How to mass remove Profile from Users

[athakyriaz]

Hello ,

i can find from SUIM T. Code all users in my Client , with SAP_ALL Profile.

How i can mass remove from some Users this Profile (SAP_ALL) ?

Thanks

[Rizwan9697]

Hello,

Number of ways to complete your task regarding removing of roles from 3 different users as its very handful number of users then you can proceed with below mentioned possibilities.

Option1 - SU01 to individual user and click roles tabs select all roles and click on Delete button, you will be all set.

Option 2 - get the list of roles for all 3 users via Table : AGR_USERS and go with SU10 and select remove radio button then click save and you can run the program : PRGN_COMPRESS_TIMES after successfully job run all expired roles will be get deleted.

Option 3 – if suppose you have just 3-5 handful roles then go to PFCG – type assigned role and click to user tab and select the users which you want to remove then click on Role comparison and click save. (not popular or recommended but do the same desired result).

FYI - just a reminder please go through with ADM 940 (ADM940 - Authorization Concept for SAP S/4HANA and SAP Business Suite | SAP Training) which covers all SAP Security topics.

Best Regards,

Mohammed Rizwan

[athakyriaz]

Jan , Your solution works perfect.

My new question now is , how to Clear all Roles from some Users

For example , i have 3 users A,B,C with different Roles and i want to Remove all roles from all 3 users . How ?

Thanks

[jmodaal]

Hello,

this can be done with transaction SU10.

Kind regards

Jan