Deleting roles from GRC AC CUP

Hi
We had GRC 5.3 installed with SP05. We have archived all our existing requests and are trying to delete some of the roles from CUP. However when trying to delete the role it is giving a message "Cannot delete because this is referenced by request". Is there something else which i need to take care of? Will application of latest support packs help in this situation?
Appreciate your help regarding the same.
Thank you.
Anjan Pandey

Hi Anajan,
I feel some requests are still exist in GRC CUP for that particler role. Please follow the below steps and try to delete the Role  again.
Go to  CUP configuration tab  > click on Request option under the workflow> choose deleting requests > next> then its asks to delete all requests and then choose Submit option.
once you click on submit button, you will get the message all existing requests are deleted with Job id.
finally go to the Roles and delete the required roles form the GRC CUP.
Regards,
Arjuna.

Similar Messages

  • Deletion of mass roles from GRC CUP 5.3

    Dear All,
    I have requirement to delete 1000 roles from GRC CUP 5.3.
    I can see option to delete the roles individually under "search role" option but I am not able to find option to delete mass roles.
    Please advice.
    Regards
    Trinadh Bokka

    Hello Trinadh,
    It is not possible to delete all the roles at once through the User Interface. However, you can select a lot of roles at the same time by searching for a role pattern. For example, retrieve all roles starting with Z*:
    Hope it helps,
    Fernando

  • Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    Hi,
    For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
    I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
    But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
    Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
    BR,
    Mangesh

  • How to delete stale request from GRC AC CUP

    Hi,
    I have defined certain workflow which are no more required and should be removed from the wrokflow to avoid any confusion. I am not able to delete the workflow defined since they are tagged to some of the requests which are not approved and are currently available to be approved. How can I delete these old workflow which in not required in future without impacting the configuration setting from GRC CUP.
    Thanks,
    Abhimanu

    Hi Abhimanu,
         You may close open requests by configuring stale requests. Take the following steps from configuration.
    Navigate to Request --> Stale reqeuests
    from action dropdown select enable and no of days field enter no of days any request should wait before it should go to closed status.
    Schedule a background job to review  all open req. against the Stale Requests setting. Any req. meets the criteria will be automatically closed.
    Hope this should help to close those.
    Regards,
    Asok

  • Deleting roles from CUP

    Gurus,
    We accidently synced CUP with our EP which points to an ABAP stack (therefore tens of thousands of roles!). There are over 6,000 pages of roles in CUP that need to be deleted. Do we have to do this page by page or is there another way?
    Thanks,
    Grace Rae

    Hi Grace,
    Role deletion in CUP can be either rolewise or pagewise. However there is an easier method where you can disable the Roles in one go. The Disabled Roles do not get displayed to Users at the time of Request creation.
    The Role Upload Template which is used for importing these Roles in CUP would be needed here. There is a 5th field for Systems in the template, which had to be modified.
    If the System for these Roles is EP then just replace it with EP(D) in the Role Upload Template. After this modification import the Template again and check the Overwrite Existing Roles option.
    Hope this will minimize your efforts in deleting Roles.
    Regards,
    Nikita.

  • Deleting roles from multiple users simultaneously

    I need to delete all of the roles from multiple users and I was wondering if anyone knows of a way to do it simultaneously other than  a Mercury script(it wont take the roles away that are lower than the initial 20)?

    Hi there,
    there could be easier ways to do it, but this is how I'd go about it if I didn't want to go to each user ID.
    Get a list of all roles assigned to your users you want to restrict from SUIM (display the list of users via tcode S_BCE_68001400).  Click on the 'roles' button and it will pull up a list of all the roles assigned to those users.  Extract and save that).
    Filter the list so you have only one entry of each role name.
    Then go to SU10, enter in all your user IDs to change and go to the role tab, enter the unique list and put wide dates on it say from 01.01.1995 - 31.12.9999 (you want them earlier than the earliest role 'valid from' date and later than the latest role 'valid to' assignment).
    Click the 'Remove' box and save and you should have all roles removed.
    Good luck with it.
    Cheers,
    Dianne

  • Deleting role from BP

    Hi Experts,
    I am using CRM 4.0.
    I have mistakenly assigned a role to a BP and i have saved it.
    How can I remove/delete this role from the BP.?
    Please help.
    Many thanks,
    Neeraj

    Hi,
    Actually you should not be deleting a role assigned to the BP. Here is the explanation.
    Explanations and reasons are following:
    1. Role is not a characteristic of BP, and not also not a field value which can be stored and changed.
    2. Technically, Role is a dynamical link to the group of BP subscreens in
        the table BUT100, this is an only place where this Role is presented
        physically.
    3. This value is not shown anywhere, and used only by a
        transaction BP for internal purposes.
    4. But even after usage of some solution for doing it, nothing can prevent
       automatical detection. That means, if you maintain some BP data, which
       is enough for some particular role, this role will be marked as
       maintained anyway.
    5. This is not an only side effect, which can not be resolved. Kindly
        remember, that actual BP Data is not changed by changing a Role. That
        means, that after deleting of a Role, which provides an access to some
        Role-specific data, this data won't be deleted, just hided from user in
        transaction BP.
    In this case, when some program will request for this data, it will
    receive it without a problem, and potentially this program can determine
    this BP incorrectly.
    Also, when somebody switch a Role for this BP to the "deleted", already maintained data will "suddenly" appear. The same can happen, if this data is shared between several BP Roles (like Sales Area data for Ship-to party and Sold-to Party) - after switching to another Role, data
    for "deleted" Role will appear again.
    If you need further information kindly refer to note 596334.
    Hope this helps.
    Venkat

  • Unable to delete role from a project

    hi
    i added a role to a project.   i staffed it with a resource.  Now when i try to remove this staffing.. i get the message
    "Cannot delete project role staffing"
    the help is as follows
    Cannot delete project role staffing
    Message no. DPR_BUPA_LINK020
    Diagnosis
    You are trying to delete a staffing. However, the resource of this staffing is entered as a responsible resource for at least one project element or is assigned to at least one task. The status of the assigned project element does not permit changes. This means that the links cannot be deleted and therefore, the actual staffing cannot be deleted either.
    System Response
    The system does not delete the project role staffing and issues appropriate messages.
    Procedure
    Reset the status of the assigned project element so that the changes can be made.
    Make sure that the links are removed by authorized users or obtain the relevant authorization from your system administrator.
    But i have added the role and staffed it afresh.  i am also not able to delete any newly added roles.
    Pls suggest!
    Regards,
    Sujata.

    Hi,
    Have u tried by following dignosis solution given in message help. Please try by removing the responsible resource from basic data tab of phase or task for which the person is assigned. also check the status of task or phase for which he is assigned as responsible person. if the perticualar task is complete then I beleive tht u will not be able to remove responsible person.
    Pramod

  • CUP 5.3 (SP9) Role search in a CUP request

    Dear Experts,
    I have a problem. I cannot select roles by company selection in a CUP request. I believe I am not associating companies to roles correctly...I don't know what went wrong and what additional procedures that I have to follow to fix this problem.
    I need this selection feature since we are going to give a set of roles to users (or let them select) according to the company that they belong to.
    Here is what I did basically:
    1. Under Configuration>Role Attributes>Custom Filed in ERM, I set up a custom filed "COMPANY" and put some values (COMP1, COMP2, etc).
    2. Under Configuration>Roles>Attributes in CUP, I also set up companies that are exactly the same as those in ERM.
    2. Then, I created a role (ROLE1) in ERM and gave a company attribute (COMP1) to that role. Now, ROLE1 should be associated to COMP1, theoretically, right?
    3. However, when I crate a new user in a CUP request and then search for a role (ROLE1) by selecting company attribute (COMP1), the role (ROLE1) does not show up. This is my problem.
    PS: I have no problem getting a role by functional area, business process, or other predefined attributes in CUP.
    Please save me if you can.
    HM

    Hi Frank,
    1. The company ID is identical in ERM and CUP, and properly assigned to roles?
    =Yes (double checked).
    2. You have imported the roles from ERM to CUP?
    =Yes (CUP>Roles>Import Roles/Groups, and the role source is ERM).
    3. Do the roles show up with the correct company assigned in CUP Role Search?
    =No (please see below commnets).
    When I search roles in ERM (Role Management>Role>Search), I can see the company ID under the tab "Custom Attributes".
    When I search roles in CUP (Config>Roles>Search Roles), I don't see the company ID anywhere including the tab "Company" and "Custom Attributes".
    Does this give you any clue?
    Thanks,
    HM

  • Transport Deleted Roles

    Hi
    I would like to get some information regarding transport of deleted roles from one system to another.
    For some reason we have a set of derived roles in PRD (Around 12) and dont have it in QA.
    I would like to have the same created in the QA. After that I would like to delete all these derived roles in QA. I would like to have the changes cascaded to production  as well.
    My question here is that Since i am going to delete these derived roles I do not want to go through the trouble of assigning the exact authorizations for these derived roles (as what is present in PRD) coz doing so would consume a lot of time. I would just like to create the child roles (with the same name as its in PRD) and then I would like to cascade the deletion.  Is that possible ? How ?
    Is it sufficient to just have a role by the same name (without all the authorization data) and do a cascade delete ?
    Should you have some reference document which can be shared please do so.
    Please advise
    best regards
    Ravi
    Note: I am not using Central User Administration.

    Hi ,
    The roles ( the main role and the derieved roles will also be downloaded ) can be downloaded  from the PRD by using the T code PFCG -
    > utilities -
    > mass download or role----> download from the menu bar onto the desktop and log on to QA and and again use PFCG  Transacion then uploaded from role   -
    >  upload  after which the roles uploaded need to be generated .
    This will have all the roles in the QA system with the derieved roles as well and  if the roles are deleted in the QA and then if the main role is again uploaded to PRD the it will overide the existing roles with the new ones from QA with all the new changes done in QA .
    Hope i am not missing anything ,
    Regards,
    Sagar

  • CUP - Unable to assign and delete role at the same time

    Hello everybody,
    I have an issue with CUP.
    Regarding a change account request, if I assign roles, it works. In the other hand, if I delete roles (also with a change account request) it works too. But if I mix both of them in the same request (assigning and deleting roles) it doesn't works. Only the deletion works. Some times we have no error message and some times we have:
    Error provisioning your request. Request no: 94. Error occurred in the system(s) : n/a, error details :
    DR1CLNT200-ZTEST01-USER CREATE-Function template /VIRSA/BAPI_USER_CHANGE could not be retrieved from DR1CLNT200
    Do you have please an idea to solve this issue?
    For information the CUP used is a 5.3 SP 5.0 version.
    Thanks in advance for any help.
    BMW

    Hi Ben,
    There may be a possibility of such a behaviour in SP05 as many of the changes in code has been done
    till now which may result into such issue and we can't confirm your findings by re-creating it. However, you can check few things functionally which may resolve this issue:-
    1) This error usually comes when the role selected is already assigned to the user or user doesn't exist in the system for which change request is created.
    2) when this error encounters the system, please take the system logs for that time from 'Monitoring' tab under configuration in 'English' and there the error cause can be found out or please paste the logs so that we can analyse.
    3) Also, you can refer to SAP Note:- 1168508 where many of the role related issues have been resolved after SP05, therefore, for smooth functioning of GRC-CUP 5.3, it's better to upgrade to the latest SP i.e. SP18.11(available at SMP).
    Best Regards,
    Akhil Chopra

  • Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

    Hello,
    I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
    1. Connected CUABOX to GRCBOX like a plug-in system.
    2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
    3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
    After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
    Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
    Any help in this regard is very helpful.
    Thank you,
    Pawan

    Hi Alessandro,
    I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
    1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
    2. Approvals provided to assign the ECC role.
    3. I see the following in GRFNMW_DBGMONITOR_WD.
               Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
                   New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
                   T-CUA_CHILD User does not exist in target system CUA
    GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
    However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
    So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
    Thank you for your help!
    Pawan

  • Deleting photos from the camera rol but not from photostream

    When deleting photos from the camera rol, sometimes the delete action triggers the deletion of the photo in the photostream as well, sometimes not.  What triggers this and how to prevent the photo to be deleted from the photostream as well ?

    My Photo Stream FAQ - Apple Support
    Get help using My Photo Stream - Apple Support

  • How to delete backend system data from GRC,GRC 10 AC

    Hello experts,
    we have connected multiple ECC systems to GRC by creating connectors with respect to each system and
    currently we are using,now due to some reasons customer requested to delete complete data from
    one of the ECC system from GRC.
    we are using only access control with all components
    please  suggest how to delete all relevant data
    from GRC system
    Thanks
    GRC Admin

    Hi,
    You can use program GRAC_DELETE_ACCESS_RULES to achieve your requirement.
      2075597 - How to delete specific system from SPRO
    Regards,
    Madhu.

  • I have a photo in an album and in camera roll. I am trying to delete the photo from the camera rol and the only option that i get is : delete everywhere?     Noooooo i just want to delete it from camera roll!!!!!

    I have the same photo in an album and in camera roll. I am trying to delete the photo from the camera rol and the only option that i get is : delete everywhere?     Noooooo i just want to delete it from camera roll!!!!!

    The way that I understand that it works, is that the photos are not copied into the new albums, instead it just points to the photos - the number of photos on the iPad in Settings > General > About doesn't increase when you create new album so I assume from that that it isn't copying the photo, just pointing to it. So if you delete the photo from the camera roll you will therefore also be deleting all the pointers to it

Maybe you are looking for