Deleting a profile in SAP means removing a user account and all its permissions from your system

When you delete a profile in SAP, you are removing a user's access to the system entirely. This is different from deactivating a user, which locks them out but keeps their record in the database. Deletion removes the profile completely, though SAP keeps an archive of transactions that user performed for audit purposes.

The steps differ depending on whether you are a system administrator with access to the user management tools, or whether you need to request deletion through your organization's IT department. Most companies restrict who can delete profiles for security reasons — typically only system administrators or security officers have this permission.

Key Takeaways

  • Only users with system administrator rights can delete profiles in SAP; check with your IT department if you do not have access to user management.
  • Deleting a profile removes all access immediately, but SAP retains a record of all transactions the user performed for compliance and auditing.
  • Before deletion, reassign any open work orders, documents, or responsibilities to another user so nothing gets stuck in the system.
  • The deletion process takes place in transaction SU01 (User Maintenance) or through the Identity Management system if your organization uses one.

Check your access level before you start

Not every SAP user can delete profiles. Your ability to perform this action depends on your own user role and the authorizations assigned to you. If you try to access the deletion function and receive an error message saying you lack authorization, you do not have the necessary permissions.

Contact your system administrator or IT security team and tell them which profile needs to be deleted and why. They can either perform the deletion themselves or grant you temporary access if your role requires it. Keep a record of who requested the deletion and when, as most organizations require this for compliance.

Prepare the profile for deletion

Before you delete a profile, take time to transfer any work that user owns to someone else. Check for open purchase orders, sales orders, service requests, or any other documents where that user is listed as the owner or approver. If you delete the profile while work is still assigned to it, those tasks may become orphaned and harder to track down later.

Review the user's email inbox in SAP if your system uses integrated messaging. Forward any important messages to the appropriate person. Also check whether the user has any scheduled reports or batch jobs running under their profile — these will fail after deletion if they are not reassigned or cancelled first.

Delete the profile through transaction SU01

Open SAP and navigate to transaction SU01, which is the standard user maintenance tool. Type SU01 into the command field at the top left of the screen and press Enter. The User Maintenance screen will open.

In the User field, type the username of the profile you want to delete. Click the Delete button (or press Ctrl+D). SAP will ask you to confirm the deletion. Review the username one more time to make sure you are deleting the correct profile — this action cannot be undone. Click Yes to confirm.

SAP will display a message confirming the profile has been deleted. The user will lose access to the system immediately. If that user tries to log in, they will receive an error message stating the user does not exist.

Delete through Identity Management if your organization uses it

Some larger organizations use SAP Identity Management (IDM) or a similar system to manage user accounts across multiple SAP instances. If your company uses IDM, you may not delete profiles directly in SU01. Instead, you submit a request through the IDM portal or ticketing system.

Log into your organization's identity management system and search for the user you want to remove. Select the option to deactivate or delete the account. Fill in the required fields, which typically include the reason for deletion and the date it should take effect. Submit the request and wait for approval from the appropriate manager or security officer. The deletion will be processed automatically once approved, and the change will sync to all connected SAP systems.

Verify the deletion was successful

After deletion, try to log in with that username to confirm the profile no longer exists. You should receive an error message. You can also check in transaction SU01 by searching for the username — it should not appear in the results.

If you need to confirm the deletion for compliance or audit purposes, generate a user list report from transaction SUIM (User Information System). This report will show all active users and will not include the deleted profile. Keep a copy of this report along with documentation of who requested the deletion and when it was completed.

What to do if the deletion fails

Sometimes a deletion will not complete if the user still has open transactions or if another system process is holding a lock on the profile. If you see an error message during deletion, note the exact error code and message. Common issues include the user being locked by another administrator, the user having active sessions, or the user owning documents that cannot be transferred.

If the user has active sessions, ask them to log out or have your system administrator force a logout from transaction SM04 (User Sessions). If the user owns locked documents, contact the document owner or your business process owner to determine whether those documents should be deleted, transferred, or archived before you try deleting the profile again.

Frequently Asked Questions

Can I recover a deleted profile?

No, deletion is permanent in SAP. However, your organization may have database backups that could be restored if the deletion was a mistake. Contact your database administrator immediately if you need to recover a deleted profile. They can restore from a backup, but this affects the entire system and is disruptive, so it is only done in rare cases.

What happens to the user's data after deletion?

SAP keeps a record of all transactions and documents the user created or modified, even after the profile is deleted. This is required for audit trails and compliance. The user's personal settings and preferences are removed, but their transaction history remains in the system for reporting and investigation purposes.

Do I need to delete the profile or just deactivate it?

Deactivation is usually the safer choice. It locks the user out immediately but keeps the profile in the system so you can reactivate it later if needed. Delete only when you are certain the profile will never be needed again, such as when an employee leaves permanently and your retention policy allows deletion.

What if I do not have permission to delete profiles?

Contact your system administrator or IT security team with the username and reason for deletion. They will either delete it for you or explain why the profile cannot be deleted. Some organizations have policies that prevent deletion for a set period after an employee leaves, so the timing of your request may matter.

Does deleting a profile affect other users?

Deleting a profile does not affect other users' access or data. However, if that user was an approver for workflows or owned shared documents, those items may need to be reassigned first so work does not get stuck. Plan the deletion during a time when the impact on your team is lowest.