Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

Reg: Role assignment

Former Member
0 Kudos

Hi Team,

I am new in to basis security part can you please help me on the below query .

While executing the user report the role assignment its shows 2-3 time with different  assignment dated,

in what is the case i am getting this issue.

PFA the screen shot for the reference

Regards,

Kishore Jak

8 REPLIES 8

Former Member
0 Kudos

Hi Kishore,

Which it mean , same role assigned to user on different dates.

0 Kudos

Hi Prasana ,

yes, Same role assigned to user on different dates.

Kindly advise

Regards,

KishoreJak

former_member190027
Participant
0 Kudos

Hi Kishore,

Yes, sometimes the change docs shows like that, but on the same day if you assign it will not show

two entries, since it is different date it is showing like that, even though the role is same.

Even I have come across like this, is this giving any problem for your reports?

Thanks!

Regards,

Pavithra.B

0 Kudos

Hi Pavithra,

yes while executing the report the same role showing with 3 different date assignment 

While auditing is there any issues will come for this kind of reports?.

Please explain


Regards,

KishoreJak

0 Kudos

hi Kishore,http://

The below link can give you detailed thread about PRGN_COMPRESS_TIMES Job, please have

a look on that.

And also be noted if you run this job sometimes it will lead into loss of data, means the users who are having proper valid to field  also got removed.

Please use this program cautiously

The options to run this job either in PFCG & SA38 and also have a look  on the below note.

https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=865841

Hope this info was useful to you.

Thanks!

Regards,

Pavithra.B

Former Member
0 Kudos

please gothorugh the link

http://scn.sap.com/thread/3187080

Former Member
0 Kudos

Hi Kishore,

Which it mean , same role assigned to user on different dates.

regards

Prasanna S

Colleen
Advisor
Advisor
0 Kudos

Hi

As everyone has mentioned it is due to multiple role assignments in SU01 Roles tab for different dates

What this means

- it does not increase or reduce the access

- change documents will show each date the role was assigned

- the user only receives the generate profile(s) for the role once on the profile tab so it won't impact user buffer, etc

- it is messy on your reporting as you can see - extra lines for no reason

- there is a risk if you need to remove the role from the user you only remove one entry and miss the other two

I generally clean my SU01 role assignments to only have the current entries.


The reason the multiple entries occurs is because the primary key on table USERS_AGR is the user, role and validity dates. This allows you to provide temporary assignments of access and is a also why roles are better than profile assignments (can't end date profile assignments)

Your choice if you clean up SU01 role assignments or accept that you will get multiple entries on your SUIM report