Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
i want to assign su01 to a user but don't want to allow him to create user.SO can i remove the create icon from the t-code and what is the Auth object to to change.
For Authorizations related to User Master Maintenance you can use the object: S_USER_GRP. Remove activity 01 from this object and the users assigned to it will not be able to create users. In case you want to give authority for lock/unlock and password reset you can maintain value 05 in the ACTVT field.
To be sure they cannot do an update or create, set all s_user_* objects to activity 03 and 08 for change documents, otherwise he can fool around with activity groups, profiles etc.
