Roles are getting added and deleted via BATCH user ID in production

[former_member639528]

Recently we received a priority that few transactions for a user is missing.

When checked user's change documents we found that user BATCH has added and deleted few roles from his profile.

We checked the SM20 logs as per the timing when this BATCH action was happening and found that it has affected many users as well.

This is a critical issue.

Here in development we add single roles in composite and move it to production.

The new added single roles in composite role are anyhow deleted by the BATCH user in production later.

Please anyone could help us with this .

[patelyogesh]

Hello Manju Nair

Can you please let me know what is the background job name?

I am suspecting that PFUD job is the one who is making this changes.

Thank you

Yogesh

[wlourens2]

Thanks, we had the same issue where job RHAUTUPD_NEW deleted profiles!

[jmodaal]

Hello,

RHAUTUPD_NEW resp. PFCG_TIME_DEPENDENCY are SAP standard programs taking care for keeping the time-limited assignment of roles to users. If a role is assigned to a user from some day in the past until yesterday, today's run of these reports will remove the profiles of the role from the user. And vice versa for a role that is assigned to a user with a start date = today. This is standard / normal / intended. So, if there were deletions of profiles for a user, a possible explaination is the validity end of an assigned role.

Kind regards

Jan