Inactive Objects to be maintained from SU24 without deleting within the role

[ChethanBS]

Dear All,

We are facing a condition were we need to remove Inactive objects within the role. You can suggest us to delete or maintain it from SU24 with check indicator "NO". But either of the case is not acceptable and wanted to find if there is any new way for this. 

For more clarification: We maintain an object S_SECPOL for SU01 in SU24 for Security team and added in Role1. But the same object might not be necessary for Basis (in rare Basis user maintenance access) and added in Role 2 with S_SECPOL inactive. 

In this case for Role 2 we are not supposed to inactive S_SECPOL object either we cannot maintain check no for same transaction SU01 in SU24 as it might effect Role 1.

If there is any alternate, please suggest me.

Security 

[MichaelHealy779]

Why dont you use SU24 variants? You can create a variant of SU01 for basis that has NO enabled. It means it wont effect the security roles as they have the standard SU24 proposal.

[ChethanBS]

Because our clients say it not best practice to use more variants for a transaction code. SU01 was a simple example, for more usage like SARA transaction code for Archiving we have multiple roles for multiple purpose and we need to create each and every variant for SARA T-code.

[MichaelHealy779]

I would respectivley disagree with the client, there is nothing wrong with using variants, in fact its a very nice a clever way of achieving correctly built roles.

[MichaelHealy779]

For SARA, I would recommend doing this with FF and avoid all the trouble with different values.

[ChethanBS]

yes. we find variant is flexible option for Authorizations maintenance. We are too disagreeing with them. Especially for Non-business users its way to hard to remove inactive from SU24. Thank you so much for your response.

[MichaelHealy779]

I think the correct answer here is to use SU24 variants, this would be the best way to achieve what you need to achieve in a standard manner. Please mark this as closed.