Quantcast
Channel: SCN : Discussion List - Security
Viewing all articles
Browse latest Browse all 2353

SAP R/3 : How to clean up duplicate roles assigned to users ?

$
0
0

Hi.

 

While reviewing a customers system of 3300++ users.

I find that that many users are assigned duplicate roles when i check on SU01.

But the only difference i find is that.

Start date is different.

End date comes by default as 31.12.9999.

 

How to clean up these duplicate roles.

Because PFUD does not seem to clean up these duplicate roles assigned to users.

 

Also i find that, if Role A, is part of 2 composite roles, it is getting assigned 2 times.

 

Somewhere i think, some validation check is missing on the system.

How to clean up the same roles which are assigned to users with different start dates.

 

I also understand that, since a whole lot of employees are on contract, which are renewed periodically,

there seems to be some kind of mess up happening when ever employee contracts are renewed.

In the sense, the employee is available on the system, but actually roles validity expires, since position id seems to expire.

And then they are reassigned, and then while re-assigning, the system seems to pick up old roles earlier assigned

and also assign the same roles from different validity start date.

 

Upon further check up and

there are actually 4 servers seen on SM51,

3 servers added for load balancing

since total user base is nearly 9k worldwide. .

 

Can anyone advise on this please.

 

http://scn.sap.com/thread/2077566

 

 

Many thanks

indu


Viewing all articles
Browse latest Browse all 2353

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>