CUA: User & Role Master Data Change Document

Hi Team,
I would like to know is there any way to find out CUA user master & role assignment change document data from CUA Central System & All Targets Systems.
I am looking for user friendly tool similar to SUIM.
I have looked into other methods of CUA change document tips and tools but it is not so fruitful to convenes my Audit team.
FYI.  System Users (CUA_ADMIN) is not the user which i want to see in my change document window, i want to know actual security consultant ids within that.
Kindly get back to me.
Appreciate, for your response.
Regards,
Asif

HI Matt:  Your understanding is correct for CUA Tier2 Setup.
FYI.
We have successfully configured trusted relationships between SAP Systems with the help of my BASIS & UNIX team.
To do this:  We have performed following actions:
u2022     Trusted System trust relationships for the RFC Connection has been maintained from the Central to the Child System and from All Child to Central System via transaction code SMT1.
u2022     UNIX Database level trusted relationship entries has also been added with the help of UNIX Team
u2022     RFC Destinations has been reconfigured with Current user option (SM59).
u2022     For Security Administrator special authorizations has been provided in order to get trusted relationship RFC authorizations. 
Note:
I have added Full Authorizations under these new special objects S_RFC, S_ICF, S_RFCACL, & S_RFCADM  and same was assigned to all our Security Administrators.  Remote Logon & Trusted Connectivity is working fine for all of us.
We are 4 Security Administrator here, And for All of us this new concept of Trusted RFC for CUA is working fine.
New Authorizations updated on both CUA and the Child System.
Our ids are replicating as a log in the last change by field of SU01 and change document of SUIM. Happy to see this. 
But unfortunately there are strange ABAP dumps are started generating from CUA (SolMan) System soon after this Implementation.
When we look into ST22, runtime errors CALL_FUNCTION_SINGLE_LOGIN_REJ &  CALL_FUNCTION_SYSCALL_ONLY are keep generating.
Following are the example of dump logs and all the dump are with similar fashion but with different user-ids within that.:
Short text:  No authorization to logon as trusted system (Trusted RC=0).
What happened?  : Error in the ABAP Application Program The current ABAP program "SAPMSSY1" had to be terminated because it has come across a statement that unfortunately cannot be executed.
Error analysis:  An RFC call (Remote Function Call) was sent with the invalid user ID "(End user user-ids)".  Or the calling system is not registered as trusted system in the target system.
How to correct the error: The error code of the trusted system was 0.
Meaning: 0    Correct logon as trusted system mode
1 No trusted system entry for the calling system "BIP " (like other child System) or the  security key entry for the system "BIP " is invalid
2 User "111552 " (Type of End user) does not have RFC authorization (authorization object
     (S_RFCACL) for user "End User id " witl client 100.
3    The timestamp of the logon data is invalid
The error code of the SAP logon procedure was 6. (6    No external user check)
My Point: I think All these End users are trying to connect CUA Trusted RFC connections through individual different child Systems..
Why they need to Connect to CUA and for what reason they need special Trusted RFCu2019s authorization???
Pls help me to fix this problem.
I have gone through the old SDN posts related to the same topic and few SAP notes and help link but it wont help.
Note 1579570 - Problem with trust relationship after using HMAC
Note 128447 - Trusted/trusting systems
Note 131387 - No authorization to log on as a trusted system
Note 986707 - No authorization to log on as a trusted system (RC=1)
Few More SAP Notes: 986707, 333441, 1151790 & 128447
http://help.sap.com/saphelp_nw04/helpdata/en/8b/0010519daef443ab06d38d7ade26f4/frameset.htm
We donu2019t see any logs under SCUL, BD87 & ST01.
Please anyone can assist me on this.
Regards,
Asif

Similar Messages

  • Track Master Data Changes for Multiple countries

    Hi experts,
    I am in a Global HR Implementation & Rollout Project. We are creating Outbound Interfaces for 3 countries to export pay, time and general data to the 3rd party systems in those local countries. (Payroll is outsourced there).
    As well as sending New Joiners data every month, we need to send Changers data also to all those 3rd partys every month before the Payroll runs.
    I know 2 solution for this :
    a). Using Change Documents - Tcode : SCDO ..etc
    b). Using the report RPUAUD00.
    c). Using RBDMIDOC.
    Query :
    1). Are these the only solutions ?
    2). Whats the best solution for doing this for a Global Rollout project ? I need to track master data change for different countries for different set of Infotypes and fields. I need to send those Changers data as well as the New Joiners data through the Outbound Interface to all the local countries.
    This year we are doing for 3 countires, next year for 9 more countries, etc. Whats the best solution keeping this in mind ?
    Restrictions :
    1). Our Client HRs dont want us to disturb the report RPUAUD00 as they use that regularlly and want the flexibility to configure the configs themselves.
    2). If I must need to create and activate Change Documents for ALL individual fields, is there an easy way of doing this ?
    3). I need to send this Changers data from SAP to Legacy system, so dont know if RBDMIDOC will be a good solution for this. Any comments ?
    Just want the best possible and feasible solution for this issue.
    I will be please to allot point to anyone who gives a good solution.
    Moreover will be Thankfull also !!
    Cheers.

    Please try with transaction code "PC00_M02_LINF0"
    Cheers
    Suresh.KK

  • Customer master data change -XD02 Disable all filelds except text screen.

    Hi SAP Experts,
    Have  any idea please forward immediately.
    In cusomer master data change XD02 all filelds should not be changed by specified users and the user should be able to update the text screen where as am giving the path below
    XD02>company code data>Extras>Texts>Double click on  accounting text screen. then it directs to text screen.
    here user can update the information.
    Since the Master data fileds can be change by the diffrent team like the details of address.... and the other users team from same dept. should not able to change address...and all other fileds in XD02 except the text screen.
    Is it possible to develop in xd02 . if it is please explore what are the ways...
    Regards
    venkat

    Hi
    As said by GSL goto OB20 and select "change customer centrally" and in the
    general data
    company code data
    sales data
    select the required fields and check the radio button "display"
    if you suppress you cannot find the fields at all
    regards
    prashanth

  • Issue with Master data change workflow in GRC PC 10.1

    Hi,
    I have configured the work flow for master data changes in GRC PC 10.1, however approver is not able to view the request in inbox where are the organization owner is able to see the review for change request in inbox.
    Please let me know if there is any config where we need to set the approvers for workflow, so that the system creates a request for approver.
    Regards,
    Giridhar

    Dear Giridhar,
    Please, check the following configuration:
    1. Activate the workflow (Path: SPRO -> GRC -> Shared Master Data Settings -> Activate Master Data Changes)
    2. See whether Checkbox "Approval" is ticked for the selected entity
    3. If you activate master data changes, please check whether the correct roles are indicated in the Maintain Custom Agent Determination Rules in the Workflow settings.
    Business Event: 0FN_MDCHG_APPR
    Role: Select the role you gave to the approver
    After performing this configuration, a task must appear in the work inbox.
    Best Regards,
    Fernando

  • FK02 :: vendor master data change

    FK02 :: vendor master data change
    I want to change payment terms to a particular vendor but i am getting a error message
    <b>changes for vendor not yet confirmed.</b>
    I tried FK08 to confirm earlier changes but i could only confirm company code changes and
    not the general data.
    How do i confirm earlier changes and also assign new payment terms.
    Help appreciated
    Prashanth

    Hi,
    It is correct, user who made the changes to Vendor Master (sensitive fields) cannot confirm the changes. SAP Help states:
    <i>Only those accounts are displayed for which you have authorization to confirm changes. As a result of dual control, the system also checks whether you were involved in the sensitive changes.</i>
    You can ask any other User who has authorization to transaction code FD09 to confirm the changes. Logically, if the user who is making the changes also confirms the changes, it defeats the very purpose for which this process is defined. Hence, I think SAP would have put a validation to check the user who made the change and whether the same user is approving the changes.
    Thanks
    Murali.

  • HR ABAP : Track Master Data changes for multiple countries

    Hi experts,
    I am in a Global HR Implementation & Rollout Project. We are creating Outbound Interfaces for 3 countries to export pay, time and general data to the 3rd party systems in those local countries. (Payroll is outsourced there).
    As well as sending New Joiners data every month, we need to send Changers data also to all those 3rd partys every month before the Payroll runs.
    I know 2 solution for this :
    a). Using Change Documents - Tcode : SCDO ..etc
    b). Using the report RPUAUD00.
    c). Using RBDMIDOC.
    Query :
    1). Are these the only solutions ?
    2). Whats the best solution for doing this for a Global Rollout project ? I need to track master data change for different countries for different set of Infotypes and fields. I need to send those Changers data as well as the New Joiners data through the Outbound Interface to all the local countries.
    This year we are doing for 3 countires, next year for 9 more countries, etc. Whats the best solution keeping this in mind ?
    Restrictions :
    1). Our Client HRs dont want us to disturb the report RPUAUD00 as they use that regularlly and want the flexibility to configure the configs themselves.
    2). If I must need to create and activate Change Documents for ALL individual fields, is there an easy way of doing this ?
    3). I need to send this Changers data from SAP to Legacy system, so dont know if RBDMIDOC will be a good solution for this. Any comments ?
    Just want the best possible and feasible solution for this issue.
    I will be please to allot point to anyone who gives a good solution.
    Moreover will be Thankfull also !!
    Cheers.

    I have used PU12 for same purpose at a similar client. It will fulfill all your needs I guess, but the learning curve is big. Search for "Interface Toolbox" or "PU12". Basically your search will end-up in these two links:
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PAXX/PYSOME_INTERFACE.pdf
    HR Interface Toolbox - PU12

  • Equipment Master data changing automatically

    Dear All,
    this is weird but our SAP system is changing equipment's master data once it is created.
    we have blocked all the possible chances of using T code "IE02-EQUIPMENT MASTER DATA CHANGE" at user end.
    we are finding it very difficult to track because every time the equipment's action log displays new SAP ID's . we have checked with same ID but any where it is not possible for that user to have an authorization for IE02
    it mainly changes the master data such as description/Manufacturer/Model number etc into some weird information. and this is happening at any  time where in some cases it has been found that at 3:00 am or 4:00 am. we had also checked any background job is running  at same timing but we couldn't found out any such case and this is happening without any prior notice so it is difficult for us also to monitor the same
    if you have gone through same experience please share with us.
    thanks
    kiran

    Kiran,
    I fee that you must investigate through table CDHDR. Run Tcode SE16 --> Give value CDHDR --> Enter.
    Here input values as under ( OBJECTCLAS, OBJECTID, USERNAME) and Execute.
    In the output, you observe the values of fields TCODE, UDATE. You will come to know whether these changes are happening through IE02 or some other Tcode.
    Also you should try without giving the USERNAME also. In this case you will get the lines of both normal changes and surprise change also in the output, where you are likely to find out what is happening.
    In a similar way, you can investigate through table CDPOS also.
    Jogeswara Rao K

  • Vendor master data change confirmation -Report Y_CD1_39000398

    Hello All,
    In report  Y_CD1_39000398 we can see the confirmation pending for the Vendor master data changs. There are some entries which are pending since last 5 years becasue the chagnes are rejected. Is there is any possibility to remove this so that in this report we can get only relevant entries
    Thanks  & regards,
    Prashant

    Hi,
    I dont think it is the standard report. I think its a developed one as it is starting with Y. If so, then co-ordinate with your abaper and do the necessary changes to get the right result.

  • Vendor master data changes

    Hi all,
    Please help me with some useful information regarding the history of master data creationa and changes. I need to create a query for creation and changes of vendor master data. Data for creation of the vendor master data are saved in LFA1 but for changes I cannot find table.
    Thank you,
    Desimira

    Hi,
    You can use the standard report for Vendor master data changes, S_ALR_87012089 - Display Changes to Vendors.
    Regards,
    SAPFICO

  • HR master data change export with Interface-Toolbox PU12

    Hello out there !
    I implemented a HR master data change export with PU12 at one of my customers.
    It works fine - with one little problem:
    It is only possible to export one period (actual or selected).
    Is there any possibility to export more than one period (also periods in the future) ?
    The request is to export also master data with validity start date in a future period.
    Thanks for any help.
    Greetings, Holger Mächtig

    Dear Holger,
    I am very curious about your problem last year. Is it possible to do a future export with PU12?
    I am now working with PU12 for the first time and I have set up a export file in PU12.
    But when I am doing an update without filling the name for the file layout I have the following error:
    "An error occurred when opening the "export file"
    When I am filling the file layout I have the following error:
    "An error occurred when writing to an export file" (Error Number E107).
    "File processing: end of file".
    When I am not doing an update the export file runs and seems right.
    Do you know what I am doing wrong?
    Thanks in advance!
    Kind regards,
    Yvette

  • Retro master data change for previous cost center

    HI All,
    Could any one please reply on how I can unblock 'blocked cost center' to make retro changes for Master data.
    Thank you in advance. 
    Abhay

    Hi Abhay,
    1. Unblock the cost center for the period to apply the Master data changes. Unblock it via transaction KS02.
    2. Once the legacy cost center is unblocked, immediately proceed with master data updates.
    3. Once master data is updated, proceed with restoring the blocked status of the cost center that was used (Unblock).
    Thanks,
    Dhiraj

  • Does a Master Data Change Log or Report Exist?

    Does anyone know of a master data change log or report?
    Such a log or report would show all changes made to cons units, cons groups, and items; including additions, deletions and changes to a hierarchy.
    We hope to use this to synchronize cons group/unit and item hierarchies between BCS systems: Production and Development.
    For example, if a master data change was made in the Production system, we would like to log the change, and synch this change back to the Development system.
    Thanks for any insight.

    Thanks, TheScotsman, for really helpful information!
    Some detail of the findings for those who interested:
    There is a "How to... trace changes to master-data  and settings for SEM-BCS" which describes all nuances of tracking changes in MD.
    The HowTo mentions the reports RSVTPROT , UGMD_DB_LOG_DISPLAY, and a t-code SCU3 that may show the changes.
    Certainly the code of the reports might be taken as an example for writing your own code.
    Though, the reports and the SCU3 are useful when the logging of DB tables changes is activated.

  • Dokumention about Master data Change

    Hello Gurus,
    i could not finde any documentation about Master data Change.
    Is the anybody who can tell me the link or send an documentation ( [email protected] )
    Thanks for your help "!
    By Chris

    Hi Christian,
          You can check all the changes made on a particular date in CDHDR table and also in BDCP/BDCPS tables wherein you can search the changes made even at a particular time.
    These table might be useful wherever the data is going out in the form of Idocs since these tables are pertaining to change pointer and change header.
    Hope this info has been useful.
    Rgds,
    Aram K.

  • Master Data Changes-MAP

    Hi,
    After goods received into warehouse Moving Average Price gets change, this is good and Okay. But what ever the changes in Price is not capturing in master data changes.
    Can any one help me how to make enable those changes..like when ever Moving averange price changed that changes should be captured in Master data change log (MM04-Display changes).
    So kindly advice is there any configuration setting for that?

    Hi Saran Babu,
    The moing average price is determined in automatic by the system and this is not something that you can defined.
    Please, see this link that explain very well how the system is doing this calculation:
    http://help.sap.com/saphelp_46c/helpdata/en/47/60ff4849f011d1894c0000e829fbbd/content.htm
    I hope this help.
    Kind regards,
    Sandra

  • How can data in cube will update after Master data changes

    Hi,
    We have a Revenue cube which we are loading actuals after every month.
    Now we have master data changes at profit center level. Profit center is moving from Holdings to Power, effective with October reporting.  So master data we updated accordinglt now we need to update data in cube.
    I want know how can we update all the data in cube without dropping and relaoding again.
    We have DS0s first then cube.
    Please let me know available options.
    Thanks
    Sivaprasad

    Hi,
    Make the field which stores data whether it is holding or power as navigational attribute of profit centre.
    So whenever master data changes just update profit center master data . Use this nav attribute in reports.
    So whenever master data changes report changes automatically.
    If you want time dependant 2008 to 2009 Holdings then 2007 power enable profit center time dependant master data.
    Hope it helps.
    Thanks,
    Arun

Maybe you are looking for