Mass deletion of role assignments in a CUA environment.

[SAPSupport]

Dear,

Dear,

We have attempted to mass remove roles from multiple users through SU10, however, it is only possible to delimit role validity data.

Is there a standard program that mass deletes the roles of multiple users?

Observation. Currently our environment is managed via CUA.

Regards,

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Dear customer!

Unfortunately there is no standard tool to mass remove role assignments in a CUA landscape.
But there are the following function modules exactly for your needs:

BAPI_USER_LOCACTGROUPS_ASSIGN
BAPI_USER_LOCACTGROUPS_DELETE
BAPI_USER_LOCACTGROUPS_READ

BAPI_USER_LOCACTGROUPS_DELETE is for the role assignment removal.

The documentations for these function modules can be read in transaction BAPI -> Basis Components -> Security -> USER -> LocActgoupsAssign & LocActgroupsDelete & LocActgroupsRead

Best regards,
SAP Support