- SAP Community
- Groups
- Interest Groups
- Application Development
- Discussions
- Restrict user type change in SU01 T-code
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Restrict user type change in SU01 T-code
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-09-2016 12:54 PM
Hi All,
How to restrict user type change from the users who have access to SU01 T-code. We need to restrict only for User type change, Is there any Authorization object related to user type, where in we can restrict User type change.
Thanks in advance
Narendra varma
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2016 2:03 PM
Hello Narendra,
It will be good create a custom transaction (ex: ZSU01). So please ask ABAPer to restrict the user type modification at program level in custom transaction. and remove the standard SU01 transaction from all the roles and assign custom transaction for those you want to restrict.
Satish Chelluboina
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-09-2016 12:59 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-09-2016 2:18 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-09-2016 3:39 PM
Hi Varma,
Im not sure if it is possible but:
Maybe you can add in a user-exit/enhacement of the program related of SU01 a validation (autohirty-check) that check an authority object.
- If the user has the autohirty object, allow to update User Type.
- If the user dont has the authorization object, dont allow update the User Type.
I hope that you can solve your requirement asap.
Best regards.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-13-2016 2:03 PM
Hello Narendra,
It will be good create a custom transaction (ex: ZSU01). So please ask ABAPer to restrict the user type modification at program level in custom transaction. and remove the standard SU01 transaction from all the roles and assign custom transaction for those you want to restrict.
Satish Chelluboina
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-14-2016 10:49 AM
Along similar lines a transaction variant could work.
More importantly, if you cannot trust users not to change user types then there is no way that they should be allowed to have SU01. A simpler solution would be to tell them not to do it and review change reports. If you detect an anomaly then discipline/remove from your account. Behaviours will soon change.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-04-2016 10:57 AM
Hi Satish,
Thanks for your suggestion it worked as ABAP team created ZSU01 T-code and at programe level they disabled User type change screen and hence no one can change user type with ZSU01 T-code. we have restricted SU01 T-code for single user who will do the user type change when it's required.
- SAP Managed Tags:
- Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-05-2016 8:23 AM
Hello Narendra,
Could you please copy and paste the program level change here, so it will be helpful to other people.
Regards
Satish Chelluboina
- SAP Managed Tags:
- Security
