This website is not affiliated with, sponsored by, or approved by SAP AG.

SU01- Deassigning old roles and Assigning new roles

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

SU01- Deassigning old roles and Assigning new roles

Postby Shree143 » Thu Aug 04, 2011 5:29 pm

Hi,
New to security

Trying to De assign old roles selectively and assign new roles for a user in su01

When i try to select old roles in roles tab, able to select some and remove them by using 'delete row' button.

For some roles i am not able to select them, but able to remove them when i 'select all' and 'delete row' in roles tab which will remove some of the other roles required.

Another doubt is User is assigned with a role with ORG_FLAG 'X' in AGR_USERS table when i try to remove that role i get a info pop up saying "User is given with org assignment" i selected "yes" and role is de assigned... when i add the same removed role and check the AGR_USERs table 'X' in the ORG_FLAG is not present.

could someone help me in understanding.

Thanks,
Shree
Shree143
 
Posts: 3
Joined: Thu Aug 04, 2011 5:15 pm

Re: SU01- Deassigning old roles and Assigning new roles

Postby henrik » Thu Aug 04, 2011 6:46 pm

roles are basically assigned in 3 different ways:
1: Directly
2: Indirectly through composites
3: By organisational assignment.

Type 1, you can remove without any problems
type 2 can only be removed by removing the composite - or maintain the composite and do a user compare through PFUD
Type 3 is assigned through HR, and cannot be removed in SU01 - has to be done through the position of the user in the HR org structure.

Hope that helps
www.turnkeyconsulting.com.au
henrik
 
Posts: 493
Joined: Wed Oct 23, 2002 6:38 am
Location: London, UK

Re: SU01- Deassigning old roles and Assigning new roles

Postby Shree143 » Thu Aug 04, 2011 8:28 pm

Henrick,

Got point 1 and 2

with 3rd, de assigning old roles to the position will be serving the purpose... is my understanding right?

Thanks,
Shree
Shree143
 
Posts: 3
Joined: Thu Aug 04, 2011 5:15 pm

Re: SU01- Deassigning old roles and Assigning new roles

Postby henrik » Thu Aug 11, 2011 4:53 pm

You'd want to be careful with that! That would impact any users who are assigned to that position, so might have consequences you didn't forsee. I can't say if that is the solution for you - you will have to work that out yourself.
Of course, for a small fee, I'd be happy to come and help you ;-)
www.turnkeyconsulting.com.au
henrik
 
Posts: 493
Joined: Wed Oct 23, 2002 6:38 am
Location: London, UK

Re: SU01- Deassigning old roles and Assigning new roles

Postby Shree143 » Sun Aug 14, 2011 3:35 am

i'l try myself def'ly ..if i couldn't find a satisfactory solution i'l contact you for sure ...

Thanks,
Shree
Shree143
 
Posts: 3
Joined: Thu Aug 04, 2011 5:15 pm


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 4 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.