AC ERM : role creation and how to delete ungenerated roles

[vdoux]

Hi,

When you work on a role from ERM, the role is created in the back end. It will be generated only at the generation phase. But what if finaly it is decided not to generate the role, is there a way to delete the role in the BE from ERM?

It seems the only way is to go in PFCG and delete the role manualy?

Regards

[Former Member]

Hello Vincent,

There are different tables in which the roles for RE (in frontend RE, frontend tables) and where the roles in R/3 are stored. That is, it might be that even if you are generating all the roles from RE, at a particular time the list of roles in RE is greater than number of roles in R/3 Backend. This is because:

RE roles = Generated roles (which exist at backend as well)+Ungenerated roles (which are in RE only till that particular time).

Here ungenerated roles would mean the roles which you have not yet generated in RE.

Thus, __deleting roles from R/3 and RE are two separate things__.

1. To achieve the deletion the role from Backend (R/3) you should create a request in RE to remove this role from all the users currently attached to it as there is no way possible to delete the role from R/3 by creating a request from RE. Doing this would still have the role in R/3 but with no user assigned.

2. To delete the role from RE tables, so that you do not see it again, you can Search for the role, select it and then click on the "Delete" TAB. This will delete the role from the RE tables.

Now, for the clenliness of your R/3 system, in case you do not want to see these roles in R/3 too, you can schedule a BG job to delete this or do a mass delete of all these roles say every fortnight or at whatever frequency as desired by your management.

Regards,

Hersh.

[former_member366047]

Vincent-

You will have to delete the role manually in the back-end. There is no way to delete the role from ERM to the back-end. FYI, once you link PFCG, the role is automatically saved in the back-end. You can do everything but the PFCG integration, and your role will be saved in the back-end.

Ankur