Re: User Can Still Access Tcodes From Role That Has Already Expired

There is possibility of another role having same Tcodes, whichever you resticricted.

So Go to SUIM--> Roles by Complex Selcetion Criteria-->enter USERNAME In selction according to user assignments tab -->Enter Tcode whichever you blocked in  selction by assigned application in Menu -->Exexute-->

This will show roles which are having access of Tcodes, whichever you blocked. 

From corresspondance role you can remove Tcode.