Question Re: Inactive Objects to be maintained from SU24 without d... in Enterprise Resource Planning Q&A

Inactive Objects to be maintained from SU24 without deleting within the role

ChethanBS — Thu, 03 Apr 2025 07:26:56 GMT

Dear All,

We are facing a condition were we need to remove Inactive objects within the role. You can suggest us to delete or maintain it from SU24 with check indicator "NO". But either of the case is not acceptable and wanted to find if there is any new way for this.

For more clarification: We maintain an object S_SECPOL for SU01 in SU24 for Security team and added in Role1. But the same object might not be necessary for Basis (in rare Basis user maintenance access) and added in Role 2 with S_SECPOL inactive.

In this case for Role 2 we are not supposed to inactive S_SECPOL object either we cannot maintain check no for same transaction SU01 in SU24 as it might effect Role 1.

If there is any alternate, please suggest me.

Re: Inactive Objects to be maintained from SU24 without d...

MichaelHealy779 — Mon, 07 Apr 2025 11:37:27 GMT

Why dont you use SU24 variants? You can create a variant of SU01 for basis that has NO enabled. It means it wont effect the security roles as they have the standard SU24 proposal.

Re: Inactive Objects to be maintained from SU24 without d...

ChethanBS — Mon, 07 Apr 2025 12:16:18 GMT

Because our clients say it not best practice to use more variants for a transaction code. SU01 was a simple example, for more usage like SARA transaction code for Archiving we have multiple roles for multiple purpose and we need to create each and every variant for SARA T-code.

Re: Inactive Objects to be maintained from SU24 without d...

MichaelHealy779 — Mon, 07 Apr 2025 12:30:42 GMT

I would respectivley disagree with the client, there is nothing wrong with using variants, in fact its a very nice a clever way of achieving correctly built roles.

Re: Inactive Objects to be maintained from SU24 without d...

MichaelHealy779 — Mon, 07 Apr 2025 12:32:56 GMT

For SARA, I would recommend doing this with FF and avoid all the trouble with different values.

Re: Inactive Objects to be maintained from SU24 without d...

ChethanBS — Fri, 11 Apr 2025 07:25:05 GMT

yes. we find variant is flexible option for Authorizations maintenance. We are too disagreeing with them. Especially for Non-business users its way to hard to remove inactive from SU24. Thank you so much for your response.

Re: Inactive Objects to be maintained from SU24 without d...

MichaelHealy779 — Mon, 14 Apr 2025 14:57:29 GMT

I think the correct answer here is to use SU24 variants, this would be the best way to achieve what you need to achieve in a standard manner. Please mark this as closed.