Announcement:
wanna exchange links? contact me at sapchatroom@gmail.com.
Posted by
Admin at
I just had to do the same thing yesterday. This is what i did.
ROLES BY USERS
1. Go to transaction SUIM
Select: Where–Used List>Roles>In Users
2. Leave the Role Field Blank and hit Execute
3. Click the Roles Icon – It will take a few minutes to open.
4. Export into Excel
5. Sort by End Date of the Validity Period.
6. Delete all Roles that are expired as of Current Date.
7. Sort by Type and by Assignment.
Validate all Composite Roles are through Direct Assignment. Have not
seen yet where they are not but good to validate.
8. Take all Composite Roles and Move them to another Worksheet (Tab) in the Workbook.
9. Sort each Worksheet by Role.
TRANSACTION BY ROLE
(Can only be done after creating Roles by Users)
1. Go to SE16
Enter : AGR_1251 – This table looks at all items in OBJECT : S_TCODE vs. Table AGR_TCODES that only looks at the items in the Menu tab of PFCG.
2. Go to the report you just create for Roles by Users and click on the Single Roles Worksheet. Then select remove Duplicates based off Role. We do not need to do this for composite roles as those are just made up of all the single roles and contain no transactions.
3. A. Copy the Roles and Paste the copy roles into the Role Field of table AGR_1251.
B. Add to the Object field: S_TCODE
C. Remove the Maximum Hits quantity and change Width of Output List to 9999.
4. Download the report.
5. Open the report up in Excel.
6. Delete all columns BUT Role, and the 2 Value Columns.
The Value Columns are your Transactions. The second Value Column is the ending Range if there is a range.
7. Add a column between Role and Value name Role Description and change the Value Columns to read Transaction and Transaction Ending Range.
8. Go to SUIM
A. Roles> By Role Name
B. Take the list of Roles again and enter them.
9. Download the list.
10. Copy the entire Worksheet and put on 2nd Worksheet inside the Workbook you have been creating your report on and rename Role Names.
11. Delete out Column B (Type Column)
12. Go to the Roles by Tran worksheet and click on the first cell under Role Description and do a VLOOKUP TO Pull Roll Names into Worksheet.
=VLOOKUP(A2,'Role Names'!$A$1:$B$665,2,FALSE)
A2 = Role Name on 1st worksheet
'Role Names'!$A$1:$B$665 = Entire Data on 2nd worksheet
2 = Input the data found in the second column of the 2nd worksheet here where the curser located.
False= find exact match of Role Name
---------------Original Message---------------
From: Alex Ayers
Sent: Thursday, July 08, 2010 11:20 AM
Subject: SAP end users roles review
> Hi Barry, you raise a valid point. The way I see it is that there is a
> trade off between ease of use of reporting out of the SUIM structure/S_BCE
> reports and the potential lack of accuracy and manually repetitive tasks
> required to perform this exercise. Unless the OP is a complete newbie to
> SAP I would go for the table option but as we know, there are many ways to
> skin a cat & even more ways to get stuff done using SAP.
| __.____._ Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
| | Related Content White Papers
In the Spotlight  _.____.__ |
Mark as helpful
