topic Re: Not able to remove authorization completely in Application Development and Automation Discussions

Not able to remove authorization completely

kuldeep_ahuja1 — Wed, 11 Feb 2015 10:02:36 GMT

Hi,

As per business demand i have been told to remove VF11 and J1IH tcodes from users so that they can't cancel any kind of invoices .i have removed from all the roles (master/composite & single). also checked in S_TCODE there is nothing related to said Tcodes but when i am checking through tcode S_BCE_68001398 it showing access is still with several of users but other side its not showing any role through which its accessing tcodes.

For Example am attached access of 1 user (CO_SP1)

If somebody has faced same problem. then please let me know from where the access is going to that users.

Regards

Kuldeep

Re: Not able to remove authorization completely

Former Member — Wed, 11 Feb 2015 15:24:06 GMT

Please check whether anything assigned in Profile tab on Su01 with this user.

Thanks

Asad

Re: Not able to remove authorization completely

kuldeep_ahuja1 — Wed, 11 Feb 2015 16:33:41 GMT

Hi,

Thanks for Reply.

In Profile tab there are profiles of assigned roles of that user.

Also that profile still there who's corresponding roles i have deleted.

and if i go to delete profile is does not allow to delete.

please suggest

Regards

Re: Not able to remove authorization completely

Former Member — Wed, 11 Feb 2015 19:46:42 GMT

Hi Kuldeep,

Try comparing the profiles with the user name in transaction SUIM.

Select the users tab provide the user id and compare all the profiles.

Hope this would resolve the issue.

Regards

Mohammed

Re: Not able to remove authorization completely

yakcinar — Wed, 11 Feb 2015 20:49:45 GMT

Hello Kuldeep,

You say you also listed users using S_TCODE auth object in SUIM. And these users donot have this auth in any of their roles.

So, try PFUD transaction to perform user master comparison.

There could be assigned profiles to that user which are not seen on either role nor profile tabs.

Regards,

Yuksel AKCINAR

Re: Not able to remove authorization completely

Former Member — Thu, 12 Feb 2015 03:40:26 GMT

you should have unassigned the users from the roles at first before deleting the roles. That why you are facing this issue. Please delete the user and recreate again.

Thanks

Asad

Re: Not able to remove authorization completely

kuldeep_ahuja1 — Thu, 12 Feb 2015 06:14:33 GMT

Dear All ,

I have checked with PFUD generating user master comparison also with deleting and re-assigning of users in that specific roles also i have regenerated roles, but no result .

This is master roles in screenshot ,I have checked with derive roles also.

Please suggest what else i can do.

Re: Not able to remove authorization completely

kuldeep_ahuja1 — Thu, 12 Feb 2015 06:18:30 GMT

Hi Mohammed,

Can you please share a screenshot regarding Profile Comparison as i have not get any result as i have checked in SUIM - comparisons-.Profile

Regards

Kuldeep

Re: Not able to remove authorization completely

former_member298454 — Thu, 12 Feb 2015 06:37:11 GMT

Kuldeep ,
Make sure all the roles that've been assigned to users have current profile version(grenn colour).

then copy all roles from user and give it in PFUD and execute which does profile reconcilation.This activity removes the profiles from user which is not associated with roles. After this activity ,if any profile exists for user in su01 that could be manually generated profile.

Thanks, Krishna

Re: Not able to remove authorization completely

yakcinar — Thu, 12 Feb 2015 08:31:58 GMT

Hello Kuldeep,

You can use SUPC transaction for mass profile generation.

As Krishnakumar mentioned regenerate all related profiles giving role names.

And check whether users have the transaction auth.

Regards,

Yuksel AKCINAR

Re: Not able to remove authorization completely

kuldeep_ahuja1 — Thu, 12 Feb 2015 10:33:11 GMT

Hi Yuksel ,

As you suggested i have all roles through PFUD .Now everything is fine.

Thanks a lot.

also thanks to Krishna .

Regards

Kuldeep ahuja