SAP Knowledge Base Article - Preview

3276682 - How to delete phantom-/ghost-/orphan-/abandoned authorization profiles.

Symptom

Authorization profiles without role relations, except in table AGR_1016, exist in your system.
How to delete these profiles from your system is unknown.

Attention:
The deletion of SAP standard roles via Support Package is the main argument why SAP recommends to always use standard roles as copy templates only but never directly.
Always copy SAP-roles to ZSAP-roles (or use your own name convention).


Read more...

Environment

As of SAP_BASIS 700 to SAP_BASIS SAPK-75004INSAPBASIS: Pre-condition: SAP Note 2315074 must be implemented.
As of SAP_BASIS 751 and higher: No pre-conditioned correction required.

Product

SAP ERP all versions ; SAP NetWeaver all versions ; SAP S/4HANA all versions

Keywords

ghost profiles, abandoned profiles, phantom profiles, orphan profiles, delete profiles, how to delete ghost profiles, how to delete abandoned profiles, how to delete orphan profiles, profiles cannot be deleted , KBA , BC-SEC-AUT-PFC , ABAP Authorization and Role Administration , Known Error

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.