Deleting roles from multiple users simultaneously

I need to delete all of the roles from multiple users and I was wondering if anyone knows of a way to do it simultaneously other than  a Mercury script(it wont take the roles away that are lower than the initial 20)?

Hi there,
there could be easier ways to do it, but this is how I'd go about it if I didn't want to go to each user ID.
Get a list of all roles assigned to your users you want to restrict from SUIM (display the list of users via tcode S_BCE_68001400).  Click on the 'roles' button and it will pull up a list of all the roles assigned to those users.  Extract and save that).
Filter the list so you have only one entry of each role name.
Then go to SU10, enter in all your user IDs to change and go to the role tab, enter the unique list and put wide dates on it say from 01.01.1995 - 31.12.9999 (you want them earlier than the earliest role 'valid from' date and later than the latest role 'valid to' assignment).
Click the 'Remove' box and save and you should have all roles removed.
Good luck with it.
Cheers,
Dianne

Similar Messages

  • Unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    unable to delete Role from User ID in SAP SOLMAN production system but able to from DEV with the same authorization, pls suggest

    Hi,
    For SU01 role removal, you do not need S_USER_AGR with 02, and as you mentioned both authorizations available in production, if so trace should not show you the S_USER_AGR with 02 with RC=04.
    I would recommend to do role comparison for the user performing the activity. and then check if you have the S_USER_AGR with 02 in user buffer SU56.
    But ideally it should not ask you S_USER_AGR for 02 through SU01, so please take help of abaper to debug it.
    Also put trace in non-prd to see if S_USER_AGR is getting checked with 02 for removal through SU01.
    BR,
    Mangesh

  • Role removal from Multiple users

    Hi All
    I have a query related to removal of roles from user profile.
    I want to delete a particular role from a set of users (say more than 600 users)
    is it possible with su10 you to  remove the role from the users  at a stretch or is it the right way to get it removed from the user tab in PFCG and get the user- master record adjusted?
    Please Suggest

    Hi,
    Preferably, you should use PFCG for your need...
    It will be a easiest way to perform this task...
    After that dont forget to do "user comparison"...
    Regards.
    Rajesh Narkhede

  • Merge iweb sites from multiple user accounts on same computer

    With the previous iweb version, my children created their own iweb sites on their own users, but all under my own .mac account. It worked great.
    But now with the new "upgraded" iweb '08, that isn't allowed anymore.
    So, I created a new user on our computer for all of us to use to maintain our multiple iweb accounts on.
    How can I move multiple iweb sites from multiple users on the same computer into one user?

    Each of the user's work in iWeb will be contained in a single file, Domain.sites2, which can be found in this location on the hard drive for each user account. You will need to copy all of these Domain.sites2 files to an external drive, or, at the very least, burn them to a disk to make them transferable from one user account to another. A flash drive also works great for this.
    Once you have made all of these Domain files accessible from the new user account that you created, you will still have a formidable task ahead of you, i.e., publishing separate sites, from separate Domain.sites2 files, to the same .Mac account/directory. In other words, bringing all of these Domain files together for access by a single user account will not solve the problem. You may very well be able to solve the problem with things the way they are, but it will involve some shuffling of Site's files on the iDisk prior to publishing.
    The method I'm going to give you has worked well for me. So far, here in the forums, I've read posts from (2) other users who were also successful. Conversely, I know of at least (3) other users who have been unsuccessful with this approach. I sure hope it works for you.
    Open System Preferences and go to .Mac. Turn syncing off, if it is on, and leave it off.
    Now, in Finder, navigate to the current Site files on your iDisk, following this path:
    Go/iDisk/My iDisk/Web/Sites/NameOfSiteFolder
    Drag the Site folder that is named for your site, (not the directory Site folder), back one level on the iDisk, into the Web folder. This is where some run into difficulties--you may get an error message that the folder is "in use, and cannot be moved". I have never gotten this message, and am able to move my Site's folders around with no problem on the iDisk.
    If you are successful moving the folder, choose one of your other accounts on your machine, launch iWeb, and Publish all to .Mac. The existing site on the server will not be deleted. Now, go back to the iDisk and move that site folder, (the one you just published), back one level, again, to the root Web directory. Publish your next site, from your next account.
    When you are finished publishing sites, just move the Site folders back to their original location on the iDisk--Web/Sites/SiteFoldersHere. All sites will be accessible from a browser using the web.mac.com/username/nameofsite url.
    It is important to use the Publish all to .Mac command in iWeb. A simple Publish to .Mac command will not put the correct index.html file in place on the server.
    Post back and inform us of your success.
    -Mark

  • Removing a role from a user

    Hi All,
    My requirement is to remove a role from the user so the resources assigned to that role has to be deleted once the role is removed from the user. But I am having some trouble to remove the role in the workflow.
    I am checking out the view of type User and removing the role from waveset.roles and then checking in the view. I don't see any errors but the role is not getting removed from the user and in turn the end resource is not getting deleted.
    Can anybody post some points like what is the correct way to remove the role from the user in the workflow itself.
    Thanks in advance.

    Thanks for the reply.
    Nevermind, actually I managed to solve the issue, there was mistake in the express code.
    I have one question, can you help me? I am removing a role from a user and for example there are 2 resources (A and B) assigned to the role, while removing the role from the user it is deleting the account in both resources A and B but I don't want to delete the account in resource B. Is there a way to do this?
    I am the checking out and checking in the user view and I am using the following code but it is not working. It is deleting the account from both the resources.
    +<set name='delview.update.selectAll'>+
    +<s>false</s>+
    +</set>+
    +<set name='delview.update.accounts.selected'>+
    +<s>false</s>+
    +</set>+
    +<set name='delview.update.accounts[A].selected'>+
    +<s>true</s>+
    +</set>+
    +<remove name='delview.waveset.roles'>+
    +<ref>myrole</ref+>
    </remove>
    can anybody post some points regarding this issue?
    Thanks

  • Streaming from multiple user accounts......problem

    With my initial set up I had no problem. I have a large iTunes Library. 48k songs. Over 270 GB of files. I synced a few photos and some music for the AppleTV slide shows but everything else I was going to stream. Streaming is working wonderfully from MY user account but if I try and stream a similar sized library from another user account on the same computer it is "NO JOY". I get the "loading library" dialog with the little circle of dashes going round and round but it eventually gives up and does not load. I have tried this with iTunes running on my user account and with iTunes turned off on my user account and either way the library from the other user account will NOT load. I am at a loss here. The set up for the second user went smoothly. I clicked add a library and got a key code on my TV screen. AppleTV showed up in the devices column in iTunes of the second user account and accepted the key code but like I said earlier the library will just not load for streaming. Streaming from my first user account is still working well. I have not found any discussion topics dealing with streaming from multiple user accounts. Hopefully someone who is doing this will chime in and help me out if possible.

    The only way I have been able to get this to work is to quit the iTunes that I am currently streaming from. Switch (on the computer) users to the library I want to stream from. Start iTunes on that user. If I follow this I can get AppleTV to load the library of the second user. If I do NOT quit iTunes from the first user it will not load the second user's library. If I have iTunes from the second user running at the same time I quit the first user's iTunes it will NOT load the second users library. I guess it is a bug and will need to be fixed with the next software release. I would like to be able to switch among user libraries at will and independent of which user is currently using the computer.

  • Delete records from multiple table

    Hi,
    I need to delete records from multiple tables using a single delete statement. Is it possible ? If so please let me know the procedure.
    Kindly Help.
    Thanks,
    Alexander.

    Hi Tim,
    Syntax of DELETE statement does not allow for multiple tables to be specified in this way. Infact, none of the DMLs allow you to specify table names like this.
    Technically, there are other ways of deleting from multiple tables with one statement.
    1. "Use a trigger":
    What was probably meant by this is that you have a driving-table on which you create a on-delete trigger. In this trigger, you write the logic for deleting from other tables that you want to delete from.
    This does mean a one-time effort of writing the trigger. But the actual DML operation of deleting from all the tables would be simply triggered by a delete on driving-table.
    2. Dynamic SQL:
    Write a PL/SQL code to open a cursor with table-names from which you want the data to be deleted from. In the cursor-for loop, write a dynamic SQL using the table-name to delete from that table.
    3. Using Foreign-Key constraint with Cascade-Delete:
    This I feel is a more 'cleaner' way of doing this.
    Having to delete data from multiple tables means that there is some kind of parent-child relationship between your tables. These relationships can be implemented in database using foreign-key constraints. While creating foreign-key constraint give the 'on delete cascade' clause to ensure that whenever data is deleted from parent-table, its dependent data is deleted from child-table.
    Using foreign-key constraint you can create a heirarchy of parent-child relationships and still your DELETE would be simple as you would only have to delete from parent-table.
    IMPORTANT: Implementing foreign-key constraints would also impact other DML operations that you should keep in mind.

  • Receiving an error when trying to remove P00 Security role from the user

    Hi All,
    I am receiving an error when trying to remove P00 Security role from the user.
    After logging on to GRC CUP, clicking on u201CCreate requestu201D, and filling out required information,
    I click on Select Roles/Groups
    On the next screen,
    I click on Existing Roles/Groups
    ERROR MESSAGE appears X Action failed and no roles appear in the box to select for removal.
    Regards,
    Vineet

    Hi Vineet,
    My be your selection is incorrect
    Try this
    in Applicaiton Area -- Select ALL
    Functional Area  -
    Select ALL
    Company           -
    Select ALL
    Role/Profile/Group Names --- Give p00* and execute the report
    if you give only p00 it wont give any result
    Hope this helps
    Thank you,
    Kishore

  • Hiding specific Roles from specific users

    Dear All,
    Is there any way in the database that can hide a role from a user. For instance, if I create a role, then this role can be viewed by all the users defined in the database and then these users can grant priviliges of their own objects to such role. I want to create a Role where certain users can not see and should not be allowed to grant any priviliges for this Role...
    is this possible....
    Thanks
    Bil

    For instance, if I create a role, then this role can be viewed by all the users defined in the database no, I do not think so. Roles are only "visible" to powerful users that have access to the dictionary
    SQL> create role SECRETROLE123;
    Role created.
    SQL> grant create session to SECRETROLE123;
    Grant succeeded.
    SQL> grant select on scott.emp to SECRETROLE123;
    Grant succeeded.
    SQL> grant recovery_catalog_owner to SECRETROLE123;
    Grant succeeded.
    SQL> grant update (sal) on scott.emp to SECRETROLE123;
    Grant succeeded.
    SQL> conn blake/paper                                              
    Connected.
    SQL> select * from dba_roles;
    select * from dba_roles
    ERROR at line 1:
    ORA-00942: table or view does not exist
    SQL> select * from role_tab_privs;
    no rows selected
    SQL> select * from role_sys_privs;
    no rows selected
    SQL> select * from role_role_privs;
    no rows selectedHowever, you cannot that easily prevent an user from granting a table privilege on its own table to a role
    SQL> grant all on t to secretrole123;                            
    Grant succeeded.
    SQL> select distinct grantee from user_tab_privs;
    GRANTEE
    SECRETROLE123Perhaps you can setup a database trigger
    Message was edited by:
    Laurent Schneider

  • Give same role to multiple users in CUA

    Hi gurus
    Urgent!!!!!! need help
    How do I give same roles to multiple users in  CUA without going to user id and giving access to the same role individually in CUA.

    SU10 or SECATT
    Edited by: John Navarro on Feb 22, 2008 10:22 PM

  • "CLOSED":How to plan inventory from multiple orgs simultaneously using MRP?

    Hello everybody,
    How to plan inventory from multiple organizations simultaneously using SCP?
    My customer found that in supply chain planning (MRP) system always plans in single manufacturing organization, say, ATC, firstly. If set in organization item master, the source type as 'Inventory' and the source organization as another trading organization name, say, ANX. if there is insufficient inventory in ATC, SCP-MRP would plan in ANX, disregard of the inventory exist in ANX for the item.
    But for some items, there are both inventory in ATC and ANX and we want plan BOTH their inventory simultaneously instad of firstly ATC and then ANX.
    Is there any standard function in Oracle that can do so? I found that the sourcing rule cannot help in this case.
    A simple test case is described in
    https://gtcr.oracle.com/gtcr-dir/gtcr_4607/5580425.992/Alternative_to_plan_multi-org_MRP.doc
    Thanks
    Catalina
    Message was edited by:
    user447176

    Catalina,
    Net the inventory simultaneously? Its not quite clear what your client wants.
    Even in the old SCP, you can use sourcing rules to first net inventory in org1 and then net the inventory in org 2 via a transfer from rule. The key point is it is always incremental based on where you place teh demand and then you provide source to fill that demand.
    One restriction that ASCP still has up to 11.5.10 is that you can only have sourcing rules going in one direction. This means that you can't have a rule that sources ORG1 from ORG2 for item A, then have the revers in ORG2 sourcing from ORG1. That won't work, ASCP will randomly ignore one of the rules.
    The best choice may be to use GOP with a sourcing split % so that yo do consider the inventory in both orgs when demanding the order, but it would still be done by checking ORG1 then ORG2.
    Hope this helps.
    Kevin Creel

  • Not able to access Mozilla with the generic account (NIS account) by multiple users simultaneously

    • Using a single Generic account multiple users are trying to login from different machines simultaneously to Mozilla Firefox. • The Mozilla Firefox is fully operational only for the first user who has initially opened Firefox session. • If the second user trying to access the Firefox with the same account, it is displayed as there is another session is already running and most of the Firefox options are getting grayed out i.e the navigation, history and forward/ backward tabs available in the menus become inaccessible.Our Requirement is that multiple users need to access multiple sessions simultaneously with all the features of Firefox available. Kindly assist me here.

    Same problem, Pls help me

  • Importing Photos and Music from Multiple users on the same Mac

    I am the same person with multiple users on one iMac. I need to have the same pics and music files on all of the user names on the one computer.
    I have the family pack MobileMe plan.
    Where are the files located for the photos and music in iTunes?
    I would like to import them from one user to another user on the same computer.
    Thank you

    Welcome to the Apple Discussions.
    If you Import the files from one User to another then you will use double the disk space on your HD as you will have multiple copies of everything. Why not simply share the files between accounts?
    For iPhoto 09 (version 8.0.2) and later:
    What you mean by 'share'.
    If you want the other user to be able to see the pics, but not add to, change or alter your library, then enable Sharing in your iPhoto (Preferences -> Sharing), leave iPhoto running and use Fast User Switching to open the other account. In that account, enable 'Look For Shared Libraries'. Your Library will appear in the other source pane.
    Any user can drag a pic from the Shared Library to their own in the iPhoto Window.
    Remember iPhoto must be running in both accounts for this to work.
    If you want the other user to have the same access to the library as you: to be able to add, edit, organise, keyword etc.
    Quit iPhoto in both accounts. Move the Library to the Users / Shared Folder
    (You can also use an external HD set to ignore permissions, a Disk Image or even partition your Hard Disk.)
    In each account in turn: Double click on the Library to open it. (You may be asked to repair the Library Permissions.) From that point on, this will be the default library location. Both accounts will have full access to the library, in fact, both accounts will 'own' it.
    However, there is a catch with this system and it is a significant one. iPhoto is not a multi-user app., it does not have the code to negotiate two users simultaneously writing to the database, and trying will cause db corruption. So only one user at a time, and back up, back up back up.
    Regards
    TD

  • Viewing itunes content from multiple user ids

    We have multiple users on one iMAC.  How do I enable each user to view and use our itunes content from each individual user account?
    Thanks, P

    Thank you very much for your help!
    He is really good at informatics and his best friend (who allegedly hacked my iPhone) is an IT freak whereas I'm very bad at it.
    I don't use iCloud or PhotoStream. He has an iPod, but we definitely don't have the same username.
    My iPhone hasn't been jailbroken, but allegedly one can hack it with the help of the IP address (that's what he told me).
    He transfered all data from my computer to his computer (including iTunes).
    He said he read the messages in iTunes (after the transfer). But I deleted the messages with this contact almost half a year ago.
    I rummaged in my laptop for this information but I didn't find anything.
    I am very perplexed about this whole situation and curious if he is just lying to me to just to find something out about some problems we had before. I have no idea when it comes to stuff like this.

  • Add-on Used By Multiple Users Simultaneously

    I'm trying to implement an add-on that can be used by multiple users in SBO simultaneously.  After installation, the code I have created works great for one user, and is set to start automatically on user login for all users.  However, when I leave one user logged in and then try to log in with another user account, I get an exception because the exe is already running under the other user.  What is a good solution to get around this and would anyone have any sample code from one of their projects?  I'm using Business One 2004 PL14, as well as for the SDK, and VB.NET/Studio 2003.
    Thanks in advance!

    I am trying to picture this.
    Are you starting up an entirely new SBO client on the same workstation and logging in under a different user when this occurs?
    Can you provide a little more info on the error code you are getting and what is reporting the error?

Maybe you are looking for

  • Can i have two apple tv on the same home sharing imac

    I have apple tv in the living roon which i stream movies from imac via home sharing. Can i use another apple tv on the home sharing, use them both at the same time without any problems.

  • IPod Touch 3.1.3 1G no volume bar.

    does anyone has this problem? i plugged in earpiece, reset everything,restore to factory setting,tried everything but still there is no volume bar appearing! There is a very very soft volume but its really depressing you can't adjust the volume!

  • How does one create this effect...

    I want to make text or any shape really be like almost engraved into any image. For an example look at the gts part of this background image. http://i1.ytimg.com/bg/H-_hzb2ILSCo9ftVSnrCIQ/115.jpg?app=bg&v=4ed767bf or the text in this just without the

  • Toll free

    I

  • LOGIC- developpers : Please give us a Plain background.

    Hi , Something for the logic developpers. Could it be possible in a future logic 8(?) to be able to create a plain background instead of the desktop with all the icons on it (very handy to download to and to easy open programs, so to just clear the d