Deleting unused transactions from roles

I am planning for unused transaction cleanup activity for SAP roles as mentioned below.
There are lot of roles which are copied from SAP menu due to which they consist of around 1000 transactions. Now I know there will be around 50 transactions which might be used and rest of them not used at all.  I have made the strategy to find all the transactions which are not used during the last 3 months(using ST03N) and than consult the list with the role owners and delete the unused transactions.
I would like to know whether this is the correct strategy to follow, will the ST03N data-> transactional profile provides the relevant data to sort out the transactions not used in last 3 months.  Please suggest or any alternative strategy can be followed. I know about sm19 audit log, but the problem is that it cannot be activated for all the users due to file space and performance issues.
Regards,
Sanjay

There are lot of roles which are copied from SAP menu due to which they consist of around 1000 transactions.
I am tempted to move this to the Test&Playground forum, because that is what building authorization roles from SAP Menü navigation nodes is.
If course if you do not care and it is better than manual profiles then it is not all bad, so I will leave it here in the security forum fir now.
From my side, if you have no clue... then go for the SAP standard roles and copy them into your own namepsace and work from there to start with. Check the objects included against audit check lists as step two. Take a closer look when you have a chance as step three (there are many manual auths in there...). You will be better off this ways than inventing roles of your own without any tcode or blue-print infos.
I would however still not call it "best practice" and it will backfire over time, but it can be done in a few days (so that you can get your bones out of the project and onto the next one without learning about the pain-points).
Eventually you become a professional bull-*******...
Cheers,
Julius

Similar Messages

  • HOW TO Delete Unused Media from FINAL CUT PRO

    *HOW TO DELETE UNUSED MEDIA FROM HARD DRIVE IN FINAL CUT PRO.* Keywords: disk disc drive space remove compressor
    SUMMARY:
    Say your original clip is 10 gigs, you can use only what you need and delete the rest from your hard drive. I know people on the forums say to just buy another hard drive, NO! It took 2 days to figure out but here it is!!! Email me if needed at [email protected]
    QUESTION:
    I captured 1 hour of video at a time and now want to delete from my hard drive all the parts I don’t want to use. I have 300GB of junk on my hard drive and I only want to use a few scenes using a few megabytes, so that I'll get most of my 300GB back!!!!
    ANSWER:
    In final cut on Mac, click on one small clip (to get familiar with process), go to “file”, “export”, then “using compressor”. This will open compressor software. Your file will open in the left top window. Then you need to batch the job or jobs. IMPORTANT: I’ve also solved the Compressor problem when you press “submit” to a batch and it states “Cluster: None”. Search forum for “In compressor you experience what I have”.
    <Edited by Moderator>

    Part of the problem could lie in the fact it's an imovie project coming into FCP, wouldn't rule that out. Second my be the terms you use and what you expect to happen. For example, a subclip is just a smaller clip subbed from a larger clip. It has nothing to do with media management. But you can media manage a subclip and delete the unused media.
    Try this (be sure to back up the original clip first). take a long clip into the viewer, make an IN and OUT duration of like 30 frames and then subclip that, Modify > Make Subclip. a new subclip will appear in the browser with a torn clip icon and the name Subclip. Right click on the subclip and choose Media Manager.... Check the Delete unused media from duplicated clip. As you toggle that the green Modified bar at the top change from the full clip size to a tiny modified size. If it does not then one of two things ... user error or the system is screwed up. That's the easiest way to test media manager.

  • Delete query names from roles and favorites

    I deleted some of the queries in production using RSZDELETE but didn't delete those objects from roles and favorites. As the delete option is disabled in query dsigner and bex analyzer, I m looking for other ways to delete the query names from roles and favorites folders

    PFCG is surely one of the ways to delete queries assigned to a role. But i doubt you might have access to tat tcode in production.
    If you are looking towards deleting the queries from roles and favorites using Bex analyzer, you need specific authorizations. If you have those authorizations you can surely delete the queries from roles and favorites using Bex analyzer.
    Hope this helps.
    Regards
    Gaurav

  • Don't understand 'Delete unused media from duplicated items'

    Can anyone help with this?
    I have a large project spanned across 2 drives and want to tidy it all up to a third drive. Using Media Manager (with no specific sequences selected) it says the project size is 350Gb. If I check the 'Delete unused media from duplicated items' box it reduces to 267GB.
    Given that I'm not selecting a particular sequence edit I assume it is aimaing to manage all files. So what is the variation of 84GB. If I opt for the 267GB, what is in the 84GB that I'm about to loose. I haven't duplicated anything so unsure what I'll be losing?

    You won't lose anything if you copy the project with Media Manager. Test the copy afterwards to make sure it is exactly what it should be. Once you are happy with it, the original can be deleted.
    You can make the copy even smaller if you exclude render files. It will have to be re-rendered only if you have to revisit the project at some point. Use the space saved for something else until it is really needed.

  • Titles or Music in Project Shift when deleting unused clips from Event

    When deleting unused clips from an Event ("Move Event to Trash | Delete Unused") the Titles and/or the Music / Voiceover shifts in time within the project built from clips in that Event. Sometimes, the music slides later, so instead of starting at the beginning of the project, it's slid over by 20 or so. Other times, the music stayed anchored, but the titles moved to later times. In some cases, the titles not only moved, but streched in time, so that a 5 second title placed at 10 seconds into the project, became a 47 second title, starting 35 seconds into the project! This has happened to four projects and I just verified again as part of this posting that it is still an issue. Easy enough to slide the clips and music back where they belong but now it says "Itunes" and "YouTube" is out of date; they are not - it's iMovie that got confused.

    You're performing a 'Ripple delete' by using the DEL key. Use the DELETE key to perform a 'Lift delete'. The DELETE key is located just above the backslash key.
    -DH

  • Copied role but want to delete a transaction from S_tcode

    Copied one of our roles to a new role.
    When I go to the new role and want to change authorization for s_tcode.
    I want to remove a transaction from s_tcode. I only have a display icon
    It will not let me delete transaction.
    How can I change display icon to change
    Any suggestions on what I'm doing wrong
    Thanks
    Joe

    you should ask your question in the SECURITY forum to get a better answer.
    please check Security

  • BDC to PFCG (Delete Authority Objects from Roles.)

    When we try to change an authority object it gives an error message saying that 'This authority object is used in roles XXX'.
    To remove Authority Ojects from roles, transaction PFCG is used. But the problem is that BDC is almost impossible to PFCG.
    Is there any way you can suggest us to change an authority object when it is assigned to a role or how we can BDC delete authority object from a role or a function/badi we can call to achieve this.
    This is a very high level question.

    Hi
    U should consider PFCG trx is enjoy trx so it's not suitable for BDC, what doesn't mean you can't do a BDC program for that trx but it won't be easy.
    Anyway you can know the users assigned to certain profile reading table AGR_USERS. I believe PFCG shows them sorted alphabetical, so you can know the position where an user should be, after u should use PAGE UP and PAGE DOWN command to scroll the table control.
    Max

  • Delete unused audio from GB sessions from hard disk

    I would like to clear the unused audio from many Garage Band sessions from my hard disk. When audio is recorded in GB where is it stored?
    Thanks
    Mac OS X 10.4.11 MacBook 2 Ghz Intel Core duo
    Garage Band 3.0.4 (104.7)

    Normally, GB does a pretty good housekeeping job with the audio files: If you are not using a recording at all in you project, it gets deleted next time you save your project. (That means: not using even a fraction of a second - otherwise the whole audio is kept, since GB's edits are non-destructive.)
    Having said that - if you want to check, the audio recordings are in a folder inside the project package: ctrl-click the project in the Finder, select "show package content", and look inside the media folder. Be careful - deleting stuff from that folder that you think the project isn't using might confuse GB.

  • Media Manager not deleting unused media from HDV (intermediate codec) clips

    I have a project which uses HDV footage which I captured using the Apple Intermediate Codec. I now have a bunch of clips that are very large in file size so I'd like to use the Media Manager to delete all the unused footage from the clips. I have tried countless different selections of sequences, clips in the browser, clips in a timeline etc but can't seem to get the Media Manager to show a smaller file size for the processed files based on 'Use Existing' with 'Delete unused media' option. The two size meters at the top always stay the same. Can the media manager trim HDV/Apple Intermediate Codec footage? If not is there a way to get rid of the footage that I haven't used? Thanks!
    Ben

    I've never mastered MM. If I want a small section out of larger clip, I simply just export that section of the clip using 'current settings'.
    Hope someone who has tamed the MM beast will step in here and offer you a better way...
    good luck.
    x

  • Mass deletion of TCode from roles

    Hi
    I would like to remove a certain Tcode from a list of roles. I would not like to do this manually (PFCG'ing every role). Is there another way by which this requirement can be taken care of?
    Can a ABAP program be created for this (thru table AGR_TCODES)
    best regards
    Ravi

    Hi
    From what I understand Tcode removal is a manual process (at the most what one can do is to search through the binoculars in the Menu tab to see if the Tcode is present and then manually scroll down to identify the Tcode and then delete the same)
    How can a CATT script search for a Tcode to be removed?
    best regards
    Ravi

  • Removing single transactions from roles

    I hope this is the right forum... having problems finding a better one.
    Here is my question: If I have a role that includes wide open authorizations (like SAP_ALL) what would be a good way to exclude certain transactions, like SE10 for example?
    Many thanks in advance.
    Edit -- nevermind, found my answer.
    Edited by: MMPP on Jan 29, 2010 5:13 PM
    Edited by: MMPP on Jan 29, 2010 5:13 PM

    I hope this is the right forum... having problems finding a better one.
    Here is my question: If I have a role that includes wide open authorizations (like SAP_ALL) what would be a good way to exclude certain transactions, like SE10 for example?
    Many thanks in advance.
    Edit -- nevermind, found my answer.
    Edited by: MMPP on Jan 29, 2010 5:13 PM
    Edited by: MMPP on Jan 29, 2010 5:13 PM

  • How can I remove, delete unused website from bookmarks?

    How can I delete dated unused website fron Safari bookmark list?

    In the Safari menu bar, click on Bookmarks and select Show All Bookmarks. Find the bookmark you want to delete, click on it once, then click the Delete key on the keyboard.

  • Deleting Locked Transactions from SM12 programmatically

    HI,
    If a user is editing a particular transaction(Service ticket ST) and in this process if the particular transactions hangs or if the user is not following the correct process, this particular transaction gets locked for that particular user.
    Please suggest me which are the methods and function modules i can use to delete the entries in SM 12 programmatically.
    Thanks in advance.
    Warm Regards,
    Mathew.

    Hi Faisal,
    Sry i am new to CRM. Will this code work in deleting the SM12 entries programmatically.
    I need to delete the session lock for that particular user.
      DATA: W_GARG  TYPE EQEGRAARG.
      CLEAR: W_GARG, ENQ, ENQ[].
      CALL FUNCTION 'ENQUEUE_READ'
        EXPORTING
          GNAME                 = P_GNAME
          GUNAME                = P_GUNAME
        IMPORTING
          NUMBER                = P_NUMBER
          SUBRC                 = P_SUBRC
        TABLES
          ENQ                   = ENQ
        EXCEPTIONS
          COMMUNICATION_FAILURE = 1
          SYSTEM_FAILURE        = 2
          OTHERS                = 3.
      IF ENQ[] IS NOT INITIAL.
        CONCATENATE SY-MANDT P_WI_ID INTO W_GARG.
        DELETE ENQ WHERE GARG  W_GARG.
        CALL FUNCTION 'ENQUE_DELETE'
          EXPORTING
            CHECK_UPD_REQUESTS = '1'
          IMPORTING
            SUBRC              = P_SUBRC
          TABLES
            ENQ                = ENQ.
      ENDIF.
    ENDFUNCTION.

  • I Need To Delete All Transactions and Balances From all Modules

    I Need To delete All Transactions From All Financial Modules (AP,Ar,Gl,Cm and FA)
    payables ( Delete All Invoices and Payment that validated and create accounting )
    Receivables ( Delete All Transactions and Receipts that completed and create accounting )
    Assets ( Delete All Asset Depreciation Amount )
    General Ledger ( Delete All Journals That Posted In General Ledger )
    I Need To Make This To Delete Any transaction Or Balances And Uploading Anew Balances and Journals
    Can I Make This By Purge and How Can I Do it ? Or any another Way ?
    Thanks,
    Mohamed Gamal
    Edited by: Mohamed Gamal on Sep 5, 2011 2:27 PM
    Edited by: Mohamed Gamal on Sep 5, 2011 2:28 PM

    Hello Mohamed.
    Each Application User's Guide (for AP, AR, GL, CM and FA) has a section dedicated to Archive and Purge process.
    Depending on the quantity of records you need to process perhaps you should consider other options like creating new organization(s), books, etc. and create only the desired open items in there.
    Octavio

  • SQL Command for deleting T-Code for roles

    Hi Experts
    I want to delete the transaction from the role name by using SQL Command in MS-SQL Server  instead of going to /npfcg -> zwa_xyz (role name for user) and transaction code is CR01,CR01,CA01 Etc.,
    I have so many transaction code which is taking time to delete one by one.
    So is there any SQL Statement to delete the t-code for that rolename
    Delete from tablename where t-code=xyz and rolename in ('zwa_xyz',zwa_123')
    regards

    Hey,
    SAP does not support executing update/insert/delete SQLs on their tables,
    (the only SQL they support are select, and updates that they publish in their official site, such as notes in service.sap.com/notes)
    is is probably due to the fact that sap contains about 30,000 of table,
    and sometimes SAP uses cluster tables (which are difficult to handle in DB)
    in addition, each and every SP adds/remove table or changes existing tables.
    For example, you probably don't know that changing rule, would
    create a change document (cluster table - CDHDR, CDPOS and etc),
    If you want, it is very easy to get the full list of the table (and the sql) that are updated
    (as I mentioned before, it is not recommended to run this sql, because it is not supported!!!)
    just run transaction ST05 while deleting transaction from role,
    when you display the list, press shift+F8 (or summerized trace from the menu),
    and they search (Ctrl+F) the words: update or insert or delete.
    You can use standard API such as BAPIs (such as BAPI_USER_*)/IDOCs(such as USERCHANGE),
    and execute them from the portal and any other place (even in EXCEL or OS->meaning command line).
    Here more information on executing RFCs:
    1. in order to execute an RFC from excel, you should install SAP gui on the client that would execute the RFCs to the SAP, and you would have to write VBA code.
    2. in order to execute an RFC from command line, this is a little bit more difficult,
    sap provide RFC sdk (in service.sap.com/SWDC)
    3. in order to execute an RFC from .net you can use the .net connector,
    more information is here:
    NW RFC SDK - is there a guide somewhere?
    4. You can also, execute an RFC using Web service,
    by creating web-service from the RFC in SE37.
    I guess It will take more time to develop this they just executing the SQL.
    If you need more information in executing an RFC,
    please decide which option is your favorite,
    and I would add information...

Maybe you are looking for

  • Using iphone 5 with att prepaid go phone plan will it work?

    will i be able to use the iphone 5 with the att go phone prepaid plan?

  • Data Validation in Excel 2007

    I have three drop down lists that I have already made dependent on the first list selection using the INDIRECT formula. Is there a way to make the selection in the two following dropdowns Depth & Thickness select cells within the data list rather tha

  • Cs6 dreamweaver - javascript error with Clean up Word HTML . . .

    Very recently upgraded to CS6 from CS5.5. Every now and then, I have to run the Clean up Word HTML Commands function for a client. Never had a problem before. This time, I got this message: While executing onClick in Clean Up Word HTML.htm, the follo

  • Printing Wirelessly

    I have a MacBook OS X v. 10.4.6 and we use Time Warner Cable as our internet provider, routing through the Airport Extreme. We bought a Sharp printer/fax/copier so we could print wirelessly. After many discussions with Sharp and Apple, we still can't

  • Can't get gauge to appear

    please look at the code below. if i OMIT the line marked (2), the gauge object does appear, as desired. however, if i INCLUDE the line marked (2), the gauge object does not appear on the form. it's as if the previous line (marked (1)), is ignored or