How to Delegate user administration by user's company
We have a few hundreds SAP Users differentiated by four "Company" in SU01 (No User Group is used), I am Not refering the Company Code in Organization Structure.
There is a request to delegate one or two IT guy in each "Comapny" to unlock ID and reset password, but no such right to users of other "Company".
I know to set unlock ID and reset password by asign z_role with SU01 and authorization object S_USER_GRP activity 05 and 03.
but I can I limit this role to do so only for user only from that "Company"?
In short: users in the same client are from 4 companies, but no User Group is using. how to let a IT guy of that company to reset password and unlock user in their own company?