l make authorization in the su01 .

I want to make authorization in the su01 . user will make luck\unluck password but will not reset password . s_users_grp authorization object 05 can luck\unluck at the same time reset password . we can make only password luck\unluck .

thanks all