REGAN-5265

Ariba Network users can request the administrator of their account to remove their personal information from the system. This is called a revocation request. If the request is approved, users cannot log in to Ariba Network any longer, and their personal information is no longer visible to other users.
Now, Ariba Network provides a new feature by which administrators can configure a retention period for the user data of all the revoked users in their organization. The data of revoked users is automatically removed from Ariba Network after this retention period is reached. Administrators must have configured the retention period before accepting or rejecting any revocation request. If the retention period for an organization is not configured, Ariba Network prompts administrators to configure the retention period before they can act on a revocation request. Administrators can change the retention period at any time before the previously configured retention period is reached. The newly configured retention period takes effect immediately. The retention period must be configured in months and must be between 1 and 999 months.

The data of revoked or deleted users would stay in the system until the customer requested for permanent deletion of such user's data, which could retain personally identifiable information (PII) for longer than required.

This feature will ensure that personally identifiable information (PII) of a blocked or revoked user does not exist in the system for more time than required. Deletion of such users will be automatic based on customer's defined retention period. Therefore, it will save customers' time and effort to delete such PII and avoid retaining PII longer than necessary.

Buyer and Supplier

https://help.sap.com/docs/SAP_Ariba/978b7e36451a4c2c85321a3ef6f3a7e5/50695b075da94eafa7c5c21c34d1c492.html?locale=en-US&state=PRODUCTION&version=cloud

Customer Configured