Can Profiles be deleted?

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

Locked
ak4sap

Can Profiles be deleted?

Post by ak4sap » Thu Oct 31, 2002 6:49 pm

Hi all,
I have to give a user some profiles for just limited no. of days.
Is there a timestamp feature, that could just assign the profile for 3 days or so and delete the profile automatically?
How do we do that?
Please be aware, that I dont have to delete the user!
AK

al-sakat
Posts: 1
Joined: Tue Oct 22, 2002 5:35 pm

Post by al-sakat » Thu Oct 31, 2002 9:46 pm

hello:

If you created the profile manually then there is not time stamp. To let the
user access a profile for a limited amount of time you need to do the
following:

1. Create an activity group and generate the profile via the profile generator PFCG.

2. assign the user this activity group in his/her master record and here
you can input the "valid to date" the last date you want the user
to access the profile.

I am assuming you run " mass compare" on dialy basis as a batch job. This tool will remove the profile from the user master record hence he/she can not access the transactions contained in this profile after that date specified in the "valid to "


I hope this will help.

regards
massoud al-sakat
sap security administrator
malsakat

ak4sap

PFCG_

Post by ak4sap » Thu Oct 31, 2002 10:22 pm

Hi,
Thanks.
we run batch job to clean the user account but that de-activates or deletes the user.
Is there a way, we can just remove profile after the due date has passed and not delete the user?
Because, we are giving some special profile to a user for 3 days and we want to keep other roles/ profiles.
Thanks in advance.
AK

ak4sap

mass compare?

Post by ak4sap » Thu Oct 31, 2002 11:05 pm

Hi,
How do we do mass compare?
AK

manuel
Posts: 13
Joined: Thu Oct 31, 2002 10:22 pm
Location: Singapore

Post by manuel » Fri Nov 01, 2002 12:13 am

Do mass comparison by running transaction PFUD or report RHAUTUPD_NEW.

Locked