Skip to Content

Very generic question – How to automate user review, deactivation and deletion process in older versions (other than Netweaver)

Till the time I am very much confused and did a manual work on user Audits and reviews. Whenever I want to get the user list (Active) I used to go to the report and prepare an excel sheet and send the list to the concern person to lock, deactivate and delete the user ids in landscape. Continueous user review is one of the key point in every Audit, where there be some misses.

 Finally I found a solution to automate the review and action part. For recent releases and 3rd party tools(which supported by SAP) User review, validation is not a big deal to handle automatically. But many of the customers still running their landscapes on older versions. SAP recommends to run each and every landscape as latest but might not be possible at a time.

 At least till upgrade I/We can use the below process to automate the user review process. I have configured these process in 2 different methods (One is for temp users second is for all Non-Temp users).

Considered below points:
1) For temp users deactivation period (who has not logged in for more than) is 30 days
2) For Non-Temp users deactivation period is 90 days
3) For both (T and Non-T) deletion period is 10days from tghe deativation date (10 days grace period)
4) Used standard BAPIs to change the data, so every change will recorded

Part-1 (Program A)

Temp user id Review process:
1) Program “A” runs daily and locks and deactivates all the user ids which have not logged in for more than 30 days
2) And sent the confirmation to all deactivated user ids

Part -2 (Program B)

1) Program “B” runs daily and deletes all the Temp ids for which expiry date exceeded 10 days from the deactivation date
2) And sends the confirmation to all deleted user ids

Part-3 (Program C)

1) Program “c” runs daily and locks and deactivates all the Non-Temp ids which have not logged in for more than 90 days
2) And sends confirmation to all Non-Temp deleted user ids

Part-4 (Program D)

1) Program “D” runs daily deletes the all Non-Temp user ids for which valid through date has exceeded 10 days from the current date
2) And sends the confirmation to all deleted user ids

http://wiki.sdn.sap.com/wiki/display/Basis/Automatic+User+Review+%28Deactivation+and+Deletion%29+-+Program+A

http://wiki.sdn.sap.com/wiki/display/Basis/Automatic+User+Review+%28Deactivation+and+Deletion%29+Program+B

http://wiki.sdn.sap.com/wiki/display/Basis/Automatic+User+Review+%28Deactivation+and+Deletion%29+-+Program+C

http://wiki.sdn.sap.com/wiki/display/Basis/Automatic+User+Review+%28Deactivation+and+Deletion%29+Program+D




Hope it helps you in User Review 🙂

Nick Loy

To report this post you need to login first.

Be the first to leave a comment

You must be Logged on to comment or reply to a post.

Leave a Reply