topic Re: Restrict user type change in SU01 T-code in Application Development and Automation Discussions

Restrict user type change in SU01 T-code

former_member318336 — Thu, 09 Jun 2016 11:54:33 GMT

Hi All,

How to restrict user type change from the users who have access to SU01 T-code. We need to restrict only for User type change, Is there any Authorization object related to user type, where in we can restrict User type change.

Thanks in advance

Narendra varma

Re: Restrict user type change in SU01 T-code

Bernhard_SAP — Thu, 09 Jun 2016 11:59:48 GMT

no.

b.rgds, Bernhard

Re: Restrict user type change in SU01 T-code

Colleen — Thu, 09 Jun 2016 13:18:31 GMT

why not put the users into a specific group instead?

Re: Restrict user type change in SU01 T-code

Private_Member_25738 — Thu, 09 Jun 2016 14:39:33 GMT

Hi Varma,

Im not sure if it is possible but:

Maybe you can add in a user-exit/enhacement of the program related of SU01 a validation (autohirty-check) that check an authority object.

If the user has the autohirty object, allow to update User Type.
If the user dont has the authorization object, dont allow update the User Type.

I hope that you can solve your requirement asap.

Best regards.

Re: Restrict user type change in SU01 T-code

Former Member — Mon, 13 Jun 2016 13:03:56 GMT

Hello Narendra,

It will be good create a custom transaction (ex: ZSU01). So please ask ABAPer to restrict the user type modification at program level in custom transaction. and remove the standard SU01 transaction from all the roles and assign custom transaction for those you want to restrict.

Satish Chelluboina

Re: Restrict user type change in SU01 T-code

Former Member — Tue, 14 Jun 2016 09:49:47 GMT

Along similar lines a transaction variant could work.

More importantly, if you cannot trust users not to change user types then there is no way that they should be allowed to have SU01. A simpler solution would be to tell them not to do it and review change reports. If you detect an anomaly then discipline/remove from your account. Behaviours will soon change.

Re: Restrict user type change in SU01 T-code

former_member318336 — Mon, 04 Jul 2016 09:57:52 GMT

Hi Satish,

Thanks for your suggestion it worked as ABAP team created ZSU01 T-code and at programe level they disabled User type change screen and hence no one can change user type with ZSU01 T-code. we have restricted SU01 T-code for single user who will do the user type change when it's required.

Re: Restrict user type change in SU01 T-code

Former Member — Tue, 05 Jul 2016 07:23:17 GMT

Hello Narendra,

Could you please copy and paste the program level change here, so it will be helpful to other people.

Regards

Satish Chelluboina