Answer / sudha

Take the Two tables Usr02 and AGR_USERS.
USR02 contains all the users information
AGR_USERS contains the users who has roles attached to their
profile.

Filter the data of these two tables then you will get the
list of the user who don't have any roles assigned

Answer / vasu.g

Hi Anju yes you are correct but one small correction...

follow below steps,

1.Go to SUIM--->User---->User by Complex Criteria---->Users
by Complex Criteria--->click on execute Put * in users tab

2.At Roles tab if you click on Arrow button you will get a
window Multiple selection for roles in that window go to
"Exclude Single Values" at this tab you give values as your
role names(Ex: if your role names starts with Z or X and
standrded SAP roles S, if u give Z* it will exclude the
users assgined to Z* roles)

3. click on Execute this will give you the list of Users
who are not assgined to any roles in the system...


Hope this would be usefull....!!!!
Try this and let me know if any doubts...!!!

Answer / deepak popalkar

I have one option to get this list.

First find list of users who has atleast one role assigned
using SUIM option "With User assignment" and then find all
users in system using option "Users by address Data".

Then go to table USR02/USER_ADDR and put 2nd List under
option "Select Values" and put 1st List in option "Exclude
Values".

But I want another short cut option using which I will get
this list in one short. Plz advice

Answer / anju

Go to SUIM-->Users by complex criteria--->Put * in users
tab-->Execute it

It will display you list of users list who is existing in
system. Now to take the

roles assigned to user Just click of roles tab which will
display the list of users assiged with there role access.

Correct me if i am wrong...

Answer / ashwini m

by USR02 and AGR_USERS table we can find it..

(1)Difference between usobt_c and usobx_c?(2)What are usobt and usobx tables for?(3)Difference between usobt and usobt_c?(4)Se93.How u create custom t-codes?(5)Difference b/w customizing request and workbench request?(6)To trnsprt sU24 setting which is used is it customizing or workbench request?(7)If we add org level elements in a master role will it reflect in child role and how AGR_1252 will act as a barrier?(8)How to do mass user to role assignment using secatt, will u use su01 or su10?Explain why you will use SU10 not SU01?(9)Can SU10 can be used for mass password reset?Why not?(10)If you want to reset the password for say 100 users in Production how will you do?(11)Expalian Steps 2A and 2B in SU25?

6 Answers   HCL,

Can you explain document transfer-level security?

0 Answers  

What are su01 t-codes used for?

1 Answers  

what is sap security?

1 Answers  

two company codes ex 1001,1002 and two users ,one user need to access both company codes and another user need to access only one company code need to access by giving same role (one role ) to both of them.how can give access or restrict company codes in one role?

2 Answers   IBM,

Plz can anybody share ur work experience on Mitigating conflicts using SoDs with GRC tools or without GRC (thankful if examples r provided)

1 Answers   CTS,

What is use of derived roles?

0 Answers  

What are some ap security t codes?

0 Answers  

How to restrict a newly created program ?

1 Answers   TCS,

What is the maximum number of profiles in a role and maximum number of object in a role?

0 Answers  

We have one request to modify role(adding field value in auth. object) and we have added it. when transporting that role, getting error "role XXXXX type is undetermined" can any body please suggest, how to fix this issue?

2 Answers   Cap Gemini, IBM,

hou can i assign a same role to 200 users ?

4 Answers   IBM,