As a security administrator in SAP, you’ll often need to lock user accounts for employees that have left the organization or no longer need access. The transaction code (t-code) you’ll use for this is SU01. Follow these steps.

  1. Login to SAP

  2. Goto SU01 t-code to enter User Maintenance: Initial Screen

  3. Enter the User name of the account you wish to lock. If you do not know the user account, use the search bubble to the right of the User textbox to search for the account based on name and other data.

  4. Press the Enter key. This should fill out the Alias field if the account is found.

  5. Click on the Lock/Unlock icon or press Ctrl-F5

  6. A new window will appear stating that the account is not locked

  7. Press the Lock icon at the bottom or press F6

  8. The SAP user account will be locked and you will return to SU01 with a message stating the account was locked in the status bar.

This will lock an SAP user account and the  user will no longer have access to the system. It will also remove the fee for a license for this user.