Creating a Logon Evaluation Report

IT Asset Management (Cloud)
Create a Logon Evaluation report to identify users who have been set up in the SAP system, but who never logged on or have not logged on to the system within a specified amount of time.

To create a Logon Evaluation Report:

  1. In the Main menu of the SAP Admin module, select an active system from the system landscape.
  2. Click Reporting, then select Logon Evaluation from the menu. To run the report to analyze all available data, go to step 10. To specify selection criteria and select additional report options, complete step 3 through step 9, as necessary. All report settings are optional.
  3. Under Selection Criteria for Systems, select the systems whose user logons you want to analyze. In the System field, specify the system or range of systems. The system that was previously selected in the Main menu is preset in the selection screen. (F4 Help opens a list with the systems that are recorded in the FlexNet Manager for SAP Applications system data.)
  4. Under Selection Criteria for Users, you can limit the report to specific user names (UserIDs). In addition, the report can be limited with regard to license type, user type, user group, and other selection options.
    Option Description
    User Name Limits the report to the specified user name or range of user names.
    License Type Limits the report to users with a specified license type.
    User Type

    Limits the report to a specified user type.

    The default setting is A (Dialog User).

    By default, technical SAP users—who would also be disregarded in an SAP license audit—are excluded.

    User Group Limits the report to a specified user group.
    Account Number Limits the report to a specified account number.
    Cost Center Limits the report to a specified cost center.
    Company Name 1 Limits the report to a specified company name 1.
    Company Name 2 Limits the report to a specified company name 2.
    Division Limits the report to a specified division.
    User Lock Status Displays users with a specific lock status. Enter one of the following values:
    • 64—locked by administrator
    • 128—locked after incorrect logon
    • 96—locked
    • 32—locked by the central CUA administrator
    You can find the values for this field in the F4 Help.
    Read Invalid Users If you want to include invalid users in the report, select the Read Invalid Users check box.
  5. Under Logon Evaluation Options, you can indicate how the report should evaluate user logon information and whether it should consolidate user data.
    Option Description
    Not Logged on in ... Days Enter the number of days that you want to define as your threshold. If no value is provided, all users that are on the system will be listed.
    Account for Valid-From Use this option if you want the system to consider the Valid From date in the user primary data. If in the user primary data a date is specified that falls after the date of the last logon or after the creation date of the user, the Valid From date is taken.
    User Consolidation If you want to consolidate user data across several systems, select the User Consolidation check box. If this option is selected, the report shows users that appear on more than one system only once with the data from the system on which the shorter Not Logged on in ... Days period occurred.
  6. Under Parameters HR Connection, you can specify that you want the report to check the data from a connected HR system. To do so, select the Check HR Data check box, then select the value for the option HR Status 'Not Active'. The default value is Not Active (not equal 3).
  7. Under Parameters for Direct Mass Change, select the Direct Mass Change check box if you want to immediately change the Valid To date and/or license type of the users identified in the report. To enable a mass change, you must also indicate which data you want to change by selecting the appropriate check box:
    • Update User's Valid To Date—Select the check box and specify a date to update the User Valid To date for all identified users.
    • Update License Type—Select the check box and specify a license type to update the license type for all identified users.
  8. Note: To use the LDAP options, you need to create a user exit for the LDAP connection beforehand. For more information, see User Exits for LDAP Connections.
    Under LDAP Parameters, select the Analyze LDAP check box to cross-reference an LDAP system to access further information on the users' status, then enter the appropriate value (which is dependent on the connected LDAP system) in the LDAP Status field. You can use this option, for example, to identify users that are marked as inactive in the LDAP system.
  9. Under Display Options, you can specify a layout for the report. Enter the name of the saved layout in the Layout field.
  10. Click Execute.

If you are performing a direct mass change, all found user primary data are updated using the specified parameters after you confirmed the security prompt. Foreign systems are accessed via the RFC connection that is specified in the system data.

You can modify the user data or license data directly in the report. For more information, see User Data or License Data Changes.

All modifications to user primary data are logged. You can view the logs using the transaction SLG1. If the mass change encounters an error, the log file is opened automatically.

IT Asset Management (Cloud)

Current