Post-refresh steps for a CUA child system

Hi,
I implemented CUA in our non-prod system.
I will copy my DEV system (CUA enabled) to a SBX machine (also CUA enabled).
our CUA Master is installed on our Solution Manager machine.
I searched the web for possible solutions. One of them is:
1.export users from SBX
2. refresh SBX
3. import users back into SBX
4. run SCC7
Any other possible solutions such as forcing data from CUA master to be "implemented" into my refreshed system?
Thanks.

Hi Eric,
Not much aware, hope this might be helpfull.
http://wiki.sdn.sap.com/wiki/display/Security/Bestpractice-HowtoperformaclientcopywhenCUAisactive
http://sapbasisnotes.blogspot.com/2009/05/how-to-perform-client-copy-when-cua-is.html
Cheers
Deepanshu

Similar Messages

  • Integrate GRC 10.1 with CUA and how to import roles from CUA & Child systems into GRC for provisioning

    Hello,
    I am trying to integrate CUA into our GRC 10.1 system through the below steps and so far I have completed the below steps following SAP Notes 1680108 and 1616121:
    1. Connected CUABOX to GRCBOX like a plug-in system.
    2. Updated CUA Global System and CUA Model Distribution in Maintain CUA settings under User Provisioning.
    3. Next I am trying to import the roles from CUA(CUABOX) into GRC(GRCBOX) to be able to provision roles in CUA Child Systems(ECCBOX).
    After reading few discussions in SCN, I have figured that we have to download a template in Role Import and populate it accordingly to upload the CUA child system roles into GRC system for provisioning in CUA Child Systems.
    Unfortunately, this template has multiple fields and I am unable to determine the fields that should be populated as CUA Global System and CUA Child System to import into GRC. Also, when we upload CUA Child System Roles template what selections should be made in Role Import window.
    Any help in this regard is very helpful.
    Thank you,
    Pawan

    Hi Alessandro,
    I have "Create user if does not exist" setting checked for both change action and assign role action and also have CUA enabled. Here is the list of steps that I am performing:
    1. Create an access request for new account, T-CUA_CHILD and select a role from a child system ECC Z_ECC_ROLE_IN_CHILD_SYSTEM.
    2. Approvals provided to assign the ECC role.
    3. I see the following in GRFNMW_DBGMONITOR_WD.
               Auto provisioning activity at end of request at Path GRAC_DEFAULT_PATH and Stage              GRAC_SECURITY
                   New User:T-CUA_CHILD created in System(s): ECC (created without role assignments)
                   T-CUA_CHILD User does not exist in target system CUA
    GRC created an account without role assignment in ECC but also throwed me an error that the user does not exist in CUA.
    However, if I select roles from both CUA and ECC it creates the account in both systems with the selected role assignments.
    So I am wondering if there is way to provide CUA access to users by default for new account requests types. I have tried setting up default roles for CUA but it does not assign the roles by default until I select the CUA system.
    Thank you for your help!
    Pawan

  • CUP:Deletion of account in CUA child system leaves system assignment in CUA

    Hello all CUP experts,
    I face a problem with CUA connected systems, more precisely in the account deletion process. The account is deleted in the CUA child system, but it leaves the system assignment in the CUA system.
    Is there a way to get CUP to delete also the CUA system assignment, which I understand has to happen before the child system account deletion?
    Br,
    Stefan Ericsson
    +358-50-4867527

    Hi Naveen,
    1. I have synchronized the company address in central system to all the child systems.
    2. This particular child system has an additional company address "XYZ" (which is causing the problem). This address is not being copied to the central system from transaction SCUG. It throws an error saying that the address is incorrect (Missing Country Information). So, when I want to edit the address to get this thing fixed, in the child system, it won't let me do that. I can neither edit it nor delete it. I get the error messages as I have posted earlier.
    So I have changed the company address of all the users who were using address "XYZ" to a different address so that I can delete the company address "XYZ". But, I am still not able to delete the address.
    If you could guide me on how can we edit or delete the company addresses in a  child system (other than from Transaction SUCOMP), it would be great.
    Thank You for your time on this thread.
    Any input I will appreciate.
    Jaya

  • Post upgrade step for EP

    HI Friends,
    I have upgraded my EP from 6.0 to 7.0 successful with all component. ALos i am getting login screen. SO what are post upgrade step for EP.
    Thanks,
    Regards,
    Sachin

    HI ,
    System restart
    run the SICK verify the installation check
    Check developer traces on the operating system. Log on to
    Check the installed license and profile configuration (RZ10 and PFCG)
    confirm the  operation modes
    Perform a client copy
    Check the status of the SAP Web AS Java and the user SAPJSF
    Check the rdisp/j2ee_start profile parameter
    Check the current state of SAP Web AS Java using transaction SMICM
    SAP Load Generator
    Start SAP Load Generator (SGEN)
    Regards,

  • Post installation steps for PI 7.0

    Hi,
    Can anybody send me the Post installation steps for PI 7.0?
    Thanks in advance..
    ~Kumar

    Hello,
    <br><br><br>
    We did PI Installation recently and version is 7.1
    <br><br><br>
    Steps are as under...
    <br><br><br>
    <br>1.     Basic PI installation</br>
    <br><br>2.     System checks after basic installation
    <br>a.     SM50
    <br>b.     SM21
    <br>c.     ST22
    <br>d.     SM12
    <br>e.     SM13
    <br>f.     SM37
    <br><br>3.     Unlock the 001 client for cross-client changes temporarily and set system timezone (STZAC)
    <br><br>4.     Change 001 client settings back to no changes allowed.
    <br><br>5.     Create BASIS team member accounts in ABAP Stack and assign SAP_ALL.
    <br><br>6.     Set directory permission for \usr\sap\trans directory on Transport Domain Controller system.
    <br><br>7.     Import profiles (RZ10)
    <br><br>8.     Add the 4 following entries in to the instance profile and restart instance(RZ10)
    <br>a.     DIR_TRANS =
    hostname.domain.ext\sapmnt\trans
    <br>b.     icm/host_name_full = hostname.domain.ext
    <br>c.     login/system_client = 100
    <br>d.     icm/server_port_0 = PROT=HTTP,PORT=5<sysno>00,TIMEOUT=1800,PROCTTIMEOUT=1800 {SAP Note 1107808}
    <br><br>9.     Configure TMS in transport domain controller{PI DEV} (STMS)
    <br>a.     Add virtual system
    <br>b.     STMS in newly installed system and configure proper transport domain
    <br>c.     In domain controller approve the new system (STMS -> SAP system -> Approve)
    <br><br>10.     Get maintenance certificate and SAP license from service marketplace and apply in to the new system {ABAP and JAVA} (slicense and NWA)
    <br><br>11.     Kernel Update JSPM
    <br>a.     JSPM update
    <br>b.     Kernel update
    <br>c.     BC-FES-IGS update
    <br><br>12.     Support pack installation ABAP
    <br>a.     SPAM update
    <br>b.     Support packs update
    <br><br>13.     Support pack installation JAVA
    <br>a.     Apply support pack stack
    <br>b.     Apply support pack patches
    <br>i.     After JVM installation Error occurs apply MS windows KB973544 {SAP Note 1367498}
    <br>c.     Restart JSPM and continue patch installation
    <br><br>14.     Client copy from client 001 to X00 using profile SAP_ALL
    <br><br>15.     Create logical system and assign it to new client (SALE)
    <br><br>16.     Change UME target in JAVA to client X00.
    <br>a.     Enter URL as http://hostname.domain.ext:port/nwa
    <br>b.     Management -> Infrastructure -> Destination
    <br>c.     Logon data TAB change client to X00
    <br>d.     Restart JAVA Instance
    <br><br>17.     Create following users
    <br>a.     PIAFUSER, PIRWBUSER, PIISUSER, PIDIRUSER, PIREPUSER and PIAPPLUSER on the target SLD and new system manually and assign role/group SAP_SLD_CONFIGURATOR to them. {SAP Note 1309239}
    <br>b.     PISUPER in new system and assign appropriate roles in ABAP and JAVA
    <br>c.     SLD_DS_<SID> and SLD_CL_<SID> on target SLD {Use source system master password}
    <br>d.     JCoRFC_<SID> in new system
    <br>e.     Sapadm user in new system
    <br><br>18.     Assign roles and groups to BASIS team on JAVA Stack
    <br><br>19.     Create PUBLIC logon group (SMLG)
    <br><br>20.     Configure SLD collector job as sapadm (RZ70)
    <br><br>21.     Run Configuration Wizard
    <br>a.     Enter URL as http://hostname.domain.ext:port/nwa
    <br>b.     Configuration management -> Scenarios -> Configuration Wizard
    <br>c.     Select Initial Configuration and click Start.
    <br><br>22.     Create the JCoRFC connection.
    <br>a.     Enter URL as http://hostname.domain.ext:port
    <br>b.     Web Dynpro -> Content administrator -> Maintain JCo destination
    <br>c.     Fill in information for the following 4 entries using client X00 and JCoRFC_<SID> as the user {Make sure you note the distinction between Metadata and Model destinations when you are creating the destination}
    <br>i.     WD_ALV_METADATA_DEST
    <br>ii.     WD_ALV_MODELDATA_DEST
    <br>iii.     WD_MODELDATA_DEST
    <br>iv.     WD_RFC_METADATA_DEST
    (Use dictionary Meta Data for the Metadata connections, use Application Data for the Model Data connections.)
    (Use the master password for EXQ)
    <br><br>23.     Repeat for the remaining 3 JCo RFC destinations. 
    <br><br>24.     Run PI Full Qualified Host Name Wizard {SAP Note: 1320707}{Make sure you check the host names for integration server and SLD}
    <br><br>25.     Create RFC destination in to ERP target system (SM59)
    <br>a.     Give Name PI_INTEGRATIONSERVER
    <br>b.     Connection type H
    <br>c.     In Technical settings TAB provide
    <br>i.     Target host = hostname.domain.ext
    <br>ii.     Path Prefix = /sap/xi/engine/?type=entry
    <br>iii.     User information is blank
    <br><br>26.     Setting SXMB_ADM ERP target system
    <br>a.     Open Integration engine configuration
    <br>b.     Goto -> Change Global Configuration Data
    <br>c.     Role of Business system = Application System {This is optional}
    <br>d.     Provide RFC destination name in Corresponding Integ. Server = dest://PI_INTEGRATIONSERVER
    <br><br>27.     Schedule Standard Jobs as SAPADM in client X00.
    <br><br>28.     SICF service to activate
    <br>a.     /default_host/sap/public/bc/pictograms
    <br>b.     /default_host/sap/public/bc/webicons
    <br>c.     /default_host/sap/public/bc/its/designs
    <br>d.     /default_host/sap/public/bc/workflow
    <br>e.     /default_host/sap/bc/ccms
    <br>f.     /default_host/sap/bc/webdynpro/sap/CTS_BROWSER
    <br>g.     /default_host/sap/bc/webflow
    <br>h.     /default_host/sap/bc/workflow
    <br>i.     /default_host/sap/bc/workflow_xml
    <br>j.     /default_host/sap/bc/xmb
    <br>k.     /default_host/sap/bc/ping
    <br>l.     /default_host/sap/xi/wsdl_sr
    <br>m.     /default_host/sap/xi/wsdl_url
    <br>n.     /sap/bc/webdynpro/sap/appl_soap_management
    <br><br>29.     Adjusting JNLP Heap size
    <br>a.     Open the Exchange profile through the link  u201Cadministrationu201D from the  web page of the Process Integration tools.
    <br>b.     Under the folder u201CIntegration Builderu201D click on the variable u201Ccom.sap.aii.ib.clientjnlp.j2se.maxheapsizeu201D
    <br>c.     Value = 1024
    <br>d.     Save the change and restart the J2EE instance of PI so that the new value can take effect.
    <br><br>30.     Create RFC destination for Advanced Adaptor Engine in sender ERP system(SM59)
    <br>a.     RFC Destination = AAE_<SID>
    <br>b.     Connection type = G
    <br>c.     Target Host = Host Name of AAE Server {PI Server}
    <br>d.     Service No. u2013 HTTP port number of AAE Server
    <br>e.     Path Prefix = /XISOAPAdepter/MessageServlet?ximessage=true
    <br>f.     Under Logon & Security use PIAPPLUSER with PI target systemsu2019 master password.
    <br><br>31.     Create RFC destination <SID>_ALE in ERP Source system with user ERQALEUSER {Make sure you have this user created in new installed system}
    <br><br>32.     Install External Driver Configuration in Process Integration 7.1 Using JSPM {SAP NOTE: 1138877}
    <br><br><br>
    Please let me know if I am missing anything there...
    <br><br><br>
    Cheers,
    <br>
    Yogesh

  • Post Installation steps for Solution Manager 4.0

    Hi Experts,
    Please can you guide me if there are Post Installation steps for Solution Manager 4.0!If so can you explain me.I have successfully installed the SolMan 4.0.
    Thanks & Regards
    Sunil

    Hi
    In installtion guide you can find  the information you needed also check
    Visit for step by step details of Standard Configuration of Basic Settings
    www.service.sap.com/rkt-solman->select solution Manager 7.0>technical Role-->Technolagy
    &system administartion just drill out there you can find lot of simulator how to install and
    configure solution manager
    https://websmp109.sap-ag.de/~sapidb/011000358700000424922008E.sim
    https://websmp109.sap-ag.de/~sapidb/011000358700000525622007E.sim
    and for Maintenance optimizer setup
    https://websmp109.sap-ag.de/~sapidb/011000358700000086852008E.sim
    https://websmp109.sap-ag.de/~sapidb/011000358700000086862008E.sim
    Let me know if needed more information
    Regards
    Uday

  • What are the post installation steps for sap 4.7ee

    what are the post installation steps for sap 4.7ee

    Hi,
    Post installation steps are as follows.
    1.SICK to be run first to checkt the errors while installation.
    2. Install SAP GUI
    3. Set up the TMS. Configuration the domain controller through SE06 and then set up the transport system through TMS.
    4. Change the default password of SP* and DDIC.
    5. Set up the operations mode using RZ04 and SM63.
    6. Apply patches through SPAM.
    7 Schedule default background jobs through SM36.
    8 Import default profiles through RZ10.
    9. Schedule backup calender through DB13.
    10. Create clients using SSC4
    11. Install lisence
    12. Schedule SGEN

  • RE: Need Post installation Steps for solution manager4.0 on Windows/oracle

    Hello,
    Any body having Post installation steps for solution manager4.0 on windows/oracle. Can you please send me to my mail id. Its very helpful.
    Id: [email protected]
    Thanks,
    Regards,
    venkat reddy.

    Hello Venkat,
    You may get the information in SAP Note 918078 and also https://websmp206.sap-ag.de/instguides under the Solution Manager 4.0 tree.
    Basically after the installation,
    1. try to stop and start the SAP System
    2. you need to check if you can access the SAP System.
    3. Apply the permanent SAP license
    4. Perform the configuration via  IMG; Tcode SPRO(guide in https://websmp206.sap-ag.de/instguides)
    Hope this could help you.
    Regards,
    AZLY

  • Post Install steps for htmldb 1.6.1

    I am done with a new installation on RHL
    - 10g DB install on ORACLE_HOME1
    - Standalone 9.0.4 Http Server for the CCD on ORACLE_HOME2
    - Install of HTMLDB 1.6.0 and later patch of 1.6.1 error free
    I am following the post installation steps for configuring the DAD and I am unable to find the file "wdbsrv.app". I am on page 22 of the HTMLDB installation guide (B14498_02.pdf)
    How do I configure the DAD and up my htmldb.
    thanks
    -/srinath

    I am still having issues .....
    I get INVALID LOGIN CREDENTIALS - logging as ADMIN/HTMLDB in the /pls/htmldb/htmldb_admin page
    I unknowingly unlocked and changed the passwords of HTMLDB_PUBLIC_USER and other users
    to "htmldb", but IMO that should'nt matter because I used "htmldb" as the password during
    the initial install too. So....
    the access log has this:
    172.16.4.57 - HTMLDB_PUBLIC_USER [01/Apr/2005:13:13:33 -0800] "POST /pls/htmldb/wwv_flow.accept HTTP/1.1" 302 165
    172.16.4.57 - HTMLDB_PUBLIC_USER [01/Apr/2005:13:13:33 -0800]
    "GET /pls/htmldb/f?p=4550:10:1949690027032632943&notification_msg=Invalid%20Login%20Credentials/344577F9B4C4782C9D0F6CCC888077AB/ HTTP/1.1" 200 6688
    172.16.4.57 - HTMLDB_PUBLIC_USER [01/Apr/2005:13:13:42 -0800] "POST /pls/htmldb/wwv_flow.accept HTTP/1.1" 302 165
    172.16.4.57 - HTMLDB_PUBLIC_USER [01/Apr/2005:13:13:42 -0800]
    "GET /pls/htmldb/f?p=4550:10:1949690027032632943&notification_msg=Invalid%20Login%20Credentials/344577F9B4C4782C9D0F6CCC888077AB/ HTTP/1.1" 200 6688
    my dad looks likes this:
    <Location /pls/htmldb>
    SetHandler pls_handler
    Order deny,allow
    Allow from all
    AllowOverride None
    PlsqlDatabaseUsername HTMLDB_PUBLIC_USER
    PlsqlDatabasePassword htmldb
    PlsqlDatabaseConnectString biz1:1521:e5dwhdb1 SIDFormat
    PlsqlDefaultPage htmldb
    PlsqlDocumentTablename wwv_flow_file_objects$
    PlsqlDocumentPath docs
    PlsqlDocumentProcedure wwv_flow_file_mgr.process_download
    PlsqlAuthenticationMode Basic
    PlsqlNLSLanguage AMERICAN_AMERICA.AL32UTF8
    </Location>
    I tried this from the FAQ section but get this:
    SQL> begin
    2 wwv_flow_api.set_security_group_id(p_security_group_id=>10);
    3 end;
    4 /
    PL/SQL procedure successfully completed.
    SQL> ed /tmp/z
    wwv_flow_api.set_security_group_id(p_security_group_id=>10);
    begin
    wwv_flow_fnd_user_api.create_fnd_user(
    p_user_name => 'myself',
    p_email_address => '[email protected]',
    p_web_password => 'mypasswd') ;
    end;
    ERROR at line 1:
    ORA-20001: Unauthorized access (wwv_flow_api.set_credentials not set).
    ORA-06512: at "FLOWS_010600.WWV_FLOW_FND_USER_API", line 19
    ORA-06512: at "FLOWS_010600.WWV_FLOW_FND_USER_API", line 429
    ORA-06512: at line 2
    ===============================
    thanks in advance for your insights
    -/srinath

  • Post installation Steps for SAP XI

    Hi,
    I am doing post installation steps for SAP_XI, for the step "Generating roles for SAP_XI and SAP_SLD in transaction PFCG, when I enter Role: "SAP_XI*" then its not generating any roles it is giving message "No roles found in the selected area" Please suggest
    Thanks,
    Nishant

    Create user in SAP XI and then assign them role
    Create user using SU01 transaction. Enter the username and click on the first button (create).
    Follow the process below
    1. Address Tab
    Enter the user details
    2. Logon Data Tab
    Enter the initial password. Make sure user type is Dialog (it is by default).
    3. Roles Tab
    SAP_XI_DEVELOPER
    SAP_SLD_DEVELOPER
    SAP_XI_MONITOR
    (if the user is admin give the admin roles)
    Before logging on to the Integration Builder, logon to ABAP stack (SAPGUI frontend on windows or java) at least once. Then logon to Int.Builder components.
    regards
    Dharamveer

  • Post Installation Steps for ERP add-on Inventory Manager 4.0

    Hi,
    I need to confirm what are the post-installation activities we must to perfom for ERP Add-on (Inventory Manager 4.0), besides de BC Activation. I did not find any information regarding the post installation steps for the ERP Add-on of Inventory Manager 4.0 (the installation guide for IM 4.0 on service marketplace does not remark the steps only explain the theorical part of the installation)... And we need to confirm if the steps are the same of Inventory Manager 3.2 Add-on or we must do an additional step?
    Best Regards,
    MC
    Stephen Streeter Manju Venkatesha

    Yeah...of course...
    I forgot to specify it.
    I install the first ERP 2005 SR2 on Oracle 10.2.0.2 and the other have to be installed on the same version of DB.
    All installation are not MCOD.
    This mean every installation has its own DB with different SID for every installation.
    And of course I have at least doubled the space required by installer. Taken from sap notes the required space for ERP 2005 SR2 is about 90 GB.
    The total space of mount point is about 500 GB....
    Thanks
    Dan

  • ABAP & Java Preview install done. Need Post install steps for XI.

    Hi
    Please excuse for the most basic question.
    From the trial downloads, I've installed the
    ABAP and Java and would like to know the
    post-install steps for activating and configuring
    the Exchange Infrastructure component and
    subsequent configuration
    I've installed on the local host along with the
    Microsoft Loopback Adapter. What should be
    the connection parameters for the Visual
    Administrator?
    Any help is appreciated. Thank U.
    Rajendra.

    Hi Rajender
    I think no question is difficult or basic .The severity depends on whether you know it or not,in other terms your comfort level.
    Coming back to your post:Go through the below link
    https://websmp103.sap-ag.de/~sapidb/011000358700001697502004E.PDF
    Re: XI INSTALLATION and POSTINSTALLATION
    If you need the XI configuration guide then visit:
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/ac6de690-0201-0010-54ac-8923089dcc97
    Any issues feel free to ask
    Reward with suitable points:

  • Post Install Steps for EP7.0

    Hello Guru's.
    I am looking for a listing of needed Post Install Steps for EP7.0. I have the installation guide for NW2004's SR1 ABAP+JAVA on AIX: Oracle and the NW2004s Master Guide. Is there any thing else I should have? I am not doing the actual install, just the post steps.
    Thanks,
    Chris

    Hi,
    Start with this: http://help.sap.com/saphelp_nw2004s/helpdata/en/a9/76bd3b57743b09e10000000a11402f/frameset.htm
    Marc.

  • Post Installation steps for Messages archiving from Adapter engine

    Hi,
    Can any let me know the post installation steps for Archiving messages from AE.
    We are archiving the messages from Integration Engine (BC_XMB).
    This note refers to the Post installation steps... But i could not find them anywhere.
    Note 790226 - Messages in AdapterEngine/PCK database do not get archived
    Thanks,
    Tanuj
    Message was edited by:
            Tanuj Kumar Bolisetty

    Hi Tanuj,
    have a look at note 872388
    "2) For messages in the Adapter Framework: note 816022, question 8
    (deletion) and
    http://help.sap.com/saphelp_nw04/helpdata/en/cf/b2fc3f48ecc742e10000000a
    1550b0/content.htm (archiving)"
    Additionally consult the troubleshooting guide,page 110
    Set the adapter service properties (note 791379)
    Hope it helps
    Jaime

  • Post Installtion steps for PI 7.1

    Hi..
    we have completed the PI 7.1 Installation, can you please provide the Post Installation steps for this PI 7.1
    Thanks in advance,
    Pasi.

    Hi..Prateek,
    I checked with Basis Team they are saying that they have done this Post Installation Steps.
    When i am trying to open the Integration Builder (SXMB_IFR), i am getting the msg is " Enterprise Service Builder Address not mentioned " .
    how to solve this ?
    Thanks in advance,
    Pasi

Maybe you are looking for

  • Flash Player para de funcinar ao desinstalar o anti-virus

    Comprei um computador que veio com o McAfee para testar por um mes, como nao pretendia usar este anti-virus desinstalei ele para colocar outro, so que apos desinstala-lo o flash player parou de funcionar no internet explorer e o gadget do windows tam

  • Using RowID to get the first instance of a value in a table

    I have a table of the structure SECURITY( COMPANY_ID NUMBER, SECURITY_ID NUMBER, CUSIP One company can have many CUSIPs asociated with it and I want to find the best way to find any valid CUSIP for the company_id using PL/SQL. Here is my approach, I

  • Help - please tell me if sth is wrong with my plan!

    Hi folks, I have joined this community because I am a wimp.   Well, here is the thing: I have a one year old Lenovo R61 with an OEM version of Windows XP Pro 32bit version pre-loaded. Now I would like to do three things at once with this laptop: A) u

  • HT1462 How do you enable the camera on safari?

    I am trying to partipcate in the smallword50.com sing-a-long for Disneyland's 50th celebration of "It's a Small World", but in order to do so, it keeps telling me to turn the camera on... not sure how to do this lol it might be fairly easy! Ha, I eve

  • IP SLA Applications

    Hye to All, I have a question:  when an equipment can perform the following operations, dhcp dns echo ftp http jitter pathEcho pathJitter tcpConnect udpEcho Does it mean that it can do all of the following (below) : • Echo Operations – Echo – Path Ec