Controlling user Administration

Hi Experts,

I have a scenario, I want to know if I can do anything in the situation given below.

Let us assume there are two teams which have access to SU01 to lock/unlock user accounts. The first one lets say L1 is a general network team which does all password resets. The second one lets say L2 is a SAP Administrators team.

Is there a way by which I could administer somehow that if a user is locked by a administrator in L2 a person in L1 support cant unlock it?

Best Wishes,

CP