Question:
Hello,
We have converted our old 31I system profiles to roles using SU25
option 6. Conversion looks good & now I trying to remove old tcodes from my newly converted roles.
But though I remove the tcodes from the role menus, when I go to the authorization screen, the underlying authorization/auth fields for the "removed" tcodes still exist.
Tried quite a few things out but have not been able to do it for roles converted from "old" profiles. All the authorization data for such roles is showing up with a tag "manually".
The problem (or whatever you may want to call it) does not happen when you remove tcodes on "fresh" roles or even if new tcodes are added & then removed from the converted roles. Only happens to the old tcodes that were converted & showup with tag "manually".
Does anyone know of a clean way to remove old manual tcodes from roles? Would really appreciate any help you can offer.
Thanks.
Answer:
This is how it works.
Authorizations with the status Manual (Changed too) are not affected by a merge / removing transx from the menu. Standard are.
Answer:
Thank you for the response.
You are right !!! auth data merge affects standard auths only. But I was wanting to see if anybody else tried alternate ways to actually clean tcodes & their related auth fields listed under status - "manually" or "status - "changed" - though PFCG does not actually provide any tool to do it.
Please let me know.
Thanks.