role assignment

[Former Member]

Hi,

How can I prevent some users from assigning roles via SU01?

thanks,

- ferudun

[Former Member]

Don't give them access to object S_USER_GRP.

Cheers,

Ben

[Former Member]

Actually if you don't give them S_USER_GRP then they will not be able to use SU01 at all. Remove activity 22 from that auth object and they will be able to everything else except assign roles.

[Former Member]

Ben and JC are right, you need to restrict the object S_USER_GRP. Look at the Roles the users have and use SUIM to analyze which Roles are giving them Object S_USER_GRP, then you will know which Roles to change.

Regards

Ashley