topic Re: User Group in Application Development and Automation Discussions

User Group

Former Member — Tue, 27 May 2008 20:55:43 GMT

Hi,

I need to find out how long users are in a certain group (TERMINATED)...meaning before I do a hard delete of all these users I need to make sure they have been in the TERMINATED group for 12 months...how do I do this?

Thanks.

Raj

Re: User Group

Former Member — Tue, 27 May 2008 20:59:16 GMT

> ...how do I do this?

By not doing it.

Search for "delete user audit problem" and such terms here in the forum...

Cheers,

Julius

Re: User Group

Former Member — Wed, 28 May 2008 03:18:34 GMT

Use tht transaction SUIM ..this will help

Re: User Group

Former Member — Wed, 28 May 2008 12:30:22 GMT

You can check specifically for user group changes in the "change docs" of the SUIM reports. Look under selection criteria of the user report and select user group and set a date range.

Re: User Group

Former Member — Wed, 28 May 2008 14:38:21 GMT

Julius,

I'm sorry I should have mentioned...before posting the ? I did my search in the forum...found nothing that resolves my task.

Raj.

Re: User Group

Former Member — Wed, 28 May 2008 14:39:22 GMT

thanks George...I tried SUIM before posting the question.

Re: User Group

Former Member — Wed, 28 May 2008 14:45:04 GMT

JC thanks...I use SUIM day-in & day-out & I tried that before coming to the forum & what you said is the closest it get's to what I need...I might have to create my own query...I need to be able to put a date range or # of days & specify the groups...thanks anyway folks.

Raj

Re: User Group

Former Member — Wed, 28 May 2008 15:06:18 GMT

Fair enough, you did ask a "how to" and not "why not" question.

How to (manually):

You might want to try the "Users by last logon and password change" report (RSUSR200). That will let you restrict to the User Group you want.

If an ID turns up in the result, then double-click it (this calls SU01 basically) and then you can see whether the "last changed on" date (for any change to the record) is older than 12 months.

If yes, then it has been in the user group for at least than 12 months or more, and just hit the "delete" button.

If you click on "back", then you will return to the list for checking and possibly deleting the next one. If you are not sure of a specific user, then from the menu of SU01 when displaying it, you can check the change docs for a more detailed analysis of that user (as suggested by JC, report RSUSR100).

Cheers,

Julius

Re: User Group

Former Member — Wed, 28 May 2008 16:26:02 GMT

You can probably check the table USH02 and look at the change dates and the field "CLASS" for user group changes.

You can check for when the id was changed over to the "TERMINATED" group and do you calculation from there.

Re: User Group

Former Member — Wed, 28 May 2008 16:44:36 GMT

Yeah, but you should also check that 'TERMINATED' is not in the "old value" field with a later date...

Doing a final manual check with human rationale before hitting the delete button might be a good idea anyway.

As mentioned before in previous threads, the "why to do this" concludes in most of them that it should not be done at all.

Cheers,

Julius