UAR tcode usage count on approval

[former_member239256]

Hi all,

I wanted to clarify a question regarding UAR functionality. We have implemented UAR (User Access Review) and we are trying to understand if the count number that we see on user row ever gets reset. Since there is no way to restrict the UAR job execution by date we always see the same usage count regardless of approval. I have a user that shows user count as "2", then we generate UAR and approve. If I run the UAR again for same user it shows again "2", so my question is should the count be reset to "0" after approval? or can it be reset to "0" (without having to clean/archive GRACROLEUSAGE table) so next time we run UAR (lets assume in 6 months) we can see if the user executed a tcode on that role on the past 6 months?

If the value will always show "2" regardless of when the tcode was executed then I don't understand the point of the usage count other that to say "this user at some point in time used the tcode" not a very useful criteria to remain provisioned.

[madhusap · Accepted solution]

Hi Jonathan,

Generally role usage count is based on the role assignment period for the user. So, if the role is assigned for a period of 2 years then the role usage will be inline with the role assignment period for the user.

In case you have noticed any issue with the role usage then implement the following SAP note

2601289 - UAR:- Role usage count not considering the role assignment period

On top of this I also recommend you to check if regular archiving of Action and Role usage data can help to address the requirement also

Regards,

Madhu

[former_member239256]

Hi Madhu,

Thanks for your input, I have been looking in to this for sometime and it looks like the only way to address my requirement is to do an enhancement to include the date as one of the fields for the UAR data generation report or as you mentioned archiving action and role usage data. Thanks for the reply.