06-09-2016 12:54 PM
Hi All,
How to restrict user type change from the users who have access to SU01 T-code. We need to restrict only for User type change, Is there any Authorization object related to user type, where in we can restrict User type change.
Thanks in advance
Narendra varma
06-13-2016 2:03 PM
Hello Narendra,
It will be good create a custom transaction (ex: ZSU01). So please ask ABAPer to restrict the user type modification at program level in custom transaction. and remove the standard SU01 transaction from all the roles and assign custom transaction for those you want to restrict.
Satish Chelluboina
06-09-2016 12:59 PM
06-09-2016 2:18 PM
06-09-2016 3:39 PM
Hi Varma,
Im not sure if it is possible but:
Maybe you can add in a user-exit/enhacement of the program related of SU01 a validation (autohirty-check) that check an authority object.
I hope that you can solve your requirement asap.
Best regards.
06-13-2016 2:03 PM
Hello Narendra,
It will be good create a custom transaction (ex: ZSU01). So please ask ABAPer to restrict the user type modification at program level in custom transaction. and remove the standard SU01 transaction from all the roles and assign custom transaction for those you want to restrict.
Satish Chelluboina
06-14-2016 10:49 AM
Along similar lines a transaction variant could work.
More importantly, if you cannot trust users not to change user types then there is no way that they should be allowed to have SU01. A simpler solution would be to tell them not to do it and review change reports. If you detect an anomaly then discipline/remove from your account. Behaviours will soon change.
07-04-2016 10:57 AM
Hi Satish,
Thanks for your suggestion it worked as ABAP team created ZSU01 T-code and at programe level they disabled User type change screen and hence no one can change user type with ZSU01 T-code. we have restricted SU01 T-code for single user who will do the user type change when it's required.
07-05-2016 8:23 AM
Hello Narendra,
Could you please copy and paste the program level change here, so it will be helpful to other people.
Regards
Satish Chelluboina