CUA Implemention scenario...

Hello All,
We are  about to implement a CUA in landscape..
There are two scenarios that are currently in focuss..
Scenario 1:  To  have DEVELOPMENT CLIENT act as CUA for  clients of all systems in the landscape.
Scenario 2:  To  have DEV CLIENT as CUA for  clients of all Developement systems  , QA client as CUA for  clients of all QA systems and PRD  CLIENT as CUA for  clients of all Production  systems .
Please let me know the pros/cons of having either of scenarios for the landscape.
Regards,
Ajit

Hi,
As per my knowledge, CUA will simplify the Security admin's job.
in your case, if you have many SAP system landscapes - more production systems...and large number of users... then set a seperate CUA client for PRD systems. or if there are different bussiness entities, then go for different CUA clients respectively.
if you setup a CUA client for each environment, means you are minimising the clients you access each time. but the work time/load will not impact as expected benefit from CUA. if you setup single CUA client, the security admin job will be done in a single shot.
otherwise;
->if you have Solution manager, setup CUA client there and integrate with other systems like ECC and BI.
it will help at the time of license audits and earlywatch checks also.
->if you are not using Solution manager then you can use Quality client or Dev client for all your landscapes.
Note; At the time of new user creation, the CUA system will not create the usermasters in all systems by default.  Based on our systems selection, it will create the user masters in respective systems. (Majority users will have only production access).
To understand the more CUA benifits refer to; CUA Project Propsal Questions
You can see the CUA  Integration doc; http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/8302a929-0501-0010-05b5-d48f544bc572&overridelayout=true
Hope that helps
Cheers
Praveen.

Similar Messages

  • Profiles tab after CUA implementation

    Hello All,
    I have a query in SU01 transaction. After implementing the CUA, my central system does not show any profiles (in PROFILES tab) for Composite Roles and single roles assigned for the user. Is it Normal or is it something to do with CUA implementation. I can see the related system generated role profiles for the roles assigned to user in the respective child systems. We are on SAP R/3 4.7 version.
    Thanks in advance for the time.
    Br,
    Sri

    Hello Raghu,
    This should not cause any concerns for you. However if you want to display the profiles please change the settings in SCUM from GLOBAL to LOCAL. Then you should be able to see the profiles. But I would advise against it cause then it will be possible to assign profiles in child systems directly.Not a good thing.
    Please award points for useful answers.
    Regards.
    Ruchit.
    Message was edited by: Ruchit Khushu
    Message was edited by: Ruchit Khushu
    Message was edited by: Ruchit Khushu

  • Need two implementation scenarios

    Hi,
    I am very new to this forum..have one requirement.
    Need two implementation scenarios depends on the document type..
    when i create shopping cart with one document type it needs to trigger one  and others for another scenario..
    Would it be possible to do
    kuber

    Hi,
    You can use BADI  (BBP_EXTLOCALPO_BADI ) 
    a) make use  ECS, if Classic scenario configuration exist
    b) or activatated Extended  Classic Scenario , need to make Classic scenario.
    Hope it will work for you.
    Thanks,
    Rahul Mandale

  • Implementation scenarios relating to SD

    Hi ,
    Can some one pl let me know the implementation scenarios relating to SD module..
    I am new to SD field...Could u please suggest me some important areas i should concentrate ..
    Thanks in anticipation.
    Regards
    Atahar

    Link: http://help.sap.com/bp_blv1500/BL_India/index.htm
    Preconfigured Scenario's for: Sales
    Here as you select the scenario & further go into it, you will ger the Business Process as well as configuration guide. These are very helpful & knowledgable information.
    Regards,
    Rajesh Banka
    Reward points if helpful.

  • Service procurement & implementation scenario in SRM 7.0

    Hi Guys,
    I would like to know if in SRM 7.0 the new Service Procurement External Staffing scenario would work in the Extended classic scenario implementation? Or is this only supported in standalone?
    Do we have to custom build the document exchange between ECC - SRM - SUS for confirmation and invoice documents like in SRM 5.0. I am searching for a possibilty to let the service agents themselfs fill in the confirmation with the service entry sheet.
    If the extended classic scenario is supported then we are quickly done. Other possibility is to let an existing web application (to capture time sheets) generate a XML confirmation message and send this message to EBP via XI. This way the hours can also be captured. Invoicing can then by handled e.g. by ERS. What do you think?
    Thx.
    Skander

    Hi Muthu,
    Thx for your response, but these blogs do not provide an anwser to my question. I have read the release documentation of SRM 7.0, but even then I still have the above question.
    Will this business scenario work in combination witht the extended classsic scenario (and how does SUS fits in this picture)?
    Kind Regards,
    Skander
    Edited by: Skander Essaim on Jul 7, 2009 2:12 AM

  • Oracle RAC implementation scenario

    Hello DB Experts,
    I have got a very specific business scenario to be implemented.
    Basically we need to implement 2 Node RAC infrastructure.
    But in this on each node we have 2 oracle instances running.
    Now is it possible to have one Instance running on Active / Active mode and another instance in Active / Passive mode.
    First of all i want to know it is possible to implement RAC in this manner.
    If yes, then for Active / Passive instance if Active instance goes down how to switch the traffic to the passive node? Or basically i want to know how do i make that passive node active?
    Would really appreciate some quick response.
    Thanks,
    Darshan

    Lets assume some better names for this discussion...
    RAC Database MYDB (instance on node1 = MYDB1, instance on node2=MYDB2)
    SI Database URDB (instance on node1 = URDB with active/passive on node2)
    Can this be done? Yes. But why? You can use SERVICES to limit on which node your application is accessing.

  • Oracle EBS R12 implementation scenarios

    Dear All,
    We have below 3 different scenarios, please give your comments/suggestions; keep in mind client wants cheeper solution.
    HP DL580 G5 servers will be used with 64bit Redhat Linux 5.0 on all scenarios.
    Scenario 1:)
    Oracle EBS R-12 implementation with RAC & Load Balancer
    Required H/W - 8 Server (4 Production & 4 UAT / Development), Hardware Load balancer
    Software - RHEL 5.0 OS
    Licenses - Oracle RAC
    Advantages – High Availability solution, Redundancy
    Disadvantages – Specialized network administrator required for load balancer management, Complex System and costly
    Scenario 2:)
    Oracle EBS implementation with Active Passive mode / fail safe
    Required H/W - 8 Server, 4 Production (2 active & 2 passive) & 4 UAT / Development as replica of production environment
    Software - RHEL 5.0 OS & Cluster software on OS Level clustering
    Licenses – OS Cluster from Red Hat
    Advantages – OS Level clustering is cheaper compared to Oracle RAC
    Disadvantages – 2 Servers will used as Passive will not be optimally utilized they will only come into play when primary servers fail.
    Scenario 3:)
    Oracle EBS implementation Dual tier (DB & APPS)
    Option – I (Active + Active)
    Required H/W – 2 Servers for production and 2 UAT / Development as replica of production environment
    Software – RHEL 5.0 OS & Cluster software on OS Level clustering
    Licenses - OS Cluster from Red Hat
    Advantages – All the servers are optimally utilized
    Disadvantages -if one of the servers fails you might experience performance issues as both application and database services run on one node till server that failed is brought live.
    Option – II (Active / Stand BY)
    Required H/W - 2 Servers for production and 2 UAT / Development as replica of production environment, 2 server of UAT will be configured for stand by
    Software – Oracle data guard
    Licenses – oracle data guard
    Advantages – Simple configuration and easy to maintain when compared to RAC and OS clustering
    2) Will not experience performance problems when one of the primary fail .This is achieved by shutting down UAT or test instances till the issue on primary server is addressed
    Disadvantages - Sudden spike in load cannot be addressed since load balancing feature is not available.
    Best Regards,

    Scenario 1:) Oracle EBS R-12 implementation with RAC & Load Balancer
    When designing for "High Availability", this is quite a common infrastructure. It is pretty straightforward, though you are right, you need additional skills in managing RAC and Network. On the other hand, most larger companies have load balancers operational already. RAC may be expensive, however, if you want availability, it is what you will have to pay for, if you really cannot afford any downtime. Consider RAC when either of the following will be answered "No"
    1) Can your customer really not afford more (unplanned) downtime than 20 minutes.
    2) Is the maximum size of your hardware (single node database tier) sufficient to handle the amount of concurrent users in peak and will it be able to handle the expected growth for the next 12 months.
    If either of the above questions answers no, consider RAC. Otherwise, one of the two alternative scenarios will probably be better.
    Scenario 2:) Oracle EBS implementation with Active Passive mode / fail safe
    This scenario requires additional skills as well: OS Cluster Administration skills. The main advantage in this situation is that the architecture in which EBS has to operate is quite simple. No clustering (EBS will operate on one db node and one appnode). Issues you might encounter: If dbnode fails, what will your appnode do? Will it have to be restarted? What about downtime in such a case? How much can you afford (see scenario 1). You will end up with some 'dirty' data in your database (concurrent manager). It might be necessary to clean that out first.
    Another question to answer is how much do you trust your hardware/os. If it (almost) never failed on you for the past years, why would it be different in this situation. Having an active/passive cluster can be a costly architecture as well (half of your capacity being passive...)
    Scenario 3:) Oracle EBS implementation Dual tier (DB & APPS)
    Option – I (Active + Active)
    I suspect you mean to establish a cluster that runs database package on node 1 and application package on node 2, each of them having the other node as failover node. In this situation, you will definitely encounter a performance degradation, but this can be managed by oversizing each of the nodes and/or defining a threshold for performance degradation and keeping this in mind when sizing the hardware. You would still need the cluster managing skills, though.
    Option – II (Active / Stand BY)
    This option will deliver you more High Availability, because this is a truly disaster resilient solution. Dataguard will duplicate the database, taking away the Single Point Of Failure(SPOF), which the database is in all previous scenarios. You should keep in mind though that the UAT environment will be affected by the standby database activity (not very much, but nevertheless). You will need additional skills, like Dataguard administration skills. I could argue about your statement that it will be easy to maintain, compared to RAC. However, like I said in my comments about Scenario 2, the operational architecture for EBS is quite simple in this architecture as well. Consider the implications on the application tier when your database switches/fails over to the standby.
    Conclusion: There is no yes/no to each of the proposed scenarios. You will have to discuss with your customer to find out what the requirements are on a business level and translate them to an IT solution.
    The solution should meet the needs for which it is realized and the people should be able to manage/maintain the solution. Additionally, the investment should be in line with the solution the customer requires.
    Regards,
    Arnoud Roth
    Oracle E-Business Suite Technical Architect
    Inter Access
    The Netherlands

  • CUA Implementation - Resetting of passowrds not affected in Child Systems

    Hi all,
    I have implemented CUA in SOLMAN.
    We are having 6 child systems, when i try to change the passowrd in SU01(in SOLMAN) and select all the systems, its getting affected only to SOLMAN and one more system.
    Rest 4 of the systems are not getting affected....In SCUL it didnt pop up any errors...i m unable to find the reason..
    Could you please guide me to find the error..
    Thanks,
    Subbu

    Hi Tom,
    In WE02 i see some information in Outbound IDocs and everything is GREEN...But in Inbound IDocs i didnt see any information..'
    But whne i change the password in central system, its not getting affected...
    In SCUL transaction, everything is GREEN...didnt receive any errors...
    IN SCUM transaction i tried keeping initial Password parameter as Global, Local and Evrywhr but it didnt solve my problem...
    Any idea what is wrong??
    Thanks,
    Subbu

  • Implementation scenario

    Hi everyone
    I need an implementation advice from all the experts. My requirement is that we need to send purchase orders and recieve confirmation to sap systems. we are sending the purchase orders to a webservice.
    The general idea was to use idocs to send purchase orders and to recieve the confirmation into the same idoc or a different one. but with idocs syncronous communication is not possible. so what i am thinking is develop an rfc which has the request and resposes and it can populate the required idocs.
    i came to know that using idocs or flatfiles i can achieve asynch-synch communications by using modules . but it is from SP 19 , we don't have SP 19 we have SP 10. so i guess its not an option. moreover modules are being dealt with JMS adapter . its not clear why to use JMS adapter here.
    are there any better approches to it other than upgrading to SP 19?
    is using RFC for this situation a better solution?
    Thanks XI experts

    Sudheer,
    Due to some of the constraints you are having using RFC would be the wise option. Send the data to the webservice to the SOAP adapter and map the response back to the RFC.
    Check this weblogs for more information of this integration:
    /people/shabarish.vijayakumar/blog/2006/03/23/rfc--xi--webservice--a-complete-walkthrough-part-1
    /people/shabarish.vijayakumar/blog/2006/03/28/rfc--xi--webservice--a-complete-walkthrough-part-2
    /people/shabarish.vijayakumar/blog/2008/01/08/troubleshooting--rfc-and-soap-scenarios-updated-on-20042009
    Regards,
    ---Satish

  • CUA Implementation

    Dear Experts,
    Currently we are planning phase to implement CUA in our IT landscape.
    We have systems like   ECC, CRM, BI and solution Manager. We plan to implement Solution manager server as Parent system.
    Each child system we have separate roles.
    ECC ->ZECC_ROLES (Total 6 roles)
    CRM ->ZCRM_ROLES (Total6 roles)
    BI -> ZBI_ROLES (Total8 roles)
    Some users we create only  at ECC, some of them only create in ECC & CRM and some of them in all system.
    1.In case to (parent system) create/distribute a user(test01) for all the child system, how to assign the roles to a user in Parent system. We want user(test01) should be assigned only ECC 6 roles in ECC System. the Same user at CRM should be assigned to only CRM related 6 roles. similar way BI also.
    Could you please someone let us know how to handle the role allocation separately in CUA Central system(parent system) ?.
    Thanks
    Malai

    Hi Thirumalai ,
    Yes , you will be able to assign roles to user profile with respect to what system  and roles does user requires access. After setting up central system and completing all configuration steps with child systems , you will be able to find an extra tab " SYSTEM " in central system which you cannot find in decentralized system. In this field you can enter the logical system name of the system (ECC / CRM /BI) in which does user access is requested. There after in role tab you need to enter the logical system name in system field and respective role namesin the role filed respectively and then save the user profile.
    Please note that when ever you create any role in the child system landscape(i.e for example in ECC systems) you need to complete the text comparision from central system to child system , else the newly created roles will not be replicated to central system and you will not be able to perform any role assignments in the respective child systems.
    Regards
    Kantikiran

  • Help implementing scenario

    Hi again,
    I need help implementing the next scenario (simplified):
    - One material can have N discounts.
    - On ODS A I have 'Material' and 'Customer' as characteristics and 'Amount of the sell' as ratio.
    - On ODS B I have 'Material' and 'Discount Type' as characteristics and 'Amount of discount' as ratio.
    I'm using a MultiProvider for the queries that needs the detail of the discounts.
    How can I create a query that shows the Amount of sell for materials that have discount of type '3' ?
    If i use a filter for discount type '3' I won't get any amount of sell.
    thanks in advance

    Hi Juan,
    you can use a prequery for your problem. That means, you use a Query to fill a variable.
    Build a Query A with material in the rows and a filter with 'Discount Type' = '3'.
    Then define a variable for material with the option for 'processing by' = 'Replacement path'. fill out the other fields and press next. Here select for Query the before defined Query A. now next and finish.
    The last step is to define the query with material and Amount of sells. In this query use the defined variable for material.
    That's it.
    Hope the english is understandable.
    regards
    Alex

  • New implementation scenario.

    Scenario: I have the following issue at hand and want to check if there is an existing/alternative solution before implementing my own.
    I want to create a QBC taxonomy. I want to classify docuents, based on the value assigned to a custom property for the documents.
    I believe following are the steps:
    1- create property
    2- create classification index
    3- create taxonomy and categories within
    4- create query condition for each category
    5- assign values to the property for each document
    6- define KM Navigation iView that display categories
    Now I'm on step5. I want to assign values to a lot of documents. But instead of manually doing it, I want to create a web application that takes the following input values: repository path; a property name; a value.
    Please let me know if there are alternate ways to achieve the same.
    Also, if you already have a solution and won't mind sharing it, I would be more than happy to use you codebase: [email protected]
    Best Regards,
    Kumar

    Hi Kumaran,
       You can do that automatically, but you must develop it using SAP Developer Studio. There is not other alternative.
      https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/kmc/knowledge management and collaboration developers guide.html
    Patricio.

  • BW implementation scenarios

    Hi All
    I'm a rookie in SAP BW. I would appreciate if anyone can give me links or info. on case studies or industry implementations of SAP BW. One specific question I have is, can anyone give me an example of what kind of FI data is extracted from R/3 into BW and what kind of reports can be developed on it in BW?

    Hi,
    Welcome to SDN!!
    Refer to these links:
    Re: BW Implementation
    FI extraction
    Re: R/3 data (FICO, PS)  into BW
    You can refer to https://help.sap.com and also search this forum for more info.
    Bye
    Dinesh
    <i>Assigning point to the helpful answers is the way of saying thanks in SDN. you can assign points by clicking on the appropriate radio button displayed next to the answers for your question. yellow for 2, green for 6 points(2)and blue for 10 points and to close the question and marked as problem solved. closing the threads which has a solution will help the members to deal with open issues with out wasting time on problems which has a solution and also to the people who encounter the same porblem in future. This is just to give you information as you are a new user.</i>

  • Rename 600+ users in CUA implemented 3 system landscape

    Hello All,
    Task ahead :
    Rename around 600+ users in my Production system which is my CUA central system as well. I am having a simple 3 system landscape.
    Advice on :
    What can be the pitfalls for this activity ?
    Since CUA is ON, there would not be a Rename Option available any more...so How to proceed with this activity ?
    Is there any negative impact for such renaming actions in the system.
    Any inputs would be rewarded handsomely...
    Thanks for your time.
    Br,
    Sri

    Hi Happyman,
    How do i perfrom the Rename in my central system ? Its OK, i can delete child systems from the centrral CUA and perfrom a rename and then re add it back to CUA...bt my query is how to tackle this issue in central PRD system.
    does that means i need to delete the existing CUA altogether and recreate it again after utilising the rename option ?>
    Thx for the inputs...
    Br,
    Sri

  • CRM Implementation scenario

    We want to implement CRM IT Service Management for internal employees and CRM Customer Complain for our customers.
    For production is it required to implement these functionalities in two separate clients?
    Our functional team says having 2 clients in production is the only way we can separate employees and customers as both need to be assigned as sold_to_party Business role. Reason for separation is that while creating incident/service request the Customer field list should not contain both Employees and actual customers. If we dont go for multiple clients then there would be lot of enhancement work would be required.
    I am basis consultant, need CRM expert comments.
    Thanks,
    Naivedya

    Hi Naivedya,
    You can achieve the same using one client as backend.
    First of all incident/service request is seperate transaction type and have seperate business object when compared to complaint.
    So you can have two different transaction types servicing two different customers.These two transactions can have two seperate customer fields.
    Service Request[incident] - Internal employees [ captrued as customer]
    Compalaint - External customers.
    And if you can have two different business roles for the same and also two different security roles.
    So that agents service employees cant access compalints vice versa.
    Above all SAP's IT help desk management is a seperate suite which is specifically made for IT services.
    And OOTB IC web business role IC_ITSDAGENT supports confirming employee as customer and can be captured as part of Incident.
    So you need not go for any enhancement everything is available OOTB.
    Or you can use incident for your internal employee and service request for your external customers.
    And create them accordingly
    Amol
    Edited by: Amol Guttal on Aug 26, 2010 11:13 AM

Maybe you are looking for