PIPER-Rx - Aged User Accounts
   Home | Tips | Papers | Disclaimer | Privacy   

PIPER-Rx - Home of the Oracle E-Business Suite Resource Centre
Australasia

Aged User Accounts


Last update: May 2009

All too often accounts are created but rarely closed (end dated) when a person leaves.

One option is to treat management of your application user account in a similar manner to aged debtors. That is, to identify any accounts that are either not being used or have not been used in the past 120 days. We deliberately use aging buckets of current, 30, 60, 90 and 120+ as these buckets are generally understood by all.

If you want to do this all the information you need is in the table APPLSYS.FND_USER in the column last_logon_date

Whenever an account is accessed the last_logon_date is updated.
Note: In some very earlier versions of 11i self service connections did not update this field.

If the last_logon_date value is null then the account has never been used or if the last_logon_date value is older than 120 days the account is a candidate for investigation

The following SQL will list all those active accounts that have either never been used or have not been used in the last 120 days:

SELECT fu.user_id,
       fu.user_name,
       fu.description,
       fu.email_address,
       to_char(fu.last_logon_date, 'DD-Mon-YY HH24:MI') last_logon_date,
       trunc((sysdate - fu.last_logon_date)) days_since_last_connect
  FROM applsys.fnd_user fu     
 WHERE (fu.last_logon_date IS NULL
           OR (SYSDATE - fu.last_logon_date) >= 120 )
   and (fu.end_date IS NULL
           OR fu.end_date > SYSDATE )
 ORDER by fu.user_name;

A simple "Active Accounts" report has been provided in the Application Accounts Section of the free reports page

Run the report and send it to your HR department or the group that manages user accounts.

There are some modules that require user accounts to exist but they may never be accessed. I came across a site that had expenses, so all employees need a user account. The majority of these accounts were never used.

If this is the case it is a good idea to append some text to the user’s description; eg (UA) indicating an Unused Account. In this case a description of Gary Piper would become Gary Piper (UA) clearly indicating the account is unused.

So the SQL to show aged active accounts, but exclude all known unused accounts now becomes:

SELECT fu.user_id,
       fu.user_name,
       fu.description,
       fu.email_address,
       to_char(fu.last_logon_date, 'DD-Mon-YY HH24:MI') last_logon_date,
       trunc((sysdate - fu.last_logon_date)) days_since_last_connect
  FROM applsys.fnd_user fu     
 WHERE (fu.last_logon_date IS NULL
           OR (SYSDATE - fu.last_logon_date) >= 120 )
   and (fu.end_date IS NULL
           OR fu.end_date > SYSDATE )
   and fu.description not like '%(UA)'
 ORDER by fu.user_name;

Where this is the case it is worthwhile checking the “Unused Accounts” to see if any are actually being used.

SELECT fu.user_id,
       fu.user_name,
       fu.description,
       fu.email_address,
       to_char(fu.last_logon_date, 'DD-Mon-YY HH24:MI') last_logon_date,
       trunc((sysdate - fu.last_logon_date)) days_since_last_connect
  FROM applsys.fnd_user fu     
 WHERE fu.last_logon_date IS NOT NULL
   and (SYSDATE - fu.last_logon_date) <= 120 
   and (fu.end_date IS NULL
           OR fu.end_date > SYSDATE )
   and fu.description  like '%(UA)'
 ORDER by fu.user_name;

This is a great way to make yourself look good by being on top of user audit!


WARNING - BEFORE YOU DO ANYTHING

It is never recommended to manually alter any structure or data within the E-Business Application. If you choose to do so, it is AT YOUR OWN RISK.
Please refer to our Disclaimer.


Return to Top of page.
Return to Tips page.
Return to Home page.


Use of this site and information available from it is subject to our Legal Notice and Disclaimer and Privacy Statement.

Oracle®, Oracle Applications® & Oracle E-Business Suite® are registered trademarks of Oracle Corporation
TOAD® is a registered trademark of Quest Software

© 2009 G Piper
All Rights Reserved.