Sap user master comparison program

You can select the required processing types see 4. Following the comparison the system displays a log that includes any errors that occurred background processing log for a background job.

The user master record comparison consists of three types of comparison: The profile comparison With this, the profiles of time-dependent role assignments are updated. Note You cannot set time limits for authorization profiles and their entry in user master records.

Start transaction PFUD. Specify the roles that you want to use for the comparison. Performing the User Master Comparison With this action, you start the user master comparison in dialog for individual roles.

If you have selected Perform User Master Comparison, choose one or more of the following processing types: Profile Comparison: Start the profile comparison immediately after generating or importing profiles. If you are using time-dependent role assignments, we recommend that you schedule this daily as a background job. This compares the authorization profiles with the user master records; that is, profiles that are no longer current are deleted from the user master records and the current profiles are entered in the user master records.

When you have updated a role this update needs to be reconciled with the existing users assigned to the role. This blog will explain how to do this. User compare in role building is pretty easy. In PFCG when you get the yellow traffic light in the user tab the screen looks as follows:. When you transport a role some changes might end up into the roles being updated, but the user comparison is not done. The end result is that the assigned authorization does not work, and you might get lots of complaints.

Otherwise, imported profile data might be deleted. You can also start the user master comparison for individual roles in transaction PFCG. You can execute this program with the individual processing types in dialog, or to schedule it as a complete comparison in the background.

Profile comparison: Start the profile comparison immediately after profiles are generated or imported. If you use time-dependent role assignments, we recommend that you schedule this daily as a background program.

The authorization profiles are compared with the user master records; that is, profiles which are no longer current are deleted from the user master records, and the current profiles are added to the user master records. Composite Role Comparison: Start the composite role comparison, if you are making changes to a composite role definition that is, adding or deleting single roles to a composite role , or importing a change. The single role assignments are compared with the composite role assignments to the user here.

If you have added single roles to the composite role, the single roles are assigned to those users that have an assignment to the composite role.