AW: Deleted Users with Workitems

[John Wiese]

What we do in the cases you mention, we "strip" the profiles and activity
groups
from the UserIds (where applicable), but still hold onto the userids and
take
the steps noted!
 
Hope this helps!
 
R/3 Project Manager
ASUG-HTIG Chairperson
- - - - - - - - - - - - - - - - - - - -
ESRI, Inc.
380 New York St.
Redlands, Calif 92373
 
Work:       909-793-2853
Fax:         909-307-3102
E-mail:     jwiese at esri.com
- - - - - - - - - - - - - - - - - - - - -
 
 
 
-----Original Message-----
From: Dale Davis [mailto:dkdavis at us.ibm.com]
Sent: Monday, February 25, 2002 9:13 AM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: AW: Deleted Users with Workitems
 
 
John:
 
Based on the company's security guidelines, deleting a user, after the user
has left the company may be a required procedure. For example if work was
subcontracted for a fixed period of time to an external company and now
that contract is expired, some companies require that those ids are
removed from their production systems altogether.
I understand what you are saying about placing valid to dates on the ids in
production, but that procedure may also be used for occasional users, who
need access only during special windows such as a production release.
Putting them into a special group helps to distinguish them, but does not
entirely eliminate the risk of inadvertently activating a previously
dormant id that should not be activated . I like your approach in general
though for companies whose security guidelines do not required the
elimination of the ids altogether.
 
 
Regards,
Dale Davis Jones
IBM / SAP Certified
Senior SAP Workflow & PP Consultant - SAP Practice
 
IBM Global Services
Phone: 919-543-7678
               T/L 8-441-7678
  Internet Address: DKDAVIS at US.IBM.COM
 
.......You can never discover new oceans unless you have the courage to
lose sight of the shore..........
 
 
John Wiese <jwiese at esri.com>@MITVMA.MIT.EDU> on 02/25/2002 11:32:34 AM
 
Please respond to "SAP Workflow Users' Group" <SAP-WUG at MITVMA.MIT.EDU>
 
Sent by:    SAP Workflow <Owner-SAP-WUG at MITVMA.MIT.EDU>
 
 
To:    SAP-WUG at MITVMA.MIT.EDU
cc:
Subject:    Re: AW: Deleted Users with Workitems
 
 
 
You should "NOT" be deleting your user ids!
 
Further, you do "NOT" get around your licensing requirements by "deleting"
them!
 
1) You secure your userids by placing a date in the "Valid to" field on the
Logon
   data tab!
 
   This "effectively" secures your userid from further use/access.
 
2) Additionally, you select the "Measurement Data" button and you update
the
 
   "Contractual user type" to a non-use or customer defined id . . . that
will
   again demonstrate to SAP that this particular userid is no longer being
used!
 
The above represents the correct and legal actions a company should be
taking in
regards to its' userids . . . and to remain compliant with your SAP
Licensing
agreement.
 
John Wiese
R/3 Project Manager
ASUG-HTIG Chairperson
- - - - - - - - - - - - - - - - - - - -
ESRI, Inc.
380 New York St.
Redlands, Calif 92373
 
Work:       909-793-2853
Fax:         909-307-3102
E-mail:     jwiese at esri.com
- - - - - - - - - - - - - - - - - - - - -
 
 
-----Original Message-----
From: Mike Mathieson [mailto:msmathieson at hotmail.com]
Sent: Monday, February 25, 2002 8:00 AM
To: SAP-WUG at MITVMA.MIT.EDU
Subject: Re: AW: Deleted Users with Workitems
 
 
Yes, I think that's why we delete them.  We don't have to pay the license
fees.
 
 
>From: "Becker Stephan (extern)" <Stephan.Becker.ext at mchw.siemens.de>
>Reply-To: SAP Workflow Users' Group <SAP-WUG at MITVMA.MIT.EDU>
>To: SAP-WUG at MITVMA.MIT.EDU
>Subject: AW: Deleted Users with Workitems
>Date: Fri, 22 Feb 2002 08:52:16 +0100
>
>Does it do the trick of not requiring you to pay license fees for this
user
>to SAP?
>
>-----Urspr|ngliche Nachricht-----
>Von: Roehlen, Peter [mailto:PRoehlen at powercor.com.au]
>Gesendet: Donnerstag, 21. Februar 2002 22:25
>An: SAP-WUG at MITVMA.MIT.EDU
>Betreff: Re: Deleted Users with Workitems
>
>
>Mike,
>
>Why delete your users?  You are destroying important historical
information
>that you may require later - ie who created this document, what access did
>they have when they created it etc etc.  You wouldn't delete a vendor
>master
>record just because you stopped doing business with them.
>
>We only deactivate our users (ie delimit by date.)  It is just as
effective
>but retains information for security and financial audit purposes.
>
>Regards
>
>Peter Roehlen
>Team Lead - SAP Technical & Development
>Powercor Australia Ltd
>0409 950 263
>
>
>
>-----Original Message-----
>From: Mike Mathieson [mailto:msmathieson at hotmail.com]
>Sent: Monday, 18 February 2002 21:23
>To: SAP-WUG at MITVMA.MIT.EDU
>Subject: Deleted Users with Workitems
>
>
>We delete users from our system if they don't sign on to SAP for 60 days.
>Some users however, who receive workflows, rarely log into the system and
>have a substitute handle their workitems for them.  This is causing
>problems
>with workitems sent to positions only held by a deleted user.
>
>I was thinking of writing a report that would look if a user was occupying
>any positions, so the position could be updated before a user is deleted.
>
>Has anyone else run into this problem, and perhaps come up with a better
>solution?
>
>_________________________________________________________________
>MSN Photos is the easiest way to share and print your photos:
>http://photos.msn.com/support/worldwide.aspx
>
>
>**********************************************************************
>Powercor Australia Ltd. This email and any file attachments are
>confidential and intended solely for the use of the individual or
>entity to whom they are addressed. If you have received this email in
>error please tell us immediately by return email and delete the
>document.
>**********************************************************************
 
 
_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com