Deletion of  particular roles from SU01 for specific users

Hi,
Actually I have to certain(only some)  roles for  users in SU01.
This is bulk data so doing it manually through SU01 is not possible.
Is there any function module/BAPI which will delete particular roles for users??
Disha.

Hi David.
David Berry wrote:
I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
Changes are made in PRD. The program was tested and is approved by each customer.
Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
Best wishes
David
The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
Cheers, Tobias

Similar Messages

  • Hide The Content Reference from Portal For specific users.

    Hello Everyone
    I am new to peoplesoft and want to hide the content reference from the main portal for specific users
    Can anyone help me on this?
    Thanks in advance...

    the users should have roles which do not contain the permission lists to which your current component is added.
    This is the way security is maintained!
    Vikas

  • Removal of workitems from Inbox for specific user

    Hi,
    Can anyone tell how to delete mass workitems from a specific user's inbox.
    For example if there are some 4000 workitems in a user's inbox, how can we delete all the workitems by not seleting one by one and deleting.
    Thanks&Regards,
    Pavan

    Hi,
    you can use tcode : SWWL to do that...
    This is not the right fourm for asking this ???? it should be under BPM.
    Atul

  • Recycle bin to show all deleted items on the site collection for specific user group

    hi there, is there any way where a certain sharepoint group (i.e. site collection members) to view and restore deleted items on theentire collection, without giving them site collection rights orgive them more rights than necessary? we wanted to create
    aSP group that has the permission to restore deleted items and give them to selected users so that our users won't have to contact us when they want to restore a deleted item

    I don't believe you can. If an item get's deleted it should go to the first recycle bin @ /_layouts/15/RecycleBin.aspx
    The Recycle Bin gives a site collection administrator
    greater control when users delete files, versions of files, list items, libraries, lists, and folders from a SharePoint site by providing a second stage safety net before an item is permanently deleted from a site. When a user deletes an item from the Recycle
    Bin, the item is sent to a second stage Recycle Bin (also known as the Site Collection Recycle Bin) that the site collection administrator manages. This article focuses on how a site collection administrator can manage the Recycle Bin for a site collection.
    https://support.office.com/en-US/Article/Manage-the-Recycle-Bin-of-a-SharePoint-site-collection-5fa924ee-16d7-487b-9a0a-021b9062d14b
    Ibrahim Sukari, Technical Consultant | SharePoint | Dynamics CRM |
    LinkedIn Profile

  • How to delete a particular data from 3 arrays

    hello,
    i have a program that works like this.....
    import java.io.*;
    public class NewMain {
    BufferedReader in=new BufferedReader(new InputStreamReader(System.in));
    String [] Type= new String[10000];
    int [] Num= new int[10000];
    float [] Price= new float[10000];///////
    and i am reading some of the data into these arrays
    so if i want to delete a particular data from the arrays how do i do that
    and if i want to delete pants from that file and enter the text again how do i do that.? any idea?....
    e.g if the file contains
    shirt
    32
    56.5
    pants
    56
    45.9

    Ashish.Uppin wrote:
    hello,
    i have a program that works like this.....
    import java.io.*;
    public class NewMain {
    BufferedReader in=new BufferedReader(new InputStreamReader(System.in));
    String [] Type= new String[10000];
    int [] Num= new int[10000];
    float [] Price= new float[10000];///////
    and i am reading some of the data into these arrays
    so if i want to delete a particular data from the arrays how do i do that
    and if i want to delete pants from that file and enter the text again how do i do that.? any idea?....
    e.g if the file contains
    shirt
    32
    56.5
    pants
    56
    45.9
    Buddy, it seems to me that you are describing data that belongs together -- a class. You are probably better off with one arraylist of objects of this class, each object having a String type variable, an int num variable, and a float price variable, make that a double price variable.
    For examples of arraylists in action, please see the Sun java tutorials.

  • Mass deletion of SAP roles from users

    Hello All,
    i need to delete all assinged roles from a big number of users. I know the users but not the roles which the users have. I need to delete all roles from the users-id's.
    I know SU10 and i can select all my needed users. But in the role tab i can not work with roles-names like Z* to delete. I can select all z*-roles and select "remove" but when i click to save, i get the message no changes made on the users???
    Any idea?
    Gruß
    Toni

    Hi David.
    David Berry wrote:
    I take it this is being run in PRD? What checks are being carried out during the table entry deletions and are you 100% happy sitting at your keyboard when pressing the 'run' button?
    Changes are made in PRD. The program was tested and is approved by each customer.
    Is there an easy way back to the previous state should it go wrong and how do you explain it to the auditors if needed that you assigned-number of roles in PRD against your own user ID possibly with no CDHDR/CSDPOS entries to back you up.
    Sorry for the 'negative vibes' but I don't like direct table maintenance in PRD for security.
    Best wishes
    David
    The way back is uploading the old role assignment previously exported from AGR_USERS. The program takes an excel sheet. In addition this excel sheet is attached to the change requests.
    From risk perspective we say (and experienced): mass changes through copy and paste lead to much more errors and faulty authorizations.
    Regarding direct table maintenance: standard function modules are used (like the one mentioned above) and the changes are visible in the change documents, Therefore the auditors grant an exception for using such tools.
    Cheers, Tobias

  • Deletion of mass roles from GRC CUP 5.3

    Dear All,
    I have requirement to delete 1000 roles from GRC CUP 5.3.
    I can see option to delete the roles individually under "search role" option but I am not able to find option to delete mass roles.
    Please advice.
    Regards
    Trinadh Bokka

    Hello Trinadh,
    It is not possible to delete all the roles at once through the User Interface. However, you can select a lot of roles at the same time by searching for a role pattern. For example, retrieve all roles starting with Z*:
    Hope it helps,
    Fernando

  • Delete a particular request from a InfoCube  after compression  in sap bi 7

    HI ,
    Issue : I wand to delete a particular request from a InfoCube  after compression  in sap bi 7.0 ; (not in sap bow 3.x).
                can any one suggests me how to do .give me possible solutions.
    Regards,
    EdK...

    Hi,
    You can delete the perticular request from Infocube by useing'RSICCONT'.
    Goto SE16, give the 'RSICCONT' then Select your Cube and Select Execuite.
    It will display the list of requests. you can select the perticular request and deleted from cube.
    Edited by: Suman Reddy.Vuyyuru on Mar 18, 2010 12:38 PM

  • Lock Transaction for Specifi Users

    Dear All,
    Good Day,
    We are planning to lock the transaction for specific user who doesnot use the transaction more than 3 months.
    Please suggest me what will be the procedure.
    Thanks in advance,.
    Best Regards,
    Suresh Kumar K

    Hi Suresh,
    Your idea of restricting users in using t-code is good practice. But as of now there is nothing like you can restrict user by locking t-code only for tht user/users alone.
    1. You can lock the T-code but this will affect entire system.
    2, You can remove t-code from the role, but this affect other user and if you wanted to make another role for only this user it will start getting to be tedious job, since you have to delete some roles create some other and alos user may use some t-code once every quarter for some of quarter end results and you have to seperate these t-code from others which was not possible, this will not workout so easily.
    The only option could be probably if user doesnot login for more than 3months just lock him.
    Regards...

  • MIGO - Challan NO :  Feild mandatory for specific user

    Hi Experts,
    I want to make the Callan No in the MIGO  as mandatory for specific users.Can any body tell me how to do this ?
    Regards,
    Lakshmi.

    Dear
    There is two possibility.
    1 - SPRO->Material Management->IM and PI-> Settings for enjoy transactions ->settings for goods Movements (MIGO)->Field selection for MIGO.Then against Field name choose the radio button Req.
    This will impact for all the user.
    2 - If you would like to restrict for particuar user than use of SHD0.
    Create screen/transaction variant of MIGO through SHd0. In this put your req. field compulsory.Revoke the authorization of MIGO from particular user and assing the new transaction code done through SDH0 to this user.
    Due to this you can control req. entry in MIGO for particular user.
    Regards
    Rajan

  • How to apply Software Restriction policy for specific user in local group policy object ?

    I am working on implementing user based software restriction policy programmatically for local group policy object.
    If i create a policy through Domain Controller,i do have option for software restriction policy in user configuration but in local group policy editor i don't have option for that.
    When i look for the changes made by policy applied from Domain Controller in registry, they modifies registry values for specific users on path HKEY_USERS\(SID of User)\Softwares\Policies\Microsoft\Windows\Safer\Codeidentifiers
    They also have registry.pol stored in SYSvol folder in Domain Controller. When i make the same changes in registry to block any other application, application is getting blocked.
    I achieved what i wanted but is it right to modify registry values ?  
    PS:- I am using Igrouppolicyobject API

    I achieved what I wanted but is it right to modify registry values ?
    You also can modify a registry programmatically based policy. Check this:
    http://blogs.msdn.com/b/dsadsi/archive/2009/07/23/working-with-group-policy-objects-programmatically-simple-c-example-illustrating-how-to-modify-a-registry-based-policy.aspx
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Data Level security for specific Users

    Hi,
    Can you please suggest some ideas on by-passing the Data Level security for specific users or specific group?
    Currently, we have data level security defined on a group permissions for one group and for people belonging to another group, the security should not apply and they should see entire data.
    But, key thing here is that, the user belongs to both the groups.
    Any ideas helps.
    Thanks,
    Chandu.

    So you are saying you want a user to belong to a group with data-level security filters, but you don't want the filters to apply to that user?
    Why are they in the group then?
    Are the data filter defined with variables or are the hard-coded?
    If variables, you may be able to put logic in initialization block to set the variable appropriately for specific users.
    I'd rethink the security model - when I define data level security filters, I tend to force users to only belong to a single group/role.

  • Customizing Message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer spezific text or to redirekt to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check these threads.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Cusomize message "No portal roles are assigned for this user"?

    Hello,
    we would like to give the user some hint on who to speek with in case he has no portal roles assigned.
    So we would like to customize the messaage "No portal roles are assigned for this user" to some customer specific text or to redirect to a customer specific iView.
    I would appreciate any kind of hints.
    Best regards,
    Lutz Rottmann

    Hi,
    Check this thread.
    Customizing message "No portal roles are assigned for this user"
    No portal roles are assigned for this user
    Regards,
    Harini S

  • Need SP_TN for specific user must use specific document series and warehouse in Marketing Documents

    Hi experts,
       I need SP_TN for specific user must use specific document series and warehouses in Marketing Documents SAP B1.
       Kindly give solution ASAP.
    Thanks in advance

    Hi Nagarajan,
       It show (1) Not allowed to add PO.
       I used the following SP
    IF  @object_type = '22' AND @transaction_type IN (N'A',N'U')
    BEGIN
    IF Exists
    (SELECT T0.DocEntry FROM POR1 T0 INNER JOIN OPOR T1 ON T0.DocEntry = T1.DocEntry
    WHERE  T1.DocType = 'I' AND T1.Series = '142' OR T1.Series = '145' AND T0.[WhsCode] = 'STEX-01'
    or T0.[WhsCode] = 'STNEX-01' and T1.[UserSign] ='1'
    and T1.docentry = @list_of_cols_val_tab_del)
    BEGIN
    SELECT @error = 1
    SELECT @error_message = 'Not allowed to add PO'
    END
    END
    warm regards,
    Guhan

Maybe you are looking for