Which privileges to give to unlock any type of sap hana user?
As Sap Hana System administrator, you are heavily solicited to all sort operations. You would like to dispatch specific user administration tasks to someone else. You want the new user profile to be able to manage any users. The new profile or new group can be assigned to a team which then can take all requests in hand. Scope of actions will be a predefined perimeter such as creating new users, re-activating old users, changing password. You might also want to extend actions to all type of user logging issues. You will find in this page a SQL script which will create this new user profile with all the necessary privileges for the job.
Privileges to deal with common users issues are:
USER ADMIN : To unlock user or update password
INIFILE ADMIN :To overcome password policy restriction when you want to reset the old password.
Important note: SYSTEM user can be locked the same ways as a standard user. The procedure to unlock it is also the same as long as you have a user with the privilege to do it. Do not wait, create a profile UNLOCK_USER with USER ADMIN privilege an assign it to a technical user.