How to deactivate and activate different pfcg roles at once?

[haydernuredin2212]

As usual, my SAP system has different types of pfcg roles. Some of those are should deactivate or locked one time per month only for one day. Because of this, I deactivate and activate each and every one manually. So that, how to deactivate and activate those roles just once? I try to schedule a job but I couldn't know the exact program, please help me!

Note: the deactivate and activated roles are the same from month to month.

[jmodaal]

Hello,

I think that deactivating the role(s) is the wrong way. Activating resp. deactivating is a manual maintenance in PFCG and I don't expect that there is a program (despite possibly a self-developed one) that can be used for it. Therefore I recommend to think about using the validity range for the role assignment. With SU10 you have a mass function that can be used for this. Additionally I am also wondering about the background of this question. Are there some functions that should not be used for one day only? Then it might make more sense to think about locking transactions (e.g. by using SM01_CUS). Maybe you can give more details about the background of your question.

Kind regards

Jan

[haydernuredin2212]

Dear Supporter,

To elaborate on my question, I have a schedule monthly basis to lock some tcodes. Actually, we can lock the tcodes using SU01 however we have to include exceptional for 5 users so we should deactivate each role that includes the tcodes and we make an additional unique role for those users which contain that tcodes.

[jmodaal]

Hello,

you already pointed into the direction that I would suggest: you should move the authorizations for these transaction codes out of the existing roles into new ones. These new roles can be assigned using suitable time frames (considering this 1-day gap).

Kind regards

Jan