Remove invalid entries from GRACUSER

[#1]

Dear Colleagues

I'm trying to remove user data for invalid connectors from the tables GRACUSER, GRACUSERCONN, GRACUSERROLE. To populate these tables is very easy, but to remove invalid entries is somehow mission impossible. Sorry for the impressive terms.

The names of the connectors have changed many times in the past. Now we have some invalid entries, which have impact on other processes (SOD, extension and termination).

My idea was to activate an old connector and change the target host to any SAP system with fewer users, the 000 client is good example. Nothing happened, the sync didn't work.

I tried to create new user in this system and the user was added in the GRACGRACUSER* tables.

After I have deleted this user again form the backend the user is still in the sync-tables.

::sync log::

Sync successful for connector P01_020 and total count: 24

Sync completed for connector P01_020

User sync successfully executed

Sync successful for connector P01_020

Repository Object sync job successful

::sync log::

I have still over 800 users for the connector P01_020 in the table GRACUSERCONN.

Thank you for any suggestions.

Daniel

[Colleen]

Hi

Did you run full sync? And, does the tables contain the user but have them flagged as deleted?

Also, are you able to check SE38 to see if there might be a GRAC*DELETE* program of some type. I thought I saw a thread a while back that there was a deletion program (or 5.3 had something). Possibly there might be a way to remove the data if the connector is no longer required

Where the connector is still in use the tables should keep the user for historical purposes and flag as delete

What is being impacted for SOD/etc with this connector?

Regards

Colleen

[Former Member]

Dear colleen

Yes, the analysis ran in Full-Sync mode. I couldn't find any program to delete old data.

Is there some technical specification, how the Sync should work? What the tables should contain? I’m asking because after applying some SAP notes we have duplicates, triplicates, etc. in GRACUSER now.

Since we don’t have CUA in place, this should be our source for identification in which systems the user exists. For example I see some users in 000 client, which were accidentally created there in the past and removed again. But they will probably stay in the GRACUSERCONN table for ever. The column status doesn’t contain any value at all.

The information ‘updated on’ in GRACUSER doesn’t say for which connectors the user has been updated. This information would be helpful also in the table GRACUSERCONN.

Thank you

Regards

Daniel