unlock authorization

[Former Member]

hi experts,

i have a requirment, i need to create a user that has only "unlocking user" permissions.

how can i do that

bye

[Former Member · Accepted solution]

Hi ,

Yeah it's possible....

Create new Role through transaction PFCG..In menu tab assign transaction su01 and then save . Go to authorization tab and then click on change authorization data then search for authrization object S_USER_GRP through cntrl- f.In this object In the acitivity assign only 03,05 activities. and then save and generate the role. and assign only this role to user.

User will be able to unlock or lock the user.

Regards,

Rohit

[Former Member · Accepted solution]

hi rohit,

thanks for the reply,

but i am still able to change the password.

even that should not be there.

i had tried by inactivating the other authorizations . but still it is not working.

one last question.

how can i know which authorization works for which permissions.

points given

thank you

[Former Member · Accepted solution]

how can i know which authorization works for which permissions.

Every authorization depends upon the Particular authorization Object and the values inside that object which we can change or modify.

just try to inactive all other authorization object except the one which i told u earlier it wud be work.I cn't tell you more then this bcz i dnt have access of any SAP server right now.

Regards,

Rohit

Edited by: Rohit Goswami on Jan 24, 2008 12:06 PM

[Former Member · Accepted solution]

thank you for the time and concern

[Former Member]

Hi,

you can achive that using your own zreport

write a report which accept the user id which need to unlock

use table USR02 the field UFLAG determines if the user account is locked or unlocked. The value "64" indicates that the user account is locked. The value "0" that the user account is unlocked.

so write the query which update UFLAG in USR02

update USR02 set uflag = '0' where condition

or

update USR02 from wa (workarea ) where condition