Question:
Hi
I want to tidy up my roles by removing invactive authorisations. Does anyone know of a what of doing this for more than one role at a time? I have been going through and in the authorisations screen selecting "edit" then "delete inactive" and I'm being driven potty with it.
Any help appreciated.
Thanks
Answer:
I strongly recommend you do NOT do this.
Any time you add a new transaction all those inactive objects will be added to the role again.
Your best bet is to leave them there in an inactive state. This will save you years of work and prevent a trip to the insane asylum.
_________________
To err is human - to really foul things up, you need security access.
Answer:
Thanks, I've stopped taking them out. They are a bit of a nuisance though when I'm checking authorisation settings through the SUIM reports.
Answer:
THe inacives are only coming in because you do not have your settings correct in SU24 for the objects in the tcodes. If you maintian SU24 correctly , the each time you go into a role you should use the "read old, merge new" option and if all is correct the lights should all stay green. If they do not and something comes in then you add a tcode and the objects are new and needed, the configuration changed or there was an upgrade and you need the objects or you have SU24 values set wrong
_________________
John A. Jarboe