CUA and user parameters

I thought CUA updated all user characteristics, but I just noticed that User Parameters are not updating on my system. Is this configurable? Is it supposed to work this way? Does anyone know of documentation that explains this. Thank you.

Hi Leo,
Generally User Parameters are set to PROPOSAL (recommended by SAP) which means the users should be able to mainatin their parameters in different systems individually.
PFB the document stating the same in SAP HELP.
http://help.sap.com/saphelp_nw04s/helpdata/en/6a/b1b13bb3acd607e10000000a11402f/content.htm
Award points for helpful answers.
Rgds,
Sri

Similar Messages

How to create automatically users&roles in CUA and in chlid systems?

Hi,
i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
are there any standard BAPI or Funcion modules that can do this job?
is the role created automatically in CUA can be seen automaticall in the portal child system?
any help?
Thanks&Best regards

You can use one of the various ways Java EE provides you, e.g. container managed authentication.
It's also all in the Java EE tutorial: [http://java.sun.com/javaee/5/docs/tutorial/doc/bncas.html].
You can configure it in the application server as well: [http://tomcat.apache.org/tomcat-6.0-doc/realm-howto.html].
Here is an example how to use it in JSF: [http://ocpsoft.com/java/acegi-spring-security-jsf-login-page/].

How to create automatically users&roles in CUA and child systems

Hi,
i have a CUA on a 2 chlid R/3 systems (test and training) and 2 portal systems (test and training).
i need to create a web application to create automatically users test and users training in CUA and see them in the R/3 chlid systems and at the same time to create autmatically a roles in CUA and R/3 chlid systems for those users (we sppose that the role is already stored in a table).
are there any standard BAPI or Funcion modules that can do this job?
is the role created automatically in CUA can be seen automaticall in the portal child system?
any help?
Thanks&Best regards

Thank you all. I got the solution.
Regards
Rajesh

What are user parameters? and how can i add user parameter

Hi Experts,
what are user parameters? and how can i add user parameter and how can i add a user parameter
HR_DISP_INFTY_NUM with value X?

user parameters are used give reference grps and counntry grouping use SU3 tcode as amite said

User parameters EFB and EVO

Hi,
I have 2 questions here.
1. What is the significance of user parameters of EFB and EVO in user profile-own data.
How and what does it really controlls? For that matter how do we find out what entries have to be maintained in the user profile-own data-parameters.
2.When I enter transaction MIRO to enter an invoice, I always see the exchange rate field as greyed out on the details tab.
How can I enter a different exchange rate ?
Please suggest
Regards,
manOO

Use t Code OMFI to create the values for parameter EVO
see SAP help pasted below
======================================================
Default values (purchasing operations)
    Key controlling the user settings for certain purchasing functions.
Use
    The entry made here has the effect of
    o pre-setting various indicators in purchasing,
    o controlling the display of overview screens, and
    o influencing the processing of reference documents.
Procedure
    Enter the desired key in the user master record as parameter, under the
    parameter ID EVO.
    If the user master record does not contain this parameter, no default
    values are set and the processing of purchasing documents is controlled
    on the basis of various basic settings.

Pass User Parameters between Forms and Reports...?

Hi,
I have been trying to pass user parameters from forms to reports using
RUN_REPORT_OBJECT. I am able to run the report from the form, but still don't know how to pass user_parameters. Does anyone know how to do this?
Thanks,
AB

You can use SET_REPORT_OBJECT_PROPERTY with the "REPORT_OTHER" parameter
The following example passes 3 parameters to the report:
SET_REPORT_OBJECT_PROPERTY(pt_report_object_id, REPORT_OTHER, 'paramform=no p_param_1='||pc_param_1||' p_param_2='||pc_param_2);

Inconsistency between get-childitem -include and -exclude parameters

Hi,
Powershell 2.0
Does anyone else consider this a minor design bug in the Get-ChildItem command?
# create dummy files
"a","b","c" | % {$null | out-file "c:\temp\$_.txt"}
# this "fails", returns nothing
get-childitem c:\temp -include a*,b*
# this "works", returns desired files
get-childitem c:\temp\* -include a*,b*
# this "works", excludes undesired files
get-childitem c:\temp -exclude a*,b*
# this "fails", excludes undesired files BUT RECURSES sub-directories
get-childitem c:\temp\* -exclude a*,b*
I'm writing a wrapper script around the GCI cmdlet, but the inconsistency between the two parameters is problematic. My end user will surely just type a path for the path parameter, then wonder why -include returned nothing. I can't unconditionally
add an asterisk to the path parameter, since that messes up the exclude output.
I'm just wondering why Microsoft didn't make the parameter interaction consistent???
# includes desired files in the specified path
get-childitem -path c:\temp -include a*,b*
# excludes undesired files in the specified path
get-childitem -path c:\temp -exclude a*,b*
# combine both options
get-childitem -path c:\temp -include a*,b* -exclude *.log,*.tmp
# same as above, the asterisk doesn't matter
get-childitem -path c:\temp\* -include a*,b*
get-childitem -path c:\temp\* -exclude a*,b*
get-childitem -path c:\temp\* -include a*,b* -exclude *.log,*.tmp
# same as above, but explicitly recurse if that's what you want
get-childitem -path c:\temp\* -include a*,b* -recurse
get-childitem -path c:\temp\* -exclude a*,b* -recurse
get-childitem -path c:\temp\* -include a*,b* -exclude *.log,*tmp -recurse
If I execute the "naked" get-childitem command, the asterisk doesn't matter...
# same results
get-childitem c:\temp
get-chileitem c:\temp\*
If this isn't considered a bug, can you explain why the inconsistency between the two parameters when combined with the -path parameter?
Thanks,
Scott

The Get-ChildItem cmdlet syntax is horrific for advanced use. It's not a bug in the classic sense, so you shouldn't call it that. However, feel free to call it awful, ugly, disastrous, or any other deprecatory adjective you like - it really is
nasty.
Get-ChildItem's unusual behavior is rooted in one of the more 'intense' dialogues between developers and users in the beta period. Here's how I recall it working out; some details are a bit fuzzy for me at this point.
Get-ChildItem's original design was as a tool for enumerating items in a namespace -
similar to but not equivalent to dir and
ls. The syntax and usage was going to conform to standard PowerShell (Monad at the time) guidelines.
In a nutshell, what this means is that the Path parameter would have truly just meant Path - it would not have been usable as a combination path specification and result filter, which it is now. In other words
(1) dir c:\temp
means you wanted to return children of the container c:\temp
(2) dir c:\temp\*
means you wanted to return children of all containers inside
c:\temp. With (2), you would never get c:\tmp\a.txt returned, since a.txt is not a container.
There are reasons that this was a good idea. The parameter names and filtering behavior was consistent with the evolving PowerShell design standards, and best of all the tool would be straightforward to stub in for use by namespace
providers consistently.
However, this produced a lot of heated discussion. A rational, orthogonal tool would not allow the convenience we get with the dir command for doing things like this:
(3) dir c:\tmp\a*.txt
Possibly more important was the "crash" factor. It's so instinctive for admins to do things like (3) that our fingers do the typing when we list directories, and the instant failure or worse, weird, dissonant output we would get with a more pure Path
parameter is exactly like slamming into a brick wall.
At this point, I get a little fuzzy about the details, but I believe the Get-ChildItem syntax was settled on as a compromise that wouldn't derail people expecting files when they do (3), but would still allow more complex use. I think that this
is done essentially by treating all files as though they are containers for themselves. This saves a lot of pain in basic use, but introduces other pain for advanced use.
This may shed some light on why the tool is a bit twisted, but it doesn't do a lot to help with your particular wrapping problem. You'll almost certainly need to do some more complicated things in attempting to wrap up Get-ChildItem. Can you describe some
details of what your intent is with the wrapper? What kind of searches by what kind of users, maybe? With those details, it's likely people can point out some specific approaches that can give more consistent results.

Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

Hello,
I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
1. Connected CUABOX to GRCBOX like a plug-in system.
2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
Any help in this regard is very helpful.
Thank you,
Pawan

Hi Alessandro,
I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
2. Approvals provided to assign the ECC role.
3. I see the following in GRFNMW_DBGMONITOR_WD.
           Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
               New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
               T-CUA_CHILD User does not exist in target system CUA
GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
Thank you for your help!
Pawan

How to set user parameters in transaction MD61 through a report?

Hi,
I want to set default values for 'Requirement Type' in user parameters of transaction MD61 through a report. Please help.
Thanks in Advance.

Create Variant using SHD0 and with Group and assign to particular user's
Here is the steps
Creating a Variant Group
1. Open transaction SHD0, enter the transaction code, and press enter.
2. Choose the Standard Variants tab page, and then the sub tab page Variant Groups, and enter a group name, such as GROUP_GEN
3. Choose Create. Enter a short text on the Maintain Variant Group window that appears and save the variant group.
Assigning Users
Once you have created the variant group and the relevant transaction variants with screen variants, you now need to assign users to the variant group as follows
1. Return to the Standard Variants tab page, Variant Groups sub tab page.
2. Enter the name of a user that you want to assign to this variant group, and choose Assign. A message that this user was successfully assigned to the variant group appears in the status bar. If you choose a where-used list for users, this user is displayed in the user list.
3. However, for the screen variants of the variant group that you created above to be displayed for the user, you first need to select Set Proposal. The user is assigned to the group and the associated transactions are started with the corresponding variants only once you choose the Set Proposal function.
You can use this procedure of user assignment for all other users that you want to add to the variant group
Hope this helps.
Thanks
S.N

Getting problem with running RWBLD60 with User parameters

Hi All,
I am trying to run a report using rwbld60 from command prompt which has input parameters
I tried like this but it didnt work out
rwbld60 module=reportname.rdf userid=scott/tiger@orcl destype=file desformat=pdf
desname=report_out.pdf parameterform=NO params=parms_1 traceopts=trace_prf tracemode=trace_replace
tracefile=trace.txt
Can any one please tell me how i can pass user parameters for rwbld60
Thanks,
Amar

actually, i do my FYP on bluetooth chatting...
and there will be more than two emulators running at the same time..
one of my frens said that if u want to run more than one emulator u just simply click on run button..
and it will appear on the screen..

Increase the SGA_MAX_SIZE and SGA_TARGET parameters

HI ,
I am using oracle 10g R2 and windows server 2003 .
My server is having 8 GB RAM .
I want to increase the SGA_MAX_SIZE and SGA_TARGET parameters .
I am using the below command , but getting the error
SQL> alter system set sga_max_size=2000M scope=spfile ;
alter system set sga_max_size=2000M scope=spfile
ERROR at line 1:
ORA-32001: write to SPFILE requested but no SPFILE specified at startup
Can someone please help ..

hi
connect as sys user and then try...
first make folder as backup and then copy the old SPFILEorcl to the same folder(backup)
now you can easily modify the files otherwise you will get error..
you will find here..
C:\ORACLE_HOME\database
SQL> alter system set sga_max_size=2000M scope=spfile ;
System altered.OR.
connect as sys user.
and do the following...
1).SQL>create pfile from spfile;
2).modify the pfile and decrease\increase the size of pools.
3).shutdown database.
4). Startup database using created pfile.
if it start ok then.
5.) Recreate the Spfile with the created Pfile.
SQL>create spfile from pfile;sarah

On Lexical variables: Are they always treated as user parameters???

Hi
Report Developer 10g, Winodws XP platform, local client
I have a dynamic where clause in my report query with a lexical variable &p_where which holds the where clause. This where clause is determined at runtime, depending on the user parameter value that was entered.
My problem is, the lexical variable &p_where is automatically added to the list of my user parameters and does show up in my parameter form, when the report is run. This will cause lot of confusion to the user, as it is not part of user input.
It is not a user parameter, but should be treated as a regular variable. How do I work around this?
Thanks
Suma

I understand. The lexical variable was automatically added to the user parameters list upon it having appeared in a query.
This is expected. The lexical variable must be defined. Since it is not a system parameter, Oracle*Reports added it to the user parameter list.
But if it is also showing up on your user parameter FORM (the form which solicits input from the user prior to running the report), it can simply be deleted from that form without affecting its use in the query.
Regards,
Steve

UGR and MOL parameters

Hi,
What is the purpose of setting the User Parameters UGR (User Group) and MOL (Personnel Country Groupings)? What's their importance?
Help appreciated.

User Group
Have a look at transaction - SUGR.Purpose for example is to give certain system admin rights to unlock / change password only to a given user group. You assign user group to an user id via SU01.
The main reason of user groups is to categorize user into a common denominator.
Two types of User Groups.
1.general user groups
2.authorization user group
The general user group can be used in conjunction with SUIM and SU10, to select all the users in a specific group. User can only be member of one authorization user group but several general user group.
The authorization user group is used in conjunction with S_USER_GROUP authorization object. It allows to create security management authorization by user group. e.g. you can have a local security administrator only able to manage users in his groups, Help-Desk to reset password for all users except users in group SUPER, etc.
One of the Primary uses of user groups is to sort users into logical groups.
This allows users to be categorised in a method that is not dependent on roles/AG's/Responsibilities/Profiles etc.
User Groups also allow segregation of user maintenance, this is especially useful in a large organisation as you can control who your user admin team can maintain - an example would be giving a team leader the authority to change passwords for users in their team.
The most important factor identified is that the lack of user groups is an indication that there may be problems with the user build process. This is very "fuzzy" but is a bit of a warning flag.
Personnel Country Grouping
MOL defines you default country.This is most imp concept for an employee.say,When Hiring,You have to do set this Mol in the user profile.When you set the default country,all transactions and default settings applicable to that country will be available for you.
You do the settings in cutomizing table as per the country grouping. Eg.T500P( Pers.area) ,T510( Pay Scale Groups)
Regards,
Manoj.

Calling report using Mapping File with user parameters

Please provide an example of Key mapping file that provides user parameters to an Oracle Reports report, where paramform=no.
I call an Oracle Reports report via APEX, and can't get the URL to work. If I don't use the mapping file, the call works. But I can't seem to get it to work using the mapping file to hide all the other params like userid etc.

Please provide an example of Key mapping file that provides user parameters to an Oracle Reports report, where paramform=no.
I call an Oracle Reports report via APEX, and can't get the URL to work. If I don't use the mapping file, the call works. But I can't seem to get it to work using the mapping file to hide all the other params like userid etc.

CUA- Deleting user IDs from Child systems

Is there a possibility of configuring CUA in such a way that user IDs can be created and access can be updated from CUA but deleting user IDs should be taking place only in the child system (Not in all the child systems)?

Generally good advice to keep the uniqueness of UIDs over time, also after Elvis has left the building
What you could consider is a CUA RFC user which is not authorized to delete UID's and schedule a purge job for those IDOCs which deleted only them.
However these sorts of "workaround" solutions are not the best advise, to be honest. What happens it someone temporarily assigns SAP_ALL because there is a big problem and authorizations should be excluded as the cause to get it working again?
Also, every time a new child system is added to the CUA you will be flooded.
My advice: Rather change your procedure (as discribed by Jurgen).
What would be interesting to test is whether you are authorized to move a user (change the authorization relevevant group which they currently have) to a group which the CUA user is no long able to subsequently administrate? But theen you will still be hunting down IDOCs from time to time, most likely.
If your shop is big enough to have these systems you have described, then you might want to consider an IdM system to replace your CUA at some time.
If you wish, I will move this thread to the IdM forum.
Cheers,
Julius
ps: Please do not cross-post.

CUA and user parameters

Similar Messages

Maybe you are looking for