Remove invalid entries from GRACUSER

[Former Member]

Dear Colleagues

I'm trying to remove user data for invalid connectors from the tables GRACUSER, GRACUSERCONN, GRACUSERROLE. To populate these tables is very easy, but to remove invalid entries is somehow mission impossible. Sorry for the impressive terms.

The names of the connectors have changed many times in the past. Now we have some invalid entries, which have impact on other processes (SOD, extension and termination).

My idea was to activate an old connector and change the target host to any SAP system with fewer users, the 000 client is good example. Nothing happened, the sync didn't work.

I tried to create new user in this system and the user was added in the GRACGRACUSER* tables.

After I have deleted this user again form the backend the user is still in the sync-tables.

::sync log::

Sync successful for connector P01_020 and total count: 24

Sync completed for connector P01_020

User sync successfully executed

Sync successful for connector P01_020

Repository Object sync job successful

::sync log::

I have still over 800 users for the connector P01_020 in the table GRACUSERCONN.

Thank you for any suggestions.

Daniel

[Former Member · Accepted solution]

Hi Daniel,

Before you delete the connector, you can delete the informaction of users and roles in the following path:

SPRO>AC>...>Access Risk Analysis> SoD rule > Delete Sod Rule

There you put the connector and check "delete sync data for physical system".

It will delete the entries in the tables that you mentioned if the connector still exists.

Hope its helps

regards,

[Former Member · Accepted solution]

Hi Claudio,

this exactly what I was looking for. The name of the program is a little bit confusing GRAC_DELETE_ACCESS_RULES but it deletes the data from all tables I was interested:

GRACUSER

GRACUSERCONN

GRACUSERROLE

GRACUSERPROFILE

.. and 30 more.

Thank you

Kind regards

Daniel