Error
Error Code:
704
SAP S/4HANA Error 704: Usergroup Deletion Failed
Description
This error indicates that an attempt to delete or 'drop' a usergroup within the SAP S/4HANA system failed. It typically occurs when the system cannot complete the deletion due to underlying dependencies, insufficient permissions, or the usergroup being actively in use.
Error Message
ERR_SQL_USERGROUP_DELETION_FAILED
Known Causes
3 known causesDependent Objects Exist
The usergroup is still assigned to active users, roles, or other database objects, preventing its deletion.
Insufficient User Permissions
The user attempting to delete the usergroup lacks the necessary administrative or database privileges.
Usergroup is Active or Locked
The usergroup might be currently in use by an active session or locked by another concurrent system process.
Solutions
3 solutions available1. Verify Usergroup Dependencies in SAP Authorization Objects medium
Check if the usergroup is still assigned to any authorization objects or profiles.
1
Log in to your SAP S/4HANA system using a user with SAP_ALL and SAP_NEW authorizations (e.g., SAP_SUPERUSER).
2
Navigate to transaction code SU01 (User Maintenance).
3
Enter the name of the usergroup you are trying to delete in the 'User Group' field and click 'Display'.
4
If the usergroup is found, it indicates it's still in use. You need to identify where it's referenced. This often involves checking authorization objects (e.g., PFCG for roles, SU24 for transaction authorizations).
5
For roles, go to transaction PFCG, select a role, go to the 'Authorizations' tab, and check the 'Field Values' or 'Symmetric Assignment' sections for references to the usergroup.
6
For transaction authorizations (SU24), you might need to analyze the authorization checks within the relevant transactions. This is a more advanced step and may require ABAP debugging.
7
Once identified, remove the usergroup from all its assignments. This might involve changing roles, reassigning users to different groups, or updating transaction authorizations.
8
After removing all dependencies, attempt to delete the usergroup again via SU01.
2. Clean Up Unused Usergroup Entries in System Tables advanced
Directly remove orphaned usergroup entries from underlying SAP tables if they are confirmed to be unused.
1
This solution involves direct table manipulation and should only be performed by experienced SAP Basis administrators after thorough investigation and with proper backups.
2
Identify the SAP tables that store usergroup information. Key tables include USGRP (User Groups) and potentially others depending on the specific S/4HANA version and configuration.
3
Connect to the SAP S/4HANA database using a database client with appropriate credentials (e.g., SAP<SID>adm user for OS-level access, or a dedicated database user with necessary privileges).
4
Before making any changes, query the relevant tables to confirm that the usergroup you intend to delete has no active references. For example, check if the usergroup exists in USGRP.
SELECT * FROM USGRP WHERE USGRP = 'YOUR_USERGROUP_NAME';5
Also, verify that no users are assigned to this usergroup. You might need to join with tables like USR02 (User Master Record) if there's a direct link, or check authorization-related tables for implicit assignments.
SELECT * FROM USR02 WHERE USGRP = 'YOUR_USERGROUP_NAME';6
If you are absolutely certain the usergroup is orphaned and not referenced, proceed with deletion. **CREATE A FULL DATABASE BACKUP BEFORE EXECUTING THIS STEP.**
7
Execute the DELETE statement on the SAP table. This is a direct database operation and bypasses SAP transaction logic. Use caution.
DELETE FROM USGRP WHERE USGRP = 'YOUR_USERGROUP_NAME';8
After deleting the entry from the table, restart the SAP application servers to ensure the changes are reflected across the system.
9
Attempt to delete the usergroup again via SU01 to confirm the issue is resolved.
3. Perform SAP System Consistency Checks and Corrections medium
Utilize SAP's built-in tools to identify and resolve inconsistencies related to user and authorization data.
1
Log in to your SAP S/4HANA system with a user having administrative privileges (e.g., SAP_ALL).
2
Navigate to transaction code SA38 (ABAP Editor).
3
Enter the program name `RSUSR002` and execute it.
4
This program checks for inconsistencies in user master data. Select the 'Check' option to identify potential issues.
5
Review the output for any errors or warnings related to user groups. The program may highlight specific tables or entries that are problematic.
6
If `RSUSR002` identifies inconsistencies, you can often use its 'Correction' option to automatically fix them. Be sure to understand the implications before applying corrections.
7
Alternatively, for more specific authorization-related inconsistencies, you can use transaction `S_AUT_INST` (Authorization System Check) or program `RSUPG_VERIFY_AUTHORITY` (Verify Authorization Objects). These programs can help identify and sometimes correct issues with authorization objects and their assignments.
8
After running and potentially applying corrections with these programs, attempt to delete the usergroup again via SU01.