User Lock Status In Sap

Posted on by admin

Skip to end of metadataGo to start of metadata

Purpose

MAIN SAP USERS TABLE; USR01/3: User master / address data: USR02: Logon data (including Lock status) USR04/5: Authorizations / Parameter ID: USR10: Authorization profiles: UST12: Authorizations: USR12: Authorization values: USR21: Assign user address key ADRP USR41: User logon data (sm04) UST04: SAP User Profile Table: VADDRUSR: Selection. You are configuring System Monitoring and want to use metric 'User lock status', however is not reporting correct value. Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental. Filter by Status. The table below shows the different tools which can be used to manage and administrate SAP CC users. User management: User lock. Note that this is not available for other SAP Applications. Advantage with this method is that the application sets a flag for already locked users. You can now select the users who should not be locked (Euro Administrator) and save the transaction. Click on lock user and all the users are now locked.

An approver user can be locked and thereby the approval can not be carried out.

Overview

This page provides information about user lock and how it is affecting the workflow.

This page is also intended to describe the user lock check method for the SRM Workflow Analysis Tool, which was created to check whether the approver user is locked or not.

User Lock

System

In SRM systems a user can be locked. If it is an approver user, the decisions can not be carried out neither on the portal or through the offline approval email.

A user can be locked manually in the SU01 transaction, or if the password was entered wrongly multiple times or it has expired, the user is going to be locked automatically. If the username is locked, it is not possible to access the SRM Portal environment with the user. By removing the lock with an administrator user in the SAPGUI, the user can be used again. For more information please visit the User Maintenance page.

User lock check in the tool

Lock

The SRM Workflow Analysis Tool delivers a check which is designed to analyse if the users belonging to a document are locked or not.

The check method will check the following users of the workflow process:

  • Requester and/or creator of the document
  • All approvers of the workflow instance (previous, current and forecasted users)
Sap system status

After selecting all the agents belonging to the document, it is checked if the user lock flag is set or not. If it is, the program returns the following error message:

NOTE: If this error is appearing, the Tool will write out only the first found username at the section 'Extended Information' which is locked. If the problem is solved for this user then the tool will write out the next username which is locked in the next running.

If this message is raised, check the approver users and remove the lock from the locked agent in transaction SU01.

The users can be also found in the workflow log. The following KBA will help to use the workflow log:

1483828 - How to display the workflow log for an SRM document.

It is necessary to check if the locked approver sent back any approval email. If an approval was carried out through email while the user was locked, the decision has failed. After the the user lock is cancelled, the decision must be carried out on the portal.

Related Documents

Related SAP Notes/KBAs

1483828 - How to display the workflow log for an SRM document.

How to lock or unlock users in SAP ?

This article answers the following queries :

What are the business requirements to lock or unlock users in SAP system?

  • How to lock or unlock users in SAP ?
  • How to change user Password in SAP?

Sap User Lock Table

Business requirements to lock or unlock/reset the password in SAP
1) Sometimes, users forgot the userid or password and try to login with wrong credentials. After 3 or more unsuccessful attempts, user id will get locked with the message to user “user id locked due to x unsuccessful attempts.Contact system administrator”.
User complains that his user id got locked and he is not able to login. So, administrator has to unlock his user id and reset the password if required. (Please follow below procedure to do the same.)

User Lock Status In Sap Portal

2) When Basis team is carrying out critical activities like client refresh, support pack upgrade etc, it is recommended to lock all the users (donot lock some system users which are required by administrator) to restrict them to access the system till the activity is complete. Once the activity is complete, administrator can unlock all the earlier locked users.
How to lock or unlock users in SAP ?
Goto transaction SU01
Click on Lock icon. It displays below message and informs the current state of the user (i.e locked or unlocked currently).
If you find message like “not locked” and you would like to lock, then click on lock button in the above screen again.
On the status bar, you can see message like “User SAMPLE123 is locked”
Provide the user id details and Click on lock button. Currently if user id is locked, it displays following message.

Sap User Lock Status 192

Then on the status bar, it displays message like “User SAMPLE123 unlocked, if this is permitted in this system”

Sap User Status Code Definitions

Click on password button to change the password :
Provide new password twice to set the password. Once user logs in to the system providing initial password, system prompts to enter new password for security reasons