Removal of Inactive Objects from Roles

Dear All,
Please let me know, how to remove the inactive objects in  roles.
Thanks in Advance,
Thiyagu

Hi Thiyagu.
In addition to Bernhard & Arpan's inputs,Since the number of Manually maintained objects (Inactive Status) is very less in a role, the majority of them are left behind for manual clean up. As a best practice , Inactive objects are retained in roles to have some history in case of any audits and also to maintain the object dependency to see why the object got into the role ... It helps any new security admin's to steer through audits when old timers move out ...
Hope it helps.
Rgds,
Sri

Similar Messages

  • How we can remove  one authorization object from multiplt roles

    How we can remove one authorization object from multiplt roles

    > Correct me if I am wrong !!
    O.K., Here I go
    > But if the object is maintained in SU24 and if you use Expert mode for generation of the role then again those objects may be pulled.(make sure you never use expert mode once you delete the objects)
    Actually using expert mode and choosing 'edit old status' is the only way to avoid objects being 'pulled in' after menu changes.
    > As jurjen said, you may download the tables and instead of deleting the object from the excel sheet, change the value of the object in column "DELETED" = X, by doing this only the objects get inactivated(but remain in PFCG).
    I am not speaking of downloading tables but about downloading roles from PFCG. This will not get you a spreadsheet but a flat textfile. If you whish to set the object status to deleted you'll have to swap the space on position 207, right behind the 'U, S, G' flag,  with an 'X' for all corresponding lines.
    Jurjen

  • How to remove an anchored object from paragraph

    Hi All,
    I have a paragraph which have inline anchored object.
    Is it possible to skip anchored object from the paragraph tagging it.?
    Need Some method using which I can remove the anchored object from paragraph.
    Regards,
    Alam

    Hi,
    To skip and to remove can differ, so you have to decide what is a goal.
    Removing this can as easy as calling find...replace method (app.findTextPreferences.findWhat = "^a")
    Jarek

  • BDC to PFCG (Delete Authority Objects from Roles.)

    When we try to change an authority object it gives an error message saying that 'This authority object is used in roles XXX'.
    To remove Authority Ojects from roles, transaction PFCG is used. But the problem is that BDC is almost impossible to PFCG.
    Is there any way you can suggest us to change an authority object when it is assigned to a role or how we can BDC delete authority object from a role or a function/badi we can call to achieve this.
    This is a very high level question.

    Hi
    U should consider PFCG trx is enjoy trx so it's not suitable for BDC, what doesn't mean you can't do a BDC program for that trx but it won't be easy.
    Anyway you can know the users assigned to certain profile reading table AGR_USERS. I believe PFCG shows them sorted alphabetical, so you can know the position where an user should be, after u should use PAGE UP and PAGE DOWN command to scroll the table control.
    Max

  • How to Remove a Report Object from a Category Without Deleting It?

    I'm trying to "remove" a report object (in this case a Webi Report) from a Personal Category. However, I've found that when I right-click on the report within the Category and choose "Organize >> Delete", not only does it remove the report from the Category, it also deletes the "source" report from it's original location... not good.  (NOTE: If I try this as a user without rights to delete report objects, I don't even get the "Organize >> Delete" option, as would be expected based on the behavior I'm seeing.)
    Does anyone know if there is a way to "Remove" report objects from Categories without deleting the report from its original location?  The only option I can think of is to simply recreate (copy/paste) the whole category with all of its components (less the undesired report object) and then delete the original Category.
    Thank,
    Josh
    Edited by: Josh Crawford on Sep 9, 2010 9:25 AM

    Hi,
    This is much easier than it looks like, although it's not intuitive.
    For example, when some webi is in a category, categories where the webi is linked are underlined in blue:
    If you click in those blue marked categories and click Accept, you're unlinking the webi/report/dashboard from that category:
    -->
    Hope it helps
    Alberto

  • Problem removing a user object from OpenLDAP

    Hi all
    I'm trying to remove a user object (without children's) uid=test,ou=testou,ou=users,dc=my,dc=com , and appears the following exception:
    Java: [LDAP: error code 53 - no global su
    perior knowledge]; remaining name 'uid=test,ou=testou'
            at com.sun.jndi.ldap.LdapCtx.mapErrorCode(Unknown Source)
            at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
            at com.sun.jndi.ldap.LdapCtx.processReturnCode(Unknown Source)
            at com.sun.jndi.ldap.LdapCtx.c_destroySubcontext(Unknown Source)
            at com.sun.jndi.toolkit.ctx.ComponentContext.p_destroySubcontext(Unknown
    Source)
            at com.sun.jndi.toolkit.ctx.PartialCompositeContext.destroySubcontext(Un
    known Source)
            at com.sun.jndi.toolkit.ctx.PartialCompositeContext.destroySubcontext(Un
    known Source)
            at javax.naming.InitialContext.destroySubcontext(Unknown Source)
            at plato.service.OpenLdap.removeUser(OpenLdap.java:172)
            at plato.service.rmi.LdapOperationsImpl.removeUser(LdapOperationsImpl.ja
    va:103)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
            at java.lang.reflect.Method.invoke(Unknown Source)
            at sun.rmi.server.UnicastServerRef.dispatch(Unknown Source)
            at sun.rmi.transport.Transport$1.run(Unknown Source)
            at java.security.AccessController.doPrivileged(Native Method)
            at sun.rmi.transport.Transport.serviceCall(Unknown Source)
            at sun.rmi.transport.tcp.TCPTransport.handleMessages(Unknown Source)
            at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(Unknown Sour
    ce)
            at java.lang.Thread.run(Unknown Source)The code is the following:
                String[] attrIDs = {"uid"};
                SearchControls ctls = new SearchControls();
                ctls.setReturningAttributes(attrIDs);
                ctls.setSearchScope(SearchControls.SUBTREE_SCOPE);
                String filter = "(uid=" + uid + ")";
                NamingEnumeration enums = ctx.search("ou=users,dc=my,dc=com", filter, ctls);
                int total = 0;
                while (enums.hasMore()) {
                    SearchResult entry = (SearchResult)enums.next();
                    total++;
                if (total < 1) throw new NotFoundException("UID "+ uid + "not found!");
                else if (total > 1) throw new TooManyElementsException("Too many for UID ="+ uid);
                else {
                    enums.close();
                    ctls.setCountLimit(1);
                    enums = ctx.search("ou=users,dc=my,dc=com", filter, ctls);
                    SearchResult entry = (SearchResult)enums.next();
                    ctx.destroySubcontext(entry.getName());
                }Any help would be appreciated :)

    If you added a user for screensharing - they'll be shown in System Preferences - Accounts, from where the password can be reset, or the account removed altogether. The user may also be removed individually from ... Sharing - Screensharing/filesharing etc

  • Removing Exchange 2007 from SBS 2008 (In an Exchange 2010 Coexistance Scenario) - In order to remove 2007 Mailbox Objects from Active Directory and remove the SBS2008 server completely

    I'm trying to remove Exchange 2007 from an SBS 2008 server
    (Server 2008 Standard FE).  My ultimate goal is to completely remove the SBS 2008 Server from the network environment.
    We have an Exchange 2010 Coexistence Scenario and Mailboxes/Public Folders/etc have been moved over to the 2010 mail server, on Server 2008 R2.
    I have moved all Shares, FSMO roles, DHCP, DNS, etc over to their respective servers.  We have two full blown DC's in the environment.
    I'm ready to remove Exchange 2007 from SBS 2008 and DCPROMO the server.  I can NOT seem to find a TechNet article that shows me how
    to proceed in this kind of scenario.  I am trying to use the TechNet article:
    http://technet.microsoft.com/en-us/library/dd728003(v=ws.10).aspx
    This article references Disabling Mailboxes, Removing OAB, Removing Public Folder Databases, then uninstalling Exchange using the Setup Wizard. 
    When I go to Disable Mailboxes I get the following error:
    Microsoft Exchange Error
    Action 'Disable' could not be performed on object 'Username (edited)'.
    Username (edited)
    Failed
    Error:
    Object cannot be saved because its ExchangeVersion property is 0.10 (14.0.100.0), which is not supported by the current version 0.1 (8.0.535.0). You will need a later version of Exchange.
    OK
    I really don't see why I need to Disable Mailboxes, Remove OAB and Public Folder Databases since they have been moved to 2010.  I just want
    to remove Exchange 2007 and DCPROMO this server (actually I just want to remove any lingering Exchange AD Objects referring to the SBS 2008 Server, using the easiest and cleanest method possible).
    Can someone point me in the right direction?
    Thanks!

    Hi,
    Based on your description, it seems that you are in a migration process (migrate SBS 2008 to Windows Server
    2008 R2). Now, you want to remove Exchange Server and demote server. If anything I misunderstand, please don’t hesitate to let me know.
    On current situation, please refer to following articles and check if can help you.
    Transition
    from Small Business Server to Standard Windows Server
    Removing SBS 2008 –
    Step 1: Exchange 2007
    Removing SBS 2008 – Step 2:
    ADCS
    Removing
    SBS 2008 – Step 3: remove from domain / DCPROMO
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
    does not guarantee the accuracy of this information.
    Hope this helps.
    Best regards,
    Justin Gu

  • Removal of T.Code from role

    Hi all,
    i have to remove a t.code FBRA from all the plants users, there are 40 single roles, with T.Code FBRA,  how can i remove it at a time, without deleting individually in each roles. Is there any method , plz let me know.
    Thanks & Regards
    Syed..

    Hi Syed,
                 Are you using a role which is created by using the standard role.
                 Copy the role to a new role then delete the transaction from the role
                 and assign the user with the newly created role. I think this would be one of the possible way. After that remove the users from the previous role.
    Please reward points if helpfull.
    Regards,
    Vamshi

  • How to remove/destroy previous object from memory

    hi guys, I am getting problem of memory of having repeating object.
    Below is my code.
    import flash.system.System;
    var counter:Number=0;
    var systemMemory:TextField=new TextField();
    systemMemory.x=200;
    stage.addEventListener(Event.ENTER_FRAME,showNext);
    function showNext(event:Event){
        var myTxt:TextField=new TextField();
        myTxt.text=counter.toString();
        myTxt.width=100;
        myTxt.height=20;
        myTxt.x=Math.random()*100;
        systemMemory.text="Total Memory Used :"+System.totalMemory.toString();
        systemMemory.width=300;
        addChild(systemMemory);
        addChild(myTxt);
        counter++;
    Above code does repeat textField Object continuously. Now I want to destroy previous created textField Object. So that my memory will not be hang. I got some where in the blog that with System.gc()  could clear garbage collection. But currently I am not working with system.gc any more I want to clear previous object in programatically way. Is there any way that I could destroy previous created object ?

    ok, thanks for your kind replay. Above is my test case. Actually, I need to do show 4 texfield in each FRAME_ENTER with different text properties's value + previous textFields should be remove and comes next 4 textField.
    import flash.text.TextField;
    import flash.display.Sprite;
    import flash.display.Stage;
    import flash.events.Event;
    import flash.system.System;
    var frameNo:Number=0;
    var txtFieldGroup:Array=new Array();
    var mem:TextField=new TextField();
    stage.addEventListener(Event.ENTER_FRAME,showTxtFields);
    function showTxtFields(event:Event):void{
        var eachGap:Number=100*frameNo;
        /* Removing data from txtFieldGroup if there any data */
        if(txtFieldGroup.length>0){
            txtFieldGroup.length=0;
        /* created textField objects and set it in an array */
        for(var i:Number=0; i<4; i++){   
            /*txtFieldGroup[frameNo][i]=frameNo.toString()+":"+i.toString();*/
            txtFieldGroup[i]=new TextField();
            txtFieldGroup[i].text=frameNo.toString()+i.toString();
            txtFieldGroup[i].y=(20*i)+eachGap;
            addChild(txtFieldGroup[i]);
        // System Memory Message
        mem.text="System Memory: "+System.totalMemory;
        mem.x=250;
        mem.width=300;
        addChild(mem);
        // Frame No increment
        frameNo++;
    here, from above script it created 4 txtObject in each frame no. I have clear array in each frame no. But I could not remove textFieldObject from CPU Memory. As you can see textField object of mem. As you say in earlier post making 4 different textfield at initialy  is nice option to control over CPU Memory. Is there any technique so that I could remove previous created textField object because . I am also having problem why my textfields are shows more than 4. I was expecting only 4 textField in each frame. Please you suggestion is required. Thanks for studying my confusion.

  • Users are not removed from role using UME API

    Hello,
    I am using this code to remove users from a batch of roles that I have.
    Everything is running OK, no exception is thrown and at the System.out I see all the actions that needs to be taken correctly. The problem is that if I'll go later to one of the roles the users are still assigned to it. Any idea what I'm doing wrong here?
    try
    IRoleFactory roles = UMFactory.getRoleFactory();
    IUserFactory users = UMFactory.getUserFactory();
    IRoleSearchFilter filter = roles.getRoleSearchFilter();
    filter.setUniqueName("<My_filter>", ISearchAttribute.LIKE_OPERATOR, false);
    ISearchResult sresult = roles.searchRoles(filter);
    if ( sresult.getState() == ISearchResult.SEARCH_RESULT_OK )
         while(sresult.hasNext())
         String id = (String)sresult.next();
         IRole role = UMFactory.getRoleFactory().getMutableRole(id);
         Iterator i = role.getUserMembers(false);
         while (i.hasNext())
                         String uid = (String)i.next();
              IUser user = users.getUser(uid);
              role.removeUserMember(user.getUniqueName());
              System.out.println("Removed user: " + user.getUniqueName() + " from role: " + role.getDisplayName());
         role.save();
         role.commit();
    catch (Exception e)
         manager.reportException(new WDNonFatalException(e), false);

    Solved it!
    It needs the FQDN User ID...

  • Add/Remove data object from dataset

    Hello,
    I was working out a way to add and remove data from a dataset
    on the fly and could not figure out any built in methods to do
    this.
    As I have decided to include spry in my project I like to try
    and utilise as much as of its code as possible since it is
    complicated to explain I have created a simple example – a
    colour picker! (thought it might be more interesting…) of
    what I am trying to achieve at
    http://www.freshfresh.co.uk/spry/
    - if you have a go on this and maybe look at the source code (all
    the JS is embedded in HTML there are no modifications to other the
    other core files). I have only used spry effects etc, including the
    ‘accordion’ – which I have become quite attached
    to, it is really good for condensing pages down.
    You will see I am using the setDataFromDoc method to create
    the dataset – I tried the .data = myArrayOfData; .dataHash =
    hashTable; method i.e. creating from an object rather than array
    but it did’nt seem to play ball with the
    addDataChangedObserver method – it did’nt update itself
    each time it was modified (I am sorry I cannot remember exactly
    what I did – but I tried all kinds of ways…). I stuck
    with the string method because it worked - each time my new dataset
    changed it updated itself on the screen (you will have to have a
    look to understand.....sorry!!), but I would be interested to know
    how such a thing could be implemented using the object route if you
    believe this would be more efficient.
    My second question is more simple – is there a shorter
    way to add and remove a data object from a dataset? – as you
    can see from the source code I have effectively created an
    ‘interface’ to do these tasks…. I could’nt
    work out whether these methods are already built in. Maybe they
    are?
    Third question is… to extract a data object from a
    dataset I use the .dataHash[the_row_id] method – is this the
    right thing to do or could it lead to complications… that is
    using methods that might supposedly be private?
    Fourth question (observation really) – whilst creating
    that colour picker example I went over board with my datasets and
    loaded in several palettes some of which had over 1000 elements or
    data objects. Which inevitably was very slow (on my computer
    anyway) – but it got me thinking about trimming the contents
    of my spry regions for better performance. I am I right in thinking
    that the less HTML etc that there is in a spry region the quicker
    SPRY will process it. For example say you had spry repeat with an
    image tag in with some onclick, onmousover, onmouseout, style
    attributes etc and compare this to a spry repeat with a simple
    image with minimal attributes set. I suppose what I am trying to
    say is – does spry ‘store’ all the contents of
    each spry region somewhere? Or does it just process it and leave it
    to the browser dom?
    Fifth observation.... I find it really difficult to explain
    computer technicalities in writing. It must be tough reading these
    posts.... I know I find it difficult sometimes when dealing with
    written end user feedback!
    Andrew

    Just clarifying my questions a bit further....
    I found some old code regarding question 1 by using the
    object method I mean something like this...
    var mySwatches = [{'@hex':'ff0000'},{'@hex':'00ff00'}];
    var hashTable = [];
    function createDs(){
    for (var i = 0; i < mySwatches.length; i++)
    mySwatches
    .ds_RowID = i;
    hashTable = mySwatches
    dsMySwatches.data = mySwatches;
    dsMySwatches.dataHash = hashTable;
    dsMySwatches.loadData();
    i.e. not writing out a whole XML string string as the online
    example does. When using this way I did'nt seem to be able to get
    the HTML to refresh. I tried using [
    Spry.Data.updateRegion('mydata'); ] after recreating the dataset I
    also tried adding an [ .addDataChangedObserver ] (like in the
    string example) amongst numerous other ways but it just would not
    work like the string way. - Maybe I did something wrong somewhere.
    In question 3 I refer to the [ .hash ] method .... its not a
    'method' its a 'property' - my question should read - is it ok to
    access private properties (from a browser campatiblity/security
    point of view) that do not have specific methods to gain access to
    them. I suppose it does'nt really matter with JS...
    In question 4 I mention minimising the amount of code in a
    spry region to speed it up. A clearer example of this might be for
    example - a gallery with lots of images. As we know there will be a
    slight delay as SPRY writes all the html so to speed up that intial
    write I strip out all the image attributes such as onlclick do
    this, onmouse over do that... and add these after the images have
    loaded using a seperate function similar to my
    fillSwatches(ds,prefix) function in my online colorpicker example.
    I suppose it like a 2 tier processing of all the data. SPRY does
    the intial display writing to get everything in place and then
    another pass is made over to add any further functionality
    adjustments etc. I am still not sure if that makes any sense!
    ***edit
    Also on the subject of speed and the application as a whole
    i.e. including my PHP - In one example I was creating I ended up
    with an XML structure where each node has over 14 attributes i.e.
    <somenode att1=”x” ……..
    att14=”z”/> - as the file grew it obviously took
    longer to process particularly on the server side, i.e. added all
    those attributes just slowed it all down. So I did
    this…… <somenode att1=”x:y:z” /> i.e
    condensed selected attributes into a string that I could explode
    later on.
    Obviously this limits SPRYS ability to access the attributes
    using the {attr} syntax. I had to create a function to explode the
    array and do the ‘necessary’ on a second pass over the
    data – this works ok for me. But its interesting that in this
    particular case the server could not refresh the XML in an
    acceptable time without doing this – just thought that might
    be interesting to you. I suppose technically what I am doing is
    abusing the concept of an XML structure and simply using it as a
    ‘carrier’ to feed my application …. Which I
    suppose is where JSON comes in…. which is a bit more compact
    and maybe faster to manipulate on both the server and client side
    – I don’t really know, I have never used it –
    just throwing ideas around!!
    Andrew

  • Removing objects from photo

    I am trialling photosup elements before deciding to buy it or not.  Not sure if there is a difference in the trial version compared to the purchased version. I am trying to remove an unwanted object from a picture by highlighting the unwanted object,  then I go to edit and then fill. However there is no option for "content aware" under the fill option as shown in the tutorial.  As a result, if I choose any of the options under the fill tab,  it will only remove the object and leave a "blank spot" on the picture.  Have I missed some steps here please?  Thank you.

    Thank you all for your advice. It certainly was amazing what you were able to do with your suggestions.  As mentioned,  I am trialling photoshop elements (before deciding it is a product that I can use with ease) and was facinated by the ease of use on the tutorials, particularly the content aware move function. If I am not mistaken, it seems to suggest it is a matter of highlighting the object to be deleted / moved, then choose the content aware move function, and photoshop will do all the 'patching' and merging of surroundings.  So basically a click of a button.  Unfortunately I couldn't find that function on the trial version of the product.  So was wondering if the function is actually available on the trial version so I can see if I can use it before resorting to other alternatives.  Thank you.

  • Remove my objects from Memory

    I have a class "Ball" which display graphical circle ball in random x&y axis and I  fade out it with Event.ENTER_FRAME and specify removeEventListener if it reach alpha<=0 .
    Now I made multiple object from "Ball" class. Now, In my stage it works nice but when I see my Computer Memory status. my current flash.exe is increasing memory rapidly. Is how to remove my unusual object from my Memory. So that it would not get hang. At last thanks for taking interest on my problem

    Here is a usefull article about garbage collection in flash. I came across it few weeks back ,I would like to share it :
    http://www.adobe.com/devnet/flashplayer/articles/garbage_collection.html

  • Unable to remove object from arraylist

    Hello,
    I am trying to remove a few objects from an arraylist and it isnt happeneing in one loop :
                         for(int i=0;i<someList.size();i++){
                             empVo = (EmpVO)colList.get(i);
                             if(empVo.getempName().trim().equalsIgnoreCase("A") ||empVo.getempName().trim().equalsIgnoreCase("B") ||empVo.getempName().trim().equalsIgnoreCase("C") )
                                colList.remove(i);
                         }So, it doesnt remove the object all the time whenever the names of A,B or C appear, so I have to run this loop thrice so it deletes all the data pertaining to these three emp names. Then I thought may be the size of the arraylist is changing and used a temp var for the someList.size, but that doesnt work either. Could you please tell me what is going wrong ?
    Edited by: Sarvananda on Sep 3, 2010 12:10 PM
    Also, the exact test has names A to F. So say A, D and E will be deleted in the first loop, then I have to specifically sysout and see which ones were deleted and then write another loop for B,C and F. Ofcourse at the end A - F are removed. But why two loops for it

    Encephalopathic wrote:
    What if you do this using an iterator to remove items, or if you start from the top of the list and iterate down to the first item?thanks for your reply. I was just looking at the API, and stumbled on this :
    The iterators returned by this class's iterator and listIterator methods are fail-fast: if the list is structurally modified at any time after the iterator is created, in any way except through the iterator's own remove or add methods, the iterator will throw a ConcurrentModificationException. Thus, in the face of concurrent modification, the iterator fails quickly and cleanly, rather than risking arbitrary, non-deterministic behavior at an undetermined time in the future.Any pointers on where I could look or how I could I move from here ?
    Another question I had was, there is no efficient way to 'move' objects in an arraylist (based on their indexes), isn't it ?
    I always have to remove and add at a certain index.

  • Report to identify Inactive objects

    Hi,
    I faced some issues after Upgrade,
    where there were certain transactions that gave dump saying that a particular field or table doesnt exist.
    but when I went thru SE11 I did find those fields and tables in Active Mode, but even showing it Active, I activated it and later when I ran the t-codes which gave me dumps, didnt show any dumps.
    So is there a report or a way thru which we can identify objects which are Inactive even after the Upgrade ?
    Rewards for worth.
    Aditya

    Hi,
    Go through this blog.
    http://theguruspeaksaboutsap.blogspot.com/2007/09/upgrade-transaction-spdd-spau.html
    You can also go to se80 and select inactive objects from the list box.This will show you all the inactive objects.
    Reward if helpful.
    Regards,
    Harini.S

Maybe you are looking for