If it often required by auditors for accounts to be disabled that have not logged into any system in a given amount of time. SAP provides a tool to list various user information, including the last time a user logged in. The transaction code is SUIM. You’ll need the proper role in your profile before you can access it but if you already have access, here is how to list users that have not logged in for 180 days in SAP.

List Users in SAP by Last Logon Date

  1. Login to SAP

  2. Execute SUIM

  3. Click the drop-down beside User

  4. Click the check-mark beside By Logon Date and Password Change

  5. Enter 180 (or whatever value you need) in No. days since last logon

  6. Optional: You may want to uncheck Locked Users – locked users will pollute your results since the intention is to list valid users that have not logged in.

  7. Optional: Set any other values such as User Group (to limit the results to a certain division)

  8. Execute

You will be presented with a list of users that have not logged in for 180 days. You can use ctrl-y to select and copy the SAP user accounts into your clipboard. Once you have them in your clipboard, you can use SU10 (User Mass Maintenance) to lock all of the accounts.