02-11-2013 7:58 AM
Hi Team,
I am new in to basis security part can you please help me on the below query .
While executing the user report the role assignment its shows 2-3 time with different assignment dated,
in what is the case i am getting this issue.
PFA the screen shot for the reference
Regards,
Kishore Jak
02-11-2013 8:08 AM
Hi Kishore,
Which it mean , same role assigned to user on different dates.
02-11-2013 8:12 AM
Hi Prasana ,
yes, Same role assigned to user on different dates.
Kindly advise
Regards,
KishoreJak
02-11-2013 8:18 AM
Hi Kishore,
Yes, sometimes the change docs shows like that, but on the same day if you assign it will not show
two entries, since it is different date it is showing like that, even though the role is same.
Even I have come across like this, is this giving any problem for your reports?
Thanks!
Regards,
Pavithra.B
02-11-2013 8:24 AM
Hi Pavithra,
yes while executing the report the same role showing with 3 different date assignment
While auditing is there any issues will come for this kind of reports?.
Please explain
Regards,
KishoreJak
02-11-2013 9:49 AM
hi Kishore,http://
The below link can give you detailed thread about PRGN_COMPRESS_TIMES Job, please have
a look on that.
And also be noted if you run this job sometimes it will lead into loss of data, means the users who are having proper valid to field also got removed.
Please use this program cautiously
The options to run this job either in PFCG & SA38 and also have a look on the below note.
https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=865841
Hope this info was useful to you.
Thanks!
Regards,
Pavithra.B
02-11-2013 8:22 AM
02-11-2013 9:42 AM
Hi Kishore,
Which it mean , same role assigned to user on different dates.
regards
Prasanna S
02-12-2013 3:38 AM
Hi
As everyone has mentioned it is due to multiple role assignments in SU01 Roles tab for different dates
What this means
- it does not increase or reduce the access
- change documents will show each date the role was assigned
- the user only receives the generate profile(s) for the role once on the profile tab so it won't impact user buffer, etc
- it is messy on your reporting as you can see - extra lines for no reason
- there is a risk if you need to remove the role from the user you only remove one entry and miss the other two
I generally clean my SU01 role assignments to only have the current entries.
The reason the multiple entries occurs is because the primary key on table USERS_AGR is the user, role and validity dates. This allows you to provide temporary assignments of access and is a also why roles are better than profile assignments (can't end date profile assignments)
Your choice if you clean up SU01 role assignments or accept that you will get multiple entries on your SUIM report