User unlock access restriction for users locked by administrator

[Former Member]

Hi,

I want to restrict my User Admin (Local IT Support)

from unlocking the user accounts which are locked by

the administrator.

How can I restrict the access to unlock users locked by Administrator while retaining access to unlock users locked due to incorrect logons?

Thanks in advance.

[Former Member]

hi Aysha,

if user had the access to object s_user_grp with activity 05 , he/she can lock/unlock users; so its not possible but you can write custom ABAP program; schdule it in background to check if you're help desk is unlock any user which has been lock by admin.

regards

shaik

[Former Member]

Administrator can create a new User group called "LOCKED" and add the users to the Locked group.

Access to this User group should be assigned to administrator only.

This way no one other than administrator will be able to unlock the user.