04-19-2011 11:11 AM
Dear All,
Please let me know, how to remove the inactive objects in roles.
Thanks in Advance,
Thiyagu
04-19-2011 12:11 PM
Hi,
are you sure, that you really want to do that? remember the merge function (note 113290), that will propably insert many authorizations again.....
Nevertheless, use the menu->Edit->Delete inactive (Shift+F2)
b.rgds, Bernhard
05-21-2011 11:46 AM
Hi,
I agree with Bernhard that we should not delete the inactive objects as it will result in addition of more authorization objects.
Else the way to delete is inactivate the object and right next to it you have the delete button.
Thanks.
05-21-2011 12:02 PM
Hi
If any object is inactive at role level then, it s already equal to delete state,,,,
even if it exists in role then there is no harm.
If still you want to delete it just click on the delete option which exists left to the inactivated object
thnks
Sandeep
05-22-2011 10:54 PM
When I get access to an SAP system I'll check Bernhard's
Nevertheless, use the menu->Edit->Delete inactive (Shift+F2)
as I never spotted that but the post goes further...
Cheers
David
05-23-2011 6:52 AM
Nevertheless, use the menu->Edit->Delete inactive (Shift+F2)
It will not delete inactive objects with status Maintained & Standard. Which is good. But I guess OP has some other things in mind. Did I not say, it might lead to misery
05-23-2011 3:22 PM
Hi Thiyagu.
In addition to Bernhard & Arpan's inputs,Since the number of Manually maintained objects (Inactive Status) is very less in a role, the majority of them are left behind for manual clean up. As a best practice , Inactive objects are retained in roles to have some history in case of any audits and also to maintain the object dependency to see why the object got into the role ... It helps any new security admin's to steer through audits when old timers move out ...
Hope it helps.
Rgds,
Sri
06-13-2011 6:23 AM
Dear All,
Sorry for the delayed reply.
I agree to your replies,but my question is to delete the multiple entry objects.
Standard delete mehtod is ok, apart from that anyother methodology means please let me know.
Thanks,
M.Thiyagarajan.
06-13-2011 8:33 AM
Hi Sri,
Auditors will not worry about inactive objects in roles. Most of them do not understand what object statuses mean.
Cheers
06-13-2011 9:13 AM
I agree to your replies,but my question is to delete the multiple entry objects
did you mean multiple entry but active? Can you elaborate your actual requirement in details?
Regards,
Arpan Paik