Central maintenance of info with CUA

Question

Dear all,
We are planning to implement CUA in our landscape. I guess, we can maintain initial passwords and lock status of users centrally with CUA.
Could we also maintain centrally the definiton of authorization profiles and completely definiton of user roles? and  the information of "which user is allowed to logon to what client" with CUA?
Which of the above informations can be maintained centrally using CUA?
Your help will be appreciated. Thanks in advance.

Answer 1

Hi
I guess, we can maintain initial passwords and lock status of users centrally with CUA - correct
Could we also maintain centrally the definiton of authorization profiles and completely definiton of user roles - you can centrally maintain the allocation of roles and profiles.
and the information of "which user is allowed to logon to what client" with CUA - Yes.  You maintain user to role mapping centrally and that also means you can control the systems and clients which they log into
You can also centrally distribute Parameter ID's (though that is not without it's "features" - nothing that can't be easily fixed), User Data, Printers, User Groups (same "features as PID's"). 
CUA does a job which is quite narrow, you may want to look at Netweaver IdM which can do some of what CUA does but is a proper IdM tool.  Could be overkill for what you want but could also be the basis of a strategic solution for managing SAP accounts.  Both have their place.