Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 

role assignment

Former Member
0 Kudos

Hi,

How can I prevent some users from assigning roles via SU01?

thanks,

- ferudun

1 ACCEPTED SOLUTION

Former Member
0 Kudos

Don't give them access to object S_USER_GRP.

Cheers,

Ben

3 REPLIES 3

Former Member
0 Kudos

Don't give them access to object S_USER_GRP.

Cheers,

Ben

0 Kudos

Actually if you don't give them S_USER_GRP then they will not be able to use SU01 at all. Remove activity 22 from that auth object and they will be able to everything else except assign roles.

Former Member
0 Kudos

Ben and JC are right, you need to restrict the object S_USER_GRP. Look at the Roles the users have and use SUIM to analyze which Roles are giving them Object S_USER_GRP, then you will know which Roles to change.

Regards

Ashley