Question:
Create a new role with just S_TCODE and S_USER_AGR with actvt 05 and relevant user group. Will only give access to reset passwords and lock/unlock users
Answer:
Hi
i spoke to soon !!!
There is no activity "5"
Any other ideas?
Regards,
roos
_________________
Suggestion - Can authors please mark posts as ‘FIXED’/'RESOLVED' using edit button in original post when happy.
Appreciate Courtesy.
Answer:
Take a look at object S_USER_GRP.
Create a role and assign SU01. Deactivate all objects except S_USER_GRP (and S_TCODE of course). Assign activity 05 with all the user groups that you would like this role to have access. This will allow the assigned user(s) to lock/unlock IDs as well as regenerate passwords.
I was unable to construct a role that would grant password reset functionality only.
Hope this helps.
Answer:
Doh! Sorry about that. I should of course have been s_user_grp...