SAP Knowledge Base Article - Preview

3402168 - Authorizations Based on Policies: How to allow only to reset password


  • Authorizations Based on Policies have been enabled for IAS tenant as per documentation.
  • You would like to setup rules for Administration Console so assigned users will be able to ONLY perform reset passwords for the users.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."



  • SAP BTP, Cloud Foundry environment
  • Identity Provisioning


SAP Cloud Identity Services all versions


Authorization policy policies based Identity Authentication IAS reset password USE users.UPDATE_USERS RESTRICT user.attributes users.READ_USERS , KBA , BC-IAM-IDS , Identity Authentication Service , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.