‎2008 May 27 9:55 PM
Hi,
I need to find out how long users are in a certain group (TERMINATED)...meaning before I do a hard delete of all these users I need to make sure they have been in the TERMINATED group for 12 months...how do I do this?
Thanks.
Raj
‎2008 May 28 1:30 PM
You can check specifically for user group changes in the "change docs" of the SUIM reports. Look under selection criteria of the user report and select user group and set a date range.
‎2008 May 27 9:59 PM
> ...how do I do this?
By not doing it.
Search for "delete user audit problem" and such terms here in the forum...
Cheers,
Julius
‎2008 May 28 3:38 PM
Julius,
I'm sorry I should have mentioned...before posting the ? I did my search in the forum...found nothing that resolves my task.
Raj.
‎2008 May 28 4:06 PM
Fair enough, you did ask a "how to" and not "why not" question.
How to (manually):
You might want to try the "Users by last logon and password change" report (RSUSR200). That will let you restrict to the User Group you want.
If an ID turns up in the result, then double-click it (this calls SU01 basically) and then you can see whether the "last changed on" date (for any change to the record) is older than 12 months.
If yes, then it has been in the user group for at least than 12 months or more, and just hit the "delete" button.
If you click on "back", then you will return to the list for checking and possibly deleting the next one. If you are not sure of a specific user, then from the menu of SU01 when displaying it, you can check the change docs for a more detailed analysis of that user (as suggested by JC, report RSUSR100).
Cheers,
Julius
‎2008 May 28 4:18 AM
‎2008 May 28 3:39 PM
‎2008 May 28 1:30 PM
You can check specifically for user group changes in the "change docs" of the SUIM reports. Look under selection criteria of the user report and select user group and set a date range.
‎2008 May 28 3:45 PM
JC thanks...I use SUIM day-in & day-out & I tried that before coming to the forum & what you said is the closest it get's to what I need...I might have to create my own query...I need to be able to put a date range or # of days & specify the groups...thanks anyway folks.
Raj
‎2008 May 28 5:26 PM
You can probably check the table USH02 and look at the change dates and the field "CLASS" for user group changes.
You can check for when the id was changed over to the "TERMINATED" group and do you calculation from there.
‎2008 May 28 5:44 PM
Yeah, but you should also check that 'TERMINATED' is not in the "old value" field with a later date...
Doing a final manual check with human rationale before hitting the delete button might be a good idea anyway.
As mentioned before in previous threads, the "why to do this" concludes in most of them that it should not be done at all.
Cheers,
Julius