CUA client doesn't know any profile/role anymore after adding child system

Hi,
I did set up a CUA client on our Solman system. The client is client 500 which has been copied over from 000 via the SAP_CUST profile.
In this client 500 I did create some users with the SAP_ALL profile, so no problem here.
After adding a child system to the CUA, it seems that if I want to create a new user in the CUA client 500 it doesn't know any role/profile anymore which is standard available in this client.
In PFCG I can find a lot of standard roles, but when adding one via SU01 I do get the error that it doesn't exist. The same goes for the profile SAP_ALL.
Just to be clear, adding profiles or roles from child systems is not a problem, just adding roles or profiles for the CUA client itself doesn't seems to work anymore.
I had this problem on a 7.0 solman system and now also on a 7.01.
Did anyone had the same problem?
Thanks,
Gregory

Hello Georges,
I have exactly the same issue.
I have created a new CUA. I have copie 001 client to 333 client, using SAP_ALL profile.
Now, from CUA client (333), I cannot add any roles or profiles to my user.
I have created an RFC D1CCLNT333, but it does not resolved the problem.
Did you do anything else to fix your issue ?
Thanks
Best regards
CP2009

Similar Messages

I tried to launch iCloud on iMac. I Changed my e-mail address recently, and iMac doesn't seem to know it. Even worse, it doesn't know any password I've used with Apple ID. Can anyone help me?

I tried to launch iCloud on iMac. I Changed my e-mail address recently, and iMac doesn't seem to know it. Even worse, it doesn't know any password I've used with Apple ID. Can anyone help me?

No, i don't. if i did i would have tried it. do you have to sign up an appled ID for iCloud? If the answer is yes then they should mention that in the set-up instructions.

My 2011 iMac doesn't work with display sleep anymore after installing a clean copy of OSX 10.8 Mountain Lion

My 2011 iMac doesn't work with display sleep anymore after installing a clean copy of OSX 10.8 Mountain Lion.
I have it on upper left corner but it take the whole computer to sleep, no way to turn just the display.

Hi, thaks for response, meant to post as a discussion (not question), wanted to save others time if they get the same problem

Since I upgraded to Lion, my RSA securid token and Cisco VPN client doesn't work any longer. Anyone have suggestions on how to fix that?

Since upgrading to Lion, I can no longer use VPN because my RSA securid token and CIsco VPN Client won't load. Any suggestioins out there?

.

Outlook 2013 client doesn't sync new mails but syncs after restarting outlook

Hi Experts,
Here are the HW & SW.
DC1, ADC Windows 2012
Exchange 2013 MBX1 & MBX2 on Win2012r2
Exchange 2013 CAS1 & CAS2 on Win2012r2
Network : EXCHANGE ON LAN and Clients using MPLS link to connect Exchange CAS (10 mbps) 100 users.
Strange issue, only for few users like 4-5 outlook, when user opens outlook gets authenticated and outlook remain cached mode. But it doesn't gets the new mails it still shows online. But the same users they get the mails on their mobile device using Active
Sync promptly without any delay and new mails shows on the OWA too. When the user restarts his outlook starts receiving new emails.
Checked the following :
No Application error on event logs
All users are homed on same database on same server.
No throttling policy been configured and enabled except default one.
Webmail works fine and well
Restarting outlook syncs well
No network changes
Both internal and external mails are affected for the few users who has issues
Regards, Ganesh, MCTS, MCP, ITILV2 This posting is provided with no warranties and confers no rights. Please remember to click Mark as Answer and Vote as Helpful on posts that help you. This can be beneficial to other community members reading the thread.

Hi,
Since there is no sync synchronization issue on mobile device and OWA, it is highly possible of outlook client issue.
Make sure outlook client is the latest version.
Please disable the security AVG/Firewall, especially the mail scanner module to check whether this issue persists.
Run Outlook in Safe Mode to determine if it's 3rd-party add-ins related:
Press Win + R and type “outlook.exe /safe” in the blank box, then press Enter.
Please run scanost.exe to fix the .pst file to test the result:
http://support.microsoft.com/kb/272227#appliesto
Please try to recreate profile to check this issue.
If this issue persists, please let me know.
Best Regards.

Itunes doesn't save any of my songs after I exit it!

My ipod is fine, all my playlist and songs are still there but on my laptop, everything is gone. When I added all my songs again and sync my ipod to it, all the songs show up but the info on my ipod doesn't show up. And as soon as I finish adding my songs again, i would exit it, and open itunes again. But nothing shows up just like the first time. It just recently happened and i don't know what's wrong. >_<
I also can't find my iTunes Music Library.xml anywhere so that means i can't recreate my itunes library!

Go to the iPhone discussion and search for calendar synching. I've been there and solved my iCal problems. Look for info on deleting a "cache" folder as well, I know I removed one but can't remember which one.
I think you can only sync personal calendars.
Also try creating another user on your mac, log-out as yourself and log-in as the new and then try opening iTunes to see if it recognizes your calendars.

CUA - Adding Child systems after implementation

Hello all, just have a quick question:
We have about 10 systems all with 8-10 clients in each of them and are in desperate need of the CUA. I wanted to just do a couple of systems at first so that everyone could get used to the CUA and then add the rest of the systems at a later time. Is there anything wrong with this? Or does the whole distribution model have to be setup BEFORE setting up the CUA?
Thanks

i know your question is answered but i wanted to add my comment anyway - i was not around the last few days ... so: endure it now !
there's no restriction as to when to add other clients/systems to your distribution model. you can go step by step here if you like.
i have an adivce anyway: normally i do it systemwise (not client-wise) because in that way i find it more transparent what ports (WE20/21) and rfc-destinations (SM59) i have created (because i maintain them with the same names/numbers in all the systems in one landscape - just in case there is a system-copy to a new sandbox or somesuch ... then my settings will already be there).
but that's just a personel preference.

Why doesn't my Canon MP560 work anymore after upgrading to 10.9.4?

I can no longer print using my Canon MP560 after upgrading to 10.9.4. Is there any fix?

First, go to Canon's tech support page and see if you have the most current driver for your printer. Second, open Printers & Scanners preferences. Select the printer from the list, then click on the Delete [-] button. CTRL- or RIGHT-click in the list area and select Reset Printing System from the context menu. Click on the Add [+] button and re-add your printer. See if that fixes things.

Can't open any iWork file anymore after upgrade !

Hello, I just upgraded my Pages, Keynote and Numbers from iWork '08 to the new Mavericks versions. I can't open any file anymore! I got the message that these files are to old and I have to save them first with iWork '09 applications which I do't have! Help please.

Finally got my hands on iWork 09 and converted all my files individually!
The iWork guys can still learn something from Microsoft with respect to backwards compatibility!

My iPod Touch 4g doesn't get recognized with iTunes anymore after updating it to IOS 6 on a diffrent computer but it still charges

Help me, how can I fix this?

AFAIK, downloading directly to the device is typically smaller as it only gets the stuff it needs for your specific device as oposed to the full download when downloading from iTunes.
Correct, no Siri for iTouch 4th gen.
The Maps app is there, but I moved it around, so I'm not sure where it is on your device, but its in there.
Safari is updated in iOS 6, your other apps should update in the App Store when their developers release updates, I've launched only a few apps so far, no problems with compatibility!

ABAP prog with Call Transaction to SU01 will not add roles in a CUA client

I am modifying a current ABAP program that works in a non-CUA client to hopefully execute in a CUA client. This program performs a Call Transaction to tcode SU01 and adds roles to an existing user. I used tcode SHDB to identify the new BDC commands needed for CUA when using tcode SU01. When executing the program in the CUA client it does not save the roles to the user. There is no error message or abnormal termination.
When I assign the role to the same user that's referenced in my program directly with tcode SU01 it works fine. Its just when I run the ABAP program the role assigment is not retained. I opened a Customer Message with SAP and they referenced OSS Note 93802 and said this was a consulting question. My program is not abending as referenced in Note 93802, it just does not add the role.
Has anyone been able to get this to work in a CUA client?

Hi,
it should be fairly simple to create a new ABAP using the BAPI's related to business object USER. Call BAPI_USER_CREATE1 to create the users, and BAPI_USER_LOCACTGROUPS_ASSIGN to assign roles in a CUA environment. It should go something like this:
[read file with user data into internal table wt_users]
[read file with role assignments into internal table wt_roles]
Loop at wt_users into wa_user.
[create LOGINDATA, ADDRESS and other structures for user in BAPI below, based on the data in wa_user]
call 'BAPI_USER_CREATE1'
exporting
    username                      = [the user name from input file]
NAME_IN                       =
    logondata                     = [structure for logondata]
    password                      = [initial password value]
DEFAULTS                      =
    address                       = [address structure created above]
    [etc.]
if sy-subrc eq 0.
Assign roles for the user
clear wt_activitygroups. refresh wt_activitygroups.
loop at wt_roles into wa_roles where username = wa_user-username.
    [build an internal table, wt_activitygroups, for system/role assignments for the user]
endloop.
    call BAPI_USER_LOCACTGROUPS_ASSIGN
      exporting
        username                      = [the users name]
      tables
        activitygroups           = wt_activitygroups
        return                       = wt_return.
Endloop.
Ideally, you would have two input files: one with the user data (one record per user), and another one containing the data for the BAPI_USER_LOCACTGROUPS_ASSIGN (on the format USERNAME, SYSTEM, ROLENAME); one entry per line. You'd loop at the first table, containing the user data, then create the user, then loop at all entries in the system/role assignment file for the same username, building an internal table of role assignemnts; then call the second BAPI (provided there were any role assignments to assign for that user!)
Hope this makes sense. It's not rocket science really; you can omit most of the parameters of BAPI_USER_CREATE1, and the second BAPI is even simpler. You could consider validating the input data by checking entries in table USRSYSACT, which contains all valid system/role assignments as seen from the CUA system (this table gets updated every time you do a "text compare" from within SU01.
Regards,
Trond

Role assignment to user in child system

Hi,
We have a CUA with role assignment in SCUM defined as global. There is any way of assigning roles to users in child system when CUA system is not available? There is any way to allow roles assignement in both Parent and child systems?
Many thanks for your help!!
Raquel

One way would be to temporarily delete the CUA assignment in the child and then maintain locally, but you will need to attach it again... and decide whether you want the CUA master to know about what you have done.
Plan B on older Support Packs is to take a look at the correction instructions of [SAP Note 1504495|https://service.sap.com/sap/support/notes/1504495] but for this you need full access () to the S_USER objects, in which case you could detatch the CUA anyway.
However as a temporary workaround in Test systems it could have been usefull.
Plan C: Allow reference user assignments locally and authorize the role indirectly. Via the available authorizations of and access to the reference users you can then contain the scenario. Works fine for me if the concept of reference users is understood.
However in most cases you should do it via the CUA and will end up doing this anyway via the CUA - that is what you have a CUA for. So... logon to your CUA in the morning, give the SAPGui scheme a nice bright colour and administrate the users and role assignments there. This is a small price to pay compared to not having a CUA or IdM...
Cheers,
Julius

Will PFCG at child systems be disabled once CUA is activated?

I have set up CUA many times but I do NOT remember whether the PFCG of the child systems will be NOT working once CUA is set up.
I currently have no CUA to verify this.
Would you please help tell if the PFCG at child systems will be disabled once CUA is activated?
Thanks!

Hi,
If you check CUA installation guide, there below extract is mentioned:
In the central system, you use transaction SU01 to execute the Text Comparison from
Child System function and specify the changed child system as the target system.
u2022 You send the changed role data from the child system in which you have made the role
maintenance (transaction PFCG) changes, to the central system. To do this, choose
Environment u2192 Text Comparison for CUA Central System in transaction PFCG of the
child system.
u2022 You execute the report SUSR_ZBV_GET_RECEIVER_PROFILES in the central
system using transaction SA38, or schedule it regularly as a background job to collect
the changed roles and profiles from the child system. You can specify the receiving
system using the input help. If you have only made changes in one child system, you
only need to specify this system.
u2022 You execute the report SUSR_ZBV_GET_RECEIVER_PROFILES in the child system
using transaction SA38, or schedule it regularly as a background job to send the
changed roles and profiles to the central system. You can leave the input fields empty,
as the data of the child system is always sent to the central system, regardless of the
entries.
Thanks
Sunny

SAP CUA connector changes password in master system AND child systems?

Please confirm if OIM can change the password in both SAP CUA master and child systems through SAP CUA connector. The connector guide mentions the following parameter can be defined in SAP CUA IT Resource.
Parameter: SAPChangePasswordSystem Flag that accepts the value X or ' '
If the value is X, then the password is changed
only in the master system. If the value is ' ', then
the password is changed in both master and child
systems.
This parameter is used by the Reset
Password function.
Thanks!

Hi,
1) You can use report RSCCUSND to distribute users from CUA to child client. Check section "Sending User Master Data to a Child System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
2) if the user account has not been synced to CUA then you should be able to delete it in child system. The button should be displayed for unsynced users. You can use transaction SCUG to sync users between new child system and CUA. Check section "Transfering Users from New System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
Cheers

User update in Child system through CUA

Hi,
I created a role in child system and assigned it to the users in the parent system
However, users are not getting updated in the child system
Plz suggest

Did you run text comparison after creating the role ?
If not do that .
[SU01 --> enter user --> Roles --> Text comparison from child system OR run report SUSR_ZBV_GET_RECEIVER_PROFILES ]
Thanks
Prince Jose
Message was edited by:
Prince Jose

CUA client doesn't know any profile/role anymore after adding child system

Similar Messages

Maybe you are looking for