Helpdesk Authorisation.

[Former Member]

Hi All,

My team decided to assign basic user admin activities like lock/unlock, change password and change validity dates of user account, creation of user to Help Desk.

I was trying to find any role/group which would give access to ONLY this activities on xMII NW UME but no luck.

I did not find any roles with these activites like we have on PI Java NW UME(user admin/security admin/...).

Can you guyz suggest me, is there any way I can give only above authorizations to helpdesk.

Thank you All.

[Bernhard_SAP]

Hi Anil,

pls create your own role for user administration for your helpdesk.

Resetting passwords and unlocking can be covered by authorizations (S_USER_GRP, ACTVT=05), but setting validities requires 02, which 'opens' the complete SU01.

So as ever.....if you want to limit access....:

Create a z-variant in SHD0 for SU01 releasing only the fields the helpdesk may update.

Assign a z-tcode. Allow your helpdesk only to use that z-tcode and not su01.

Thats it.

b.rgds, Bernhard

[Former Member]

>

> I was trying to find any role/group which would give access to ONLY this activities on xMII NW UME but no luck.
> I did not find any roles with these activites like we have on PI Java NW UME(user admin/security admin/...).

Bernard, i guess he is talking in some UME terms and not ABAP. "....like we have on PI Java NW UME..."

Regards,

Zaheer

[Bernhard_SAP]

...ok, lets see, what Anil adds.... thx anyway, Bernhard

[Former Member]

you got it correct Zaheer its on Java stack and not on ABAP side, I see roles on PI NW UME for user admin, but not at xMII UME.

And as we know we have no option on Java side to customize tcodes or roles.

Any thoughts?

Thank you.

[Former Member]

Hello All - Is there any way out, please share your ideas.

Thank You.

[Former Member]

Hi Anil,

You can create a custom role with UME actions for user management.

UME Action Name : UME.Manage_Users

Check out this documentation for further info on standard UME actions:

http://help.sap.com/saphelp_nw04s/helpdata/en/5f/670db7939b8e48999d65f8a05ad611/content.htm

PS : Where there's a Will, there's a way;-)

Regards,

Zaheer

[Former Member]

Zaheer...! It worked 'You Are The MAN'...I dont know how I missed this route...I am doing this on PI/XI...some times I become dumb......

I really appreciate your help and I will give full marks for your help.

Thanks Much!