Dear Customer,
SAP has an application named "Schedule Locks for Unused Business Users" on which you can schedule a job to automatically lock business users who haven't logged on for a certain number of days.
To get access to this app, you need SAP_BR_ADMINISTRATOR Business Role or SAP_CORE_BC_IAM_UM Business Catalog.
Once you have access to the app, follow steps below:
- Open the Schedule Locks for Unused Business Users app.
- Click Create.
- Enter a job name and click Step 2.
- Define the recurrence pattern of your job and click Step 3.
- Under Parameters, enter the required number of days since the last logon you want to use for the automatic lock. Please note that business users that were unlocked within the entered number of days range are not getting locked. This prevents manually unlocked business users from being locked by the job again.
- Add the business users you want to exclude.
Carry out the following optional steps if required:
Open the value help if you want to define further conditions.
Go to the Define Conditions tab. Here you can define single users or whole user areas you want to exclude from the selection. You can enter multiple users at once by using copy and paste, for example to transfer users from lists.
Please note that you can also restrict the list of users that should be processed by this job.
Select Lock User w/o Role Assignment to also lock all business users that are not assigned to a business role.
Select Skip User with Appl. Jobs to prevent the locking of business users with application jobs. By default, all business users with assigned application jobs are locked.
- Click Schedule.
For your reference, check SAP Help Portal | How to Lock Unused Business Users .
Kind regards.
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.