Symptom
What is the SAP Recommendation if Security team wish to delete terminated users in SAP ABAP Production clients after an elapsed time from expiration date.
Cause
You wish to remove users which are no longer active in your company.
Resolution
In general, SAP suggest to avoid the deletion of former productive users. It’s better to restrict the “valid to”-date in SU01. This will have better results when checking the history of the transaction data.
- In change document history, the user ID will be seen, but mostly it’s better to also show the full name and other data of the former user
- It will avoid a new user being created with a former used user ID.
- The license measurement respects the validation interval of user IDs, you do not have to pay for no longer used user ID’s.
The decision is for the customer. Discuss any decision with an auditor, to avoid difficulties in that area.
See Also
- SAP Note 550718 FAQ: Deleting users (sections 1 and 2)
- SAP Note 2826256 Deletion and locking of user master records
