pavithra.B

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 11, 2013 at 08:22 AM

    please gothorugh the link

    http://scn.sap.com/thread/3187080

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Feb 11, 2013 at 09:42 AM

    Hi Kishore,

    Which it mean , same role assigned to user on different dates.

    regards

    Prasanna S

    Add comment
    10|10000 characters needed characters exceeded

  • Feb 12, 2013 at 03:38 AM

    Hi

    As everyone has mentioned it is due to multiple role assignments in SU01 Roles tab for different dates

    What this means

    - it does not increase or reduce the access

    - change documents will show each date the role was assigned

    - the user only receives the generate profile(s) for the role once on the profile tab so it won't impact user buffer, etc

    - it is messy on your reporting as you can see - extra lines for no reason

    - there is a risk if you need to remove the role from the user you only remove one entry and miss the other two

    I generally clean my SU01 role assignments to only have the current entries.


    The reason the multiple entries occurs is because the primary key on table USERS_AGR is the user, role and validity dates. This allows you to provide temporary assignments of access and is a also why roles are better than profile assignments (can't end date profile assignments)

    Your choice if you clean up SU01 role assignments or accept that you will get multiple entries on your SUIM report

    Add comment
    10|10000 characters needed characters exceeded