topic Re: Function Module to remove user a Role in Application Development and Automation Discussions

Function Module to remove user a Role

Former Member — Thu, 01 Oct 2015 12:55:32 GMT

I'm looking for a functional module that will remove a user from a Role.

I've seen that I can add a user by using PRGN_RFC_ADD_USERS, but not sure how to remove a user.

Thanks

Re: Function Module to remove user a Role

egenoves — Thu, 01 Oct 2015 13:05:00 GMT

Hello Andre,

try with BAPI_USER_ACTGROUPS_DELETE,

Regards

Re: Function Module to remove user a Role

former_member210541 — Thu, 01 Oct 2015 13:06:52 GMT

try this

PRGN_RFC_CHANGE_USERS_IN_AGRS

Re: Function Module to remove user a Role

Former Member — Thu, 01 Oct 2015 13:59:03 GMT

Thanks. It seems like BAPI_USER_ACTGROUPS_DELETE can work, but will delete ALL activity group assignments. I'm only looking to remove a specified Role. I.e. role should be passed in a parameter.

But thanks for the answer. Not wrong - just not suited for me.

Re: Function Module to remove user a Role

egenoves — Thu, 01 Oct 2015 14:04:02 GMT

It seems you're right. In fact , the FM BAPI_USER_ACTGROUPS_ASSIGN, assigns roles deleting all of them before !... So you just need to retrive the roles before and then adjust for whatever you want.

I don't know why these functions have these behavior ...

Regards...

Re: Function Module to remove user a Role

AbhishekSharma — Thu, 01 Oct 2015 14:16:58 GMT

Hi Andre,

Please try to search with BAPI_BUPA_ROLE* probably BAPI_BUPA_ROLE_REMOVE function module will work for you.

AGR_USERS is table name which stores all roles assigned to User.

Thanks-

Abhishek

Re: Function Module to remove user a Role

RaymondGiuseppi — Thu, 01 Oct 2015 14:53:16 GMT

Read current user assignment with BAPI_USER_GET_DETAIL remove those no longer required from table ACTIVITYGROUPS and then update with BAPI_USER_ACTGROUPS_ASSIGN followed by BAPI_TRANSACTION_COMMIT.

Regards,

Raymond

Re: Function Module to remove user a Role

Former Member — Thu, 01 Oct 2015 14:58:50 GMT

Thanks - will give it a try. Do I still have to run PFUD User Comparison after this, or is this then not necessary?

Andre

Re: Function Module to remove user a Role

Former Member — Fri, 02 Oct 2015 09:35:52 GMT

Thanks - this really seems like the correct function, but I call this function and pass in table "DELETE_USERS_FROM_ACTGROUPS", with values AGR_NAME and UNAME.

When executing the function it does not remove that role from the user.

Am I missing something?

Should i run anything afterwards to commit the change?

Re: Function Module to remove user a Role

RaymondGiuseppi — Mon, 05 Oct 2015 06:01:09 GMT

In my old programs I used to call also BAPI_USER_PROFILES_ASSIGN after BAPI_USER_ACTGROUPS_ASSIGN so no PFUD required, but you should call it, also check if it's not already scheduled by administrators as a daily background job.

Regards,

Raymond

Re: Function Module to remove user a Role

Former Member — Mon, 05 Oct 2015 06:29:26 GMT

Hi,

in addition to Raymond's solution, if you have an active Central User Management, then you will need the rfc fm's BAPI_USER_LOCACTGROUPS_READ and BAPI_USER_LOCACTGROUPS_ASSIGN here.

Regards,

Klaus

Re: Function Module to remove user a Role

Former Member — Tue, 06 Oct 2015 10:09:24 GMT

Thanks. BAPI_USER_ACTGROUPS_ASSIGN does the job with a workaround. However neither BAPI_USER_PROFILES_ASSIGN nor BAPI_TRANSACTION_COMMIT does not run the User Comparison (with my current checks). Will still play around, but at least I can now remove the Role. Thanks.