need to create a new role which modify record on user table

[Kunal33]

Create a new Role to enable users that are members of a (new) group to do the following:

Add new entries to sys_user
- excluding User IDs that contain @abc.com

Modify entries to sys_user (including making the record inactive)
- excluding User IDs that contain @abc.com and records that have a non-empty Object GUID

Add new entries to sys_user_group
- ideally enforcing that the type is Customer_Notifications

Add / modify /remove entries in sys_user_grmember for groups of type is Customer_Notifications

[umaaggarwal]

Hi,

Create a new role and add it to OOB ACLs which are created for sys_user

[Kunal33]

We need access on the mentioned conditions. if user having mail id abc.com then they cant edit that record. other than abc.com they can edit user table record 

[Appli]

Hi, you can consider creating a new role and Business Rules that validates conditions above.

[Kunal33]

What BR you are considering here?