topic Re: Reg: Role assignment in Application Development and Automation Discussions

Reg: Role assignment

Former Member — Mon, 11 Feb 2013 07:58:07 GMT

Hi Team,

I am new in to basis security part can you please help me on the below query .

While executing the user report the role assignment its shows 2-3 time with different assignment dated,

in what is the case i am getting this issue.

PFA the screen shot for the reference

Regards,

Kishore Jak

Re: Reg: Role assignment

Former Member — Mon, 11 Feb 2013 08:08:45 GMT

Hi Kishore,

Which it mean , same role assigned to user on different dates.

Re: Reg: Role assignment

Former Member — Mon, 11 Feb 2013 08:12:01 GMT

Hi Prasana ,

yes, Same role assigned to user on different dates.

Kindly advise

Regards,

KishoreJak

Re: Reg: Role assignment

former_member190027 — Mon, 11 Feb 2013 08:18:37 GMT

Hi Kishore,

Yes, sometimes the change docs shows like that, but on the same day if you assign it will not show

two entries, since it is different date it is showing like that, even though the role is same.

Even I have come across like this, is this giving any problem for your reports?

Thanks!

Regards,

Pavithra.B

Re: Reg: Role assignment

Former Member — Mon, 11 Feb 2013 08:22:27 GMT

please gothorugh the link

http://scn.sap.com/thread/3187080

Re: Reg: Role assignment

Former Member — Mon, 11 Feb 2013 08:24:13 GMT

Hi Pavithra,

yes while executing the report the same role showing with 3 different date assignment

While auditing is there any issues will come for this kind of reports?.

Please explain

Regards,

KishoreJak

Re: Reg: Role assignment

Former Member — Mon, 11 Feb 2013 09:42:13 GMT

Hi Kishore,

Which it mean , same role assigned to user on different dates.

regards

Prasanna S

Re: Reg: Role assignment

former_member190027 — Mon, 11 Feb 2013 09:49:04 GMT

hi Kishore,http://

The below link can give you detailed thread about PRGN_COMPRESS_TIMES Job, please have

a look on that.

And also be noted if you run this job sometimes it will lead into loss of data, means the users who are having proper valid to field also got removed.

Please use this program cautiously

The options to run this job either in PFCG & SA38 and also have a look on the below note.

https://websmp130.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/spn/sapnotes/index2.htm?numm=865841

Hope this info was useful to you.

Thanks!

Regards,

Pavithra.B

Re: Reg: Role assignment

Colleen — Tue, 12 Feb 2013 03:38:11 GMT

As everyone has mentioned it is due to multiple role assignments in SU01 Roles tab for different dates

What this means

- it does not increase or reduce the access

- change documents will show each date the role was assigned

- the user only receives the generate profile(s) for the role once on the profile tab so it won't impact user buffer, etc

- it is messy on your reporting as you can see - extra lines for no reason

- there is a risk if you need to remove the role from the user you only remove one entry and miss the other two

I generally clean my SU01 role assignments to only have the current entries.

The reason the multiple entries occurs is because the primary key on table USERS_AGR is the user, role and validity dates. This allows you to provide temporary assignments of access and is a also why roles are better than profile assignments (can't end date profile assignments)

Your choice if you clean up SU01 role assignments or accept that you will get multiple entries on your SUIM report