Role Deletion

Hi
I would like to delete a role from the DEV system and then have the deletion moved to Q and then P system.
I have gone through http://help.sap.com/saphelp_nw04/helpdata/en/e4/15e48efd6c11d296430000e82de14a/frameset.htm
This reads "If you want the deletion to be transported, place the role objects in a transport request before deleting. To delete the role in a system linked by RFC (like a component system in Workplace), choose Role ® Distribute deletion."
I am not sure as to how this needs to be done. How does one place the role objects in a transport request?
If you have had a role deleted and then transported it, let me know how you have done it.
- ravi

Auke's answer is the correct one. Assign the role to a transport request BEFORE deleting it; this is easily done from the main screen of PFCG (just click the transport button!). If you delete the role first, BEFORE assigning it to a transport, you won't be able to assign it to any transport...
When the role is deleted from dev and the transport is subsequently released, the role will be deleted from the downstreams systems.
You can, of course, also create mass transports with several roles for deletion, Only remember the basic step: put the roles in the transport first, then delete, then release.

Similar Messages

Administrator Role Deleted in Portal???

Hi all,
Accidentally administrator role deleted in UME.When i login j2ee_admin i deleted administrator role in UME what i do Now plz tell me. How i found administrator role ???.Because sap predefined administrator role to j2ee_admin So i am not able to working in portal in UME all button is disabled.
Help me Plz
Thanks & Regards
Kumar
Message was edited by:
Kumar

Hello,
May be you cud try out this:
First of all give the user (J2ee_Admin) SAP_J2EE_Admin group.
Now login to the usera administration of J2EE using the User with SAP_J2EE_Admin group.
Next go to useradministration and then give the user (Self) different admin roles
such as super admin, system admin, content admin etc.
Hope this helps you.
Regards,

Administrator Role deleted ???

Hi all,
Accidentally administrator role deleted in UME.When i login j2ee_admin i deleted administrator role in ume what i do Now i am login via j2ee_admin it gives error what i do plz tell me. How i found administrator role ???
Help me Plz
Thanks
Kumar

Hi Kumar:
For all the non UME Roles content in Portal has some action. So I guess for Administrator Role should have an action pertaining to its admin responsibilities. Try to Create Role under Identity Management and assign the action equivalent to it.
Goto:
User Admin > Identity Mgmt > Role > Create User > Give Name > Assign Action.
Note: I'm currently not at EP server for few days, plz check the option said above and I hope they might work for you.
If my guess is correct, you can get the Action for already existing Administrator Role from other EP Server in your organization.
Tnx,
Munna SAP

Mass Role Deletion Transport to ECC6

Hi,
Prior to transporting a mass role deletion through to the PRD ECC6 system, is it recommended to end date the majority of position to role relationships? End dating may maintain some visability of previous role assignments... Or is it safe to send it through and be confident that all the relationships will be removed as well as UMR based assignments?
Any recommendations on this topics?
Kind Regards
Nathan

Hi,
Delete the roles through transports. but if you are concerning about the UMR history and end date for the roles. If so.. make sure there are no active assignments to the users.then there is no requirement for end date. in my idea generally UMR history will be there for deleted users and their assignments...as text.
~Praveen.

Partner role delete

Hi guy,
I have the need that a partner role is not allowed in a special sales order.
My first idea was to solve it with a partner schema.
But that is not possible, 'cause of the following problem;
If the sales order type XX, was created without a reference, the partner role is allowed.
If the sales order type XX, was created with a reference to a sales order type XY it is also allowed.
But it is not allowed, if the sales order type XX was created with a reference to a sales order type YY oder with a reference to sales order type XY, which was created with reference to type YY.
=>As the role is allowed generally, but not if there is any reference to a special type, the schema don't work.
So I would like to delete the partnerrole in a USEREXIT and send a mail or message to the user.
Does someone know a suitable exit or badi ?
Greatings Manuel

Hi Rasheed,
I tried USEREXIT_SAVE_DOCUMENT_PREPARE in MV45AFZZ (because the MOVE_FIELD_TO_VBAK AND MOVE_FIELD_TO_VBAP isn't processed after a change of partners).
My coding:
...(check if partnerrole is forbidden)
delete xvbpa with where parvw = 'ZZ'.
When I debug the behaviour it is deleting the entry in xvbpa, but after saving the partnerrole does still exist.
Where is my failure ??
Greatings
Manuel

Mass role deletion in CUP 5.3

Hi all,
in our CUP 5.3 system someone has unintendedly imported all roles and profiles from the backend system (about 4000 roles).
How can we delete those roles from CUP without having to delete it from the frontend, which will take ages.
Is there any way or database script to safely remove the roles?
They can be determined by either role approver or last reaffirm date.
Thanks
Daniela

That's why I tell my customers
"Whatever you want to do in Role Import - ALWAYS klick on "from file" first. No Exceptions. Never!"
You're out of luck, there is no delete script. You can ask support for the DB ER document, but you'll have to do DB manipulations on your own risk, I'm afraid...
Frank.

Essbase server access role - delete DB allowed?

Good morning everyone.
We have provisioned a group in Planning with the Essbase server access role which grants read level access to Essbase databases.
We have checked that a user assigned to this group can actually access Essbase DBs to execute calcscripts and report scripts and that it does not have permission to open the DB outline --but it apparently still has permission to delete a database (as seen in the following image: https://c69ee7db-a-62cb3a1a-s-sites.googlegroups.com/site/ktratsites/Home/delete_Essb_DB.png )
As you can guess, we have not tried whether this user could actually delete an Essbase database.
Can anyone confirm whether a user given the Essbase Server Access role could really delete an Essbase DB?
IMHO, this should not be possible.
Thanks a lot.
Best regards,
G.S.Feliu

It will show the option to delete but if you select it then it should display "Insufficient privilege for this operation"
Cheers
John
http://john-goodwin.blogspot.com/

Bulk Role Delete

I want to unassign a set of roles for a number of users and delete the user accounts for these users.Is it possible to do this using the Bulk Action option available in SUN IDM 8.1? If so what should be the format of the csv file I need to give as input? Currently I am giving a file with the content:
user,command,roles,resources
206812,delete,|Remove|A:Portal LDAP:All Users,MYNMG
But this is only deleting the resource MYNMG. It is not unassigning the role A:Portal LDAP:All Users. Can someone tell me what the error in my input file is?
Also which option should I choose from the Action dropdown?

Hi,
This is the command file I use to remove roles.
command,user,waveset.roles
Update,206812,|Remove|A:Portal LDAP:All Users
Hope this helps

Role deletion in CUP

Hi Experts,
Please help us out.
We had some test roles created in ERM, imported to CUP and tested by User Assignment. Now we want to clean the roles before role upload. We have deleted all roles in ERM but in CUP it is giving error-
" Cannot delete since referred by request."
We have archived all kind of requests but we are still getting the error. Please suggest.
Thanks & Regards,
Sabita

Hi All,
I found the option to enable/disable the role or to set the Role validity date . It's available as tick mark icon along with the + and - icons on the System tab when the role is selected for change. I just missed this button as i expected this property of the role either in the information section or in some of the tabs :(.Anyways, happy to find it now
Cheers,
Anil

Unlink and remove role = delete user???

Hi All,
We are using Sun IDM 7.1.1.21 and have run into this problem. I believe it's a product bug because it doesn't make any sense. We have users in an AD resource, and they are linked to that resource in IDM using a role. If, for some reason, the user is deleted from AD, and re-setup we have to "re-link" the user because the "accountGUID" attribute has the wrong GUID for the user and IDM doesn't like that. We are doing this using Recon. When recon runs, and catches this user, the situation comes back as "Confirmed", which is fine, we are using a per account workflow to handle the changes. We then compare the GUIDs of the objects in the workflow, if they are different, we would unlink the IDM account and relink it to the new GUID. We are setting the following options on the unlink.
<set name='options.unlinkTargets'>
<list>
<s>AD</s>
</list>
</set>
<set name='options.deleteAccounts'>
<s>false</s>
</set>
and we remove the role, becuase if we do not, nothing happens. When the user object is checked in, it gets deleted from the resource. I'm sure this is happening becuase the accountID DOES exist (when the user is re-setup on the back-end the same DN is given to the user). Obviously this result is undesireable. So now I have 2 questions.
1. Am I doing this wrong?
2. Why would IDM delete an account when deleteAccounts and unlinkTargets are explicitly set on the checkin?

OK. I figured out where the problem was. Renaming the accountGUID without removing the role only caused a "rename account to same name" error. I was not setting the correct options when removing the role. I needed to set:
<set name='options.noDelete'>
<s>true</s>
</set>
<set name='options.deleteUser'>
<s>false</s>
</set>
This did the trick. The roles were removed and the user unlinked without any harm done to the resource account. I was then able to re-add the roles and relink to the existing resource account without a problem.
Thanks.

Role Deleted - Profile remains on User record

All -
We currently have a situation where users still have a profile assigned to them even after the role was removed and later deleted.
We had a number of custom roles deemed obsolete. Consequently, these roles were deleted. All users were removed from these roles before they were deleted. In looking back at the users, the profile for the now deleted role still exists on the user record. We run PFUD nightly but this has not resolved the issue that some users have non-generated and non-valid profiles on their user master record. Please advise if there is a way to resolve this inconsistency.
Thanks,
Marnie

I would remove them manually. How many users are there with old manual profiles?
Removing the profiles themselves for good you can do easily, but there is no standard program for a mass deletion.
If you are 100% certain that you can remove the profiles without any impact, then you can remove the check on the assignment.
Deleting them in Su02 will make this check though.
Cheers,
Julius

Simple Question on Role Deletion !!

I want to delete a role from say 100 posistions. How can this be done? From PFCG or SU01 its not posible. I kno wit can be done through going into individual posistion but doing it for so many users is cumbersome. Do you strike on something similar to SU10 ?

>
george G wrote:
I get a huge list !! - how does one single out the role from this list -. you said we can filter -- where ?? I coudl not see any filter on the role.
>
George,
On the huge list you should get a "Set Filter" button or hit CTRL+F5 or Edit->Set Filter. Select column set "Variation field" and click on left arrow to select->click on filter button "2nd Step: Determine Values for Filter Criteria"->enter the Variable field for the role "AG???" then check mark.
It actually works pretty good.
Edited by: John Navarro on Oct 18, 2010 10:22 PM
Edited by: John Navarro on Oct 18, 2010 10:22 PM

CUA Role deletion

Hi All,
I'm supposed to delete a role from the Child systems.When I'm trying to delete role from Central sys(CUA),role is not reflecting for the user,but user has the role in Child system.
Thanks in Advance!
Regards,
Naveen

Hi Mili,
Can you just check what naveen has just said? He mentioned that he do not want to delete the composite role rather he just need to remove it from the user's access. Also he is not able to see the composite role assigned to the user in CUA, so he cannot delete it from there.
Naveen,
You can re-assign the composite role and check if the Idocs are moving to your child system. If it did, then this time re-login to CUA again and now remove this composite role. It should remove it from your child system as well.

Mass Role Deletion

Hi,
There is any method to delete Role in Large contents?
AGR_DELETE_ALL_ACTIVITY_GROUPS program is not working in our system.Other than this, there is any method?
Thanks in Advance.Kindly help.
Regards
Karthika

I have used this note many times before. Once you apply this note and create a custom program, you should be able to delete the large number of roles.I would recommend applying this note only in Dev and do the deletion transport in other clients
Thanks
S Shan

Cprojects role deletion

Hi Experts,
I want to put a control in cprojects while deleting a role. i need to check in the indent weather start of of planning is checked or not. if it is checked i need to display an error message.
Pl suggest me.

Hi Experts,
I want to put a control in cprojects while deleting a role. i need to check in the indent weather start of of planning is checked or not. if it is checked i need to display an error message.
Pl suggest me.

Role Deletion

Similar Messages

Maybe you are looking for