Password reset based on UFLAG

[Sandra_Rossi]

Hi,

I need to create a new role, where selected employees can help colleagues in situations where they have been locked due to too many failed attempts.

This mean they must have access to un-lock the user and to reset password. The un-lock must only be valid for UFLAG=128.

Is this possible?

[Sandra_Rossi]

To know if it's possible, you should trace the authorizations used when someone unlocks a user. Please do it and revert back if you need further help.

[dortheb]

Thanks for the input. Unfortunately the trace doesn't mention anything about UFLAG. Only activity 5 = Lock

I want to achieve a solution where the dedicated user, can remove lock due to too many failed attempt but now the lock set by Admin.

Apparently this can be achieved if the Admin lock is set as Global lock in CUA, but that does not suit my need. Global lock in CUA will lock the user in all systems. As an example is that I use to have my external consultants locked in Production but not in Test and development.

Any idea on how to achieve the functionality is highly appreciated.