topic Re: Remove multiple roles from multiple user. in Application Development and Automation Discussions

Remove multiple roles from multiple user.

Former Member — Fri, 11 Apr 2014 16:08:11 GMT

I want to remove multiple Roles from multiple users but there is also condition that in all user there is no all roles exist.

in some user there is one or two roles or more roles are not exist .

so give me easy way to remove roles.

and i don't want to remove user using PFCG or SU01 it's to much long process.

..thanks in advance

Re: Remove multiple roles from multiple user.

Former Member — Sat, 12 Apr 2014 01:06:12 GMT

how about export the users from agr_users or suim to excel, create listing of user/role-to-remove. create ecatt script on su10 to automate one user-role at a time to remove the role from excel list.

Re: Remove multiple roles from multiple user.

Former Member — Mon, 14 Apr 2014 08:23:12 GMT

It does not matter whether User A has all the roles and User B only has one or two roles or another variant you want to remove.

SU10 basically contains the functionality you require http://www.sapsecuritypages.com/mass-user-changes/

Re: Remove multiple roles from multiple user.

Former Member — Mon, 14 Apr 2014 12:59:04 GMT

This is what I would do also.

Re: Remove multiple roles from multiple user.

Former Member — Tue, 15 Apr 2014 08:38:23 GMT

Try LSMW t-code. You can create a custom script for your requirements.

Re: Remove multiple roles from multiple user.

Former Member — Tue, 15 Apr 2014 09:45:52 GMT

I thought it might be useful to add why I think SU10 & scripting is good for this. SU10 can be used to append or remove single roles from a user.

In the case of removing roles you only need to create your file with the following data elements:

USER ID, ROLE, FROM DATE, TO DATE

Script SU10 so it performs a single removal operation and it can then work it's way through the file only removing what is required. There is no need to do any clever stuff in SU01 to pick out specific roles. I was doing all sorts of fancy stuff until someone showed me the SU10 trick.

Re: Remove multiple roles from multiple user.

Former Member — Sat, 03 May 2014 18:08:55 GMT

This message was moderated.

Re: Remove multiple roles from multiple user.

Former Member — Thu, 08 May 2014 20:41:52 GMT

He's right. Just remove all required roles from all required users.
Users who do NOT have a particular role - no change will happen.

Re: Remove multiple roles from multiple user.

Former Member — Thu, 08 May 2014 21:29:58 GMT

But that means that if the user does have the role and is meant to keep it, then it is removed.

use the "Authorization data" tab and in the select options of the users dialog there is a taskbar for import from file / clipboard.

Or do it in one go via BAPIs...

Cheers,

Julius

Re: Remove multiple roles from multiple user.

Former Member — Fri, 09 May 2014 14:12:53 GMT

Yes, this seems to fit the requirement - if I understood it correctly :-).

For selective removals, a SAPGui Script or ECATT with SU10 would be my preference.