topic Re: profiles in Application Development and Automation Discussions

profiles

Former Member — Wed, 17 Jun 2009 08:35:14 GMT

By mistake I run the progrm pfcg_time_dependency in production system. In SUIM history its showing profiles deleted. Does it causes any problem

Re: profiles

Former Member — Wed, 17 Jun 2009 08:45:16 GMT

You should have it scheduled to run periodically (usually overnight during a quiet time) anyway, usually there is no problem when running it.

Have a look at transaction PFUD and read the F1 documentation associated with the user compare function

Re: profiles

Former Member — Wed, 17 Jun 2009 09:03:48 GMT

This report is supposed to be scheduled to run on ur system on a daily basis.

Also I suggest you not to assign gererated profiles to user master rather assign the roles to them

For furthere reading

http://help.sap.com/erp2005_ehp_04/helpdata/EN/52/671583439b11d1896f0000e8322d00/frameset.htm

Re: profiles

Former Member — Wed, 17 Jun 2009 09:35:50 GMT

Hi,

Dont worry. It will delete the profiles only assigned to users against which there are no roles present. It is recommended as discussed before to assign roles via pfcg and not generated profiles, else this situation will take place. Just assign the roles to users whose profiles got deleted.

Regards

Aveek.

Re: profiles

Former Member — Wed, 17 Jun 2009 09:37:41 GMT

Hi Sreenivasu,

Yes,whenever the report is run,all the profiles,which are assigned to the users,without the corresponding role(s) will be removed from users' account.

Hence it is always recommended not to assign profiles directly to users,but instead assign roles to users.

Peeyush

Re: profiles

Former Member — Wed, 17 Jun 2009 09:59:19 GMT

Apart from all these....(one thing which may worry you for your "mistake".. is it will show your ID in the change history for role removal... which may bother you !!

Its a good idea to have it run under some non-dialog user ID.

Cheers !!

Zaheer

Re: profiles

sdipanjan — Wed, 17 Jun 2009 11:17:20 GMT

Is it the forst time this Job has been executed in Production system? If yes, then how you used to maintain temporary assignment of roles?

> By mistake I run the progrm pfcg_time_dependency in production system. In SUIM history its showing profiles deleted. Does it causes any problem

This is not a "Mistake".. This program (main program name is: RHAUTUPD_NEW) is not meant to create problem, rather to solve problem.

It will remove the profiles of Roles which have passed the Validity date.. so that the user doesn't get the access any more.

It also put the authorization instances in the user buffer in the current status every day.

So, schedule it on daily basis (during idle time of server) and of course use a Non-Dialog user id. (as already instructed in other Posts)..

Regards,

Dipanjan