Symptom
In general, users with value of UFLAG different than 0 in plugin table USR02, are considered locked users. Any user with UFLAG different than 0 is marked as locked in GRC repository table GRACUSERCONN (field INACTIVE is set to 'X' by the repository object sync).
Customer wants to consider only Admin lock (UFLAG 64) as a valid lock for users in GRC repository table, and wants all other UFLAG values (128, 192..) not to be considered a lock.
How to customize what UFLAG codes to consider, in your landscape, when you run the repository sync?
Read more...
Environment
- SAP Access Control 10.0
- SAP Access Control 10.1
- Sap Access Control 12.0
Product
Keywords
Locked, expired, Repository, Risk analysis, 1029, 1028, 1004, Plugin GRCFND_A, SPRO, Locked, Admin Lock, 16, 32, flag, uflag GRACUSERCONN, INACTIVE , KBA , inactive , GRC-SAC-ARA , Access Risk Analysis , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.