topic Re: role assignment in Application Development and Automation Discussions https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684062#M620665 <HTML><HEAD></HEAD><BODY><P>Ben and JC are right, you need to restrict the object S_USER_GRP. Look at the Roles the users have and use SUIM to analyze which Roles are giving them Object S_USER_GRP, then you will know which Roles to change.</P><P></P><P>Regards</P><P>Ashley</P></BODY></HTML> Thu, 09 Aug 2007 17:16:04 GMT Former Member 2007-08-09T17:16:04Z role assignment https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684059#M620662 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>How can I prevent some users from assigning roles via SU01?</P><P></P><P>thanks,</P><P></P><P>- ferudun</P></BODY></HTML> Thu, 09 Aug 2007 14:02:28 GMT https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684059#M620662 Former Member 2007-08-09T14:02:28Z Re: role assignment https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684060#M620663 <HTML><HEAD></HEAD><BODY><P>Don't give them access to object S_USER_GRP.</P><P></P><P>Cheers,</P><P></P><P>Ben</P></BODY></HTML> Thu, 09 Aug 2007 14:04:13 GMT https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684060#M620663 Former Member 2007-08-09T14:04:13Z Re: role assignment https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684061#M620664 <HTML><HEAD></HEAD><BODY><P>Actually if you don't give them S_USER_GRP then they will not be able to use SU01 at all. Remove activity 22 from that auth object and they will be able to everything else except assign roles.</P></BODY></HTML> Thu, 09 Aug 2007 14:08:26 GMT https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684061#M620664 Former Member 2007-08-09T14:08:26Z Re: role assignment https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684062#M620665 <HTML><HEAD></HEAD><BODY><P>Ben and JC are right, you need to restrict the object S_USER_GRP. Look at the Roles the users have and use SUIM to analyze which Roles are giving them Object S_USER_GRP, then you will know which Roles to change.</P><P></P><P>Regards</P><P>Ashley</P></BODY></HTML> Thu, 09 Aug 2007 17:16:04 GMT https://community.sap.com/t5/application-development-and-automation-discussions/role-assignment/m-p/2684062#M620665 Former Member 2007-08-09T17:16:04Z