Process SAP_SAPUserInSAPRole_Delete(old) no longer necessary (4321002)

Up to version 7.0, it was possible to change the validity period of existing memberships in OneIM, which was then provisioned in SAP via the above-mentioned process.

As of 7.1, however, it is no longer possible to change the validity period; you can only remove an existing membership and create a new one with a different period.

Memberships that are created via inheritance calculations are treated in the same way.

The only remaining possibility to change SAPUserInSAPRole.DistinguishedName is therefore to change the name of the user.

This is possible in OneIM, but is handled entirely by the "SAP_SAPUser_Rename" process. The "SAP_SAPUserInSAPRole_Delete(old)" is not generated at all for this case according to GenCondition.

For this reason, the process is no longer necessary, but potentially leads to the loss of memberships in the event of a data repair.

This is a product defect (34577).

WORKAROUND

Deactivate 'SAP_SAPUserInSAPRole_Delete(old)'

STATUS

There will be no hotfix for this defect. This will be resolved in a future release.