Technical: When testing access rights with CSI AA, are locked, inactive or outdated roles included?
CSI Authorization Auditor is an application that audits the profiles. A user buffer in an SAP system is also loaded based on the (generated) profiles. This means that inactive authorizations are never generated in the profile and can as such not be taken into account. The validity period of a user-role assignment is only reflected in the user-profile relation after a user comparison.