Question:
Hello,
We had a big authorization problem on several production systems, we loss several authroizations profile of differents single roles.
Now, the problem is corrected after reimport of the bad roles but now we have orphan profiles :
On profile folder, we see profile not generated and the only table containing this information is only on the table giving the information Profile, list of users (it should be the UST04 table) but the profile isnot in USR10, not in USR11.
How can be identified exactly all the profiles in this case and how can we mass delete these profiles?
Thanks for your help?
Pierre.
Answer:
solution on myproblem
Answer:
Working as designed, SAP's PFCG has a feature that creates orphan profiles and authorizations under certain "constallations" ( as is translased in OSS meaning conditions). There is a sync Function module you can runin SE37 that will eliminate some of the orphans(must be run with tasktype = 'X'), but there is no SAP provided report that will remove truw orphans that cannot be deleted from SU02 or SU03.