Question:
Can anyone advise me how to prevent administrators responsible for creating user IDs through SU01 from creating a dialog user type account.
We only want them to create communication user accounts but there appears to be no obvious way to ensure that this happens. Is there an authorisation object that we can add to their profile that will prevent this
thanks
Answer:
Seems like your problem is a functional problem, so solve it there? I do nit know of any standard way to restrict this in authorisations
Answer:
There is no control over what type of users you can create... You can have a manual review in place, but that's about it...
Answer:
Is there any authorisation object linked to the control of what you can do in su01?
I only want them to have the option of creating communication user.
Answer:
If you look in TRX SU24 and list the objects for SU01, you will see that there is no control restriction possible on UserType.
So if you really want it you will have to create custom object and find a userexit to assign it to the ABAP.
Still i wonder WHY you want this, what is the functional requirement to have seperate administrators for System users only?