You've identified the only way to do it.

Create a script and use the BESUserAdminClient to enable/disable it if it is required.

__________________
http://blog.port3101.org/hdawg/

The views expressed by me on Port3101 and its affiliated sites are my own and do not necessarily reflect the views of my employer.