SAP CUA

Hi All,
I am currently working on SAP CUA.
I wanted to know where the data for CUA is stored in case of roles and profiles
There are two tables i came across
a)USRSYSACTT (has lnaguage as one of the column)
b)USRSYSACT
Which table should be used to check the profiles.
What is difference between the two.
Is the data in both consistent
Best Regards
Manoj

Hi Alex,
Thanks for the reply.
I would explain you the scenarion in more detail.
Imagine if there is a SAP CUA setup .
Admin system ==> ADMCLNT800
Child system 1 ==>CH1CLNT800
Child system 2 ==>CH2CLNT800
System ADMCLNT800 has data as
a)role1
b)role2
c)profle1
d)profile2
System CH1CLNT800has data as
a)role3
b)role4
c)profle3
d)profile4
System CH2CLNT800 has data as
a)role5
b)role6
c)profle5
d)profile6
Now each of them will have it own data repository specific to it like user ,profiles,roles.
But i am interested in the CUA data repository ,which i think would be in the admin system containing all the above data in a master place.
Now i am interested in knowing this table.
Please let me know if the scenario is clear.
Best Regards
Manoj

Similar Messages

How can I provision users to SAP CUA with their passwords Disabled?

I need to provision users to SAP CUA with their passwords disabled. How can I configure this if at all?
Thanks!

Thanks for the quick response. I am confirming with SAP team if its permission issue.
Following is the snippet from JBOSS log:
2009-04-14 11:06:26,659 INFO [STDOUT] Running SAP CUA Create User
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): Create User Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createUser(): userId :00000209, userGroup:,lastName:Employee 209,firstName:Last Name - 209,userTitle:0003,langComm:,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:,decimalNotation:,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:,userType:,RoleProfile:,RoleProfileOption:Role
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:26,659 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:26,690 INFO [XL_INTG.SAPCUA] createUser(): Create User Start
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :User 00000209 created
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:102
2009-04-14 11:06:29,487 INFO [XL_INTG.SAPCUA] addRoleToUser():Add Role to User
2009-04-14 11:06:29,753 INFO [XL_INTG.SAPCUA] getChildData() :getUserRoles method is Started
2009-04-14 11:06:29,800 INFO [XL_INTG.SAPCUA] getUserRoles() :getUserRoles method End
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725190128, maxLifeAfterPassivation=1200000
2009-04-14 11:06:30,128 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 changed
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:048
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] Role added successfully to the user.
2009-04-14 11:06:30,362 INFO [XL_INTG.SAPCUA] changePassword(): Change Password Start
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Password Not Allowed
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:E
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:001
2009-04-14 11:06:31,284 DEBUG [XL_INTG.SAPCUA] changePassword(): chanegPassword eventPassword Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] changePassword():Change Password Error:Password Not Allowed
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():ChangePassword error after user creation:SAP.PASSWORD_CHANGE_ERROR
2009-04-14 11:06:31,284 ERROR [XL_INTG.SAPCUA] createUser():Deleting the User
2009-04-14 11:06:31,284 INFO [XL_INTG.SAPCUA] deleteUser(): Delete User Start
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725192222, maxLifeAfterPassivation=1200000
2009-04-14 11:06:32,222 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725194769, maxLifeAfterPassivation=1200000
2009-04-14 11:06:34,769 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user 00000209 deleted
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] deleteUser(): User deleted SUCCESSFUL
2009-04-14 11:06:43,863 DEBUG [XL_INTG.SAPCUA] createUser(): 00000209:SAP.USER_CREATION_FAILED
2009-04-14 11:06:43,863 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:43,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] Running RemoverTask
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, PassivatedCount=0
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.AbstractInstanceCache] removePassivated, now=1239725203925, maxLifeAfterPassivation=1200000
2009-04-14 11:06:43,925 DEBUG [org.jboss.ejb.plugins.LRUEnterpriseContextCachePolicy] RemoverTask, done
2009-04-14 11:06:44,878 INFO [STDOUT] Running SAP CUA ADD ROLE
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] addRoleToUser() :Add Role
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User 00000209 does not exist
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2009-04-14 11:06:44,878 ERROR [XL_INTG.SAPCUA] addRoleToUser() :User Id :00000209 not exist in target SAP system.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): START SAP Connection Close.
2009-04-14 11:06:44,878 INFO [XL_INTG.SAPCUA] closeCUAConnection(): SAP Connection Close successfull.

SAP CUA Vs Corporate LDAP

Hello All,
Could anybody please let me know the pros and cons of the SAP CUA and Corporate LDAP?
Please this is urgent
Thanks,
Leena.

Hi All,
Can anyone please suggest the advantages/disadvantages of SAP CUA over Corporate LDAP.
I've gone through several threads and a lot has been spoken about it but still I would like to know the pros and cons of each approach so that technical consultants can decide to choose the best as per their landscape.
Please also suggest the differences in terms of complexities and costs incurred in implementing the same.
Thanks & Regards,
Anurag Gwari

SAP CUA connector changes password in master system AND child systems?

Please confirm if OIM can change the password in both SAP CUA master and child systems through SAP CUA connector. The connector guide mentions the following parameter can be defined in SAP CUA IT Resource.
Parameter: SAPChangePasswordSystem Flag that accepts the value X or ' '
If the value is X, then the password is changed
only in the master system. If the value is ' ', then
the password is changed in both master and child
systems.
This parameter is used by the Reset
Password function.
Thanks!

Hi,
1) You can use report RSCCUSND to distribute users from CUA to child client. Check section "Sending User Master Data to a Child System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
2) if the user account has not been synced to CUA then you should be able to delete it in child system. The button should be displayed for unsynced users. You can use transaction SCUG to sync users between new child system and CUA. Check section "Transfering Users from New System" in [CUA cookbook|http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/fe4f76cc-0601-0010-55a3-c4a1ab8397b1?quicklink=index&overridelayout=true].
Cheers

We have SAP CUA on Solution manager 4.0

Hi,
We have SAP CUA on solution manager 4.0,SAP BASIS component 700. Do you know what is the latest Support pack and version for solution manager and what is netweaver identity management.Which one is better for CUA environment
Thanks and Regards
Yakoob.

Hi,
Netweaver Identity Management (IdM) should replace SAP Central user administration (CUA) somewhere in the future. As far as I know SAP still supports CUA but doesn't develop further enhancements for it, because they see IDM as the new product. So when you still want to work with CUA then you can create a new one on your new SolMan and you have to move the administration to this one.
Regards, Basti

OIM - SAP CUA Connector - Unlocking Accounts

Hello All
We are implementing the Oracle Identity Manager connector for SAP CUA, and have the following concern:
If a user is locked manually by the SAP Security Administrator in a target SAP System (Prod for example), what is to prevent the End User from logging into OIM Self Service and unlocking themselves?
The OIM Connector Doc seems to state that the target system is unlocked regardless of locked state (meaning it sends an unlock request regardless of whether the user is locked or not).
How does this take Maintenance/Downtimes into consideration (where no business/end users should be in the system)? What about fraudulent or suspicious accounts (where the Security team has frozen/locked someone's account to prevent further activity)?
My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
Just wondering if anyone has experience with OIM connecting to SAP CUA

>
Nigel Wyman wrote:
> My thinking is that if an SAP Security Admin has locked an account, OIM should not unlock the account. The only unlocks which should take place are for Incorrect Passwords?
>
> Just wondering if anyone has experience with OIM connecting to SAP CUA
Not worked with OIM, but worked with SAP IDM/GRC:
But I was asking why you would use CUA once you will have OIM working ?
1.you should have only a single point of user administration, why dont you lock the user from OIM instead of logging into CUA.
2.In our present project , DEV and QA we are using ACCESS enforcer for all user administration purposes with approval workflows, it works very well. security should not login to the systems without approval.

IDM-SAP CUA Integration

I have been under the impression that instead of creating accounts on each SAP child systems (SAP ECC, SAP Portal, SAP BI etc), we can create the accounts in SAP CUA using IdM and then provide information to SAP CUA such that it does further provisoining on SAP child systems
Is this possible ?
So, far I have not been able to create such account. I am successful in creating accounts in SAP CUA, however, no matter which attribute I use (cuasystems, activityGroups etc) to represent a list of SAP child systems to be passed to SAP CUA to create account, it does not work.
I am definitely out of ideas and looking for some help.
Thanks,
Rajesh

I think there is a setting on the SAP CUA system and the child systems that needs to be set correctly.
We have an environment where we provision a user to CUA and assign the user roles (direct activity groups) that map to BI and ECC.
CUA then uses those roles and the systems they map to in order to provision to those child systems.
Check your SAP configuration, because this worked fine for us. One thing to note, is that changing an existing user's password in CUA will NOT replicate to child systems. So you may have to manage those child systems directly to change passwords.

Regarding SAP CUA vs Corporate LDAP for authentication purposes

Hello All:
Could anyone please give more information about SAP CUA and the corporate LDAP? Please suggest which is more advantageous and what is the cost involved in each of these. These are the options for the authentication of SAP Enterprise Portal in our system here. We want to figure out which has more advantages over the other one.
Thanks,
LBuegg

Hello all,
Appreciate your response for this query. We need to figure out the options soon. Its kind of urgent.
Thanks again..
L Buegg.

SAP tables used to fetch role names into 'Lookup.SAP.UM.Roles'

SAP User Management Lookup Recon schedule task is used to populate all the Lookup's defined in 'Lookup.SAP.CUA.LookupMappings'. In case of the lookup 'Lookup.SAP.UM.Roles', the description of the SAP Role is populated in Decode value.
In our environment, the SAP role description is changed in the table 'USRSYSACTT' for both LANGU types 'E' and 'D'. However, when we run the schedule job, we are unable to see the updated value of description in the lookup 'Lookup.SAP.UM.Roles'. Please let us know which SAP table is actually being used to fetch the role information in OIM.

Dear Satish,
Do you have any red alerts on top of your change request?
If yes, you cannot change the status of this change request.
Do a double click on the alert flag and clear/maintain any alerts first.
I had just the same problem.
Yours
Markus

Can I access cua SYSTEMS- SUBSYSTEMS using remote BAPI calls

I am using an external application to create users on a SAP CUA system and then push them down to the child systems. I can create the user fine but I cant get the create to actually push the user down to the children. If I create the user natively and push it down, I can see SYSTEMS->SUBSYSTEMS coming back and can pull the correct subsystem values from it. That is not a valid input parameter for BAPI_USER_CREATE1 or BAPI_USER_CHANGE though. What is the best call to set SYSTEMS->SUBSYSTEMS?
Thanks in advance.

In case anyone is interested in this, the correct call to use is BAPI_USER_SYSTEM_ASSIGN. This is a new call that is available with note 992375.

CUA repository

Hi All,
I am currently working on SAP CUA.
I wanted to know where the data for CUA is stored in case of roles and profiles
There are two tables i came across
a)USRSYSACTT (has lnaguage as one of the column)
b)USRSYSACT
Which table should be used to check the profiles.
What is difference between the two.
Is the data in both consistent
Best Regards
Manoj

Installing the patch, re- importing the SAP Provisioning framework (I selected 'update') and recreating the jobs didn't yield any result.
When examining pass 'ReadABAPRoles' of Job 'AS ABAP - Initial Load' -> tab 'source', there are no scripts used .
After applying the patch we decided anyway to verify the scripts (sap_getRoles, sap_getUserRepositories) in our Identity Center after those of 'Note 1398312 - SAP NW IdM Provisioning Framework for SAP Systems' , and they are different
File size of SAP Provisioning Framework_Folder.mcc of SP3 Patch 0 and Patch 1 are also exactly the same.
Opening file SAP Provisioning Framework_Folder.mcc with Wordpad : searched for 'sap_getRoles' :
<GLOBALSCRIPT>
<SCRIPTREVISIONNUMBER/>
<SCRIPTLASTCHANGE>2009-05-07 08:00:23.54</SCRIPTLASTCHANGE>
<SCRIPTLANGUAGE>JScript</SCRIPTLANGUAGE>
<SCRIPTID>30</SCRIPTID>
<SCRIPTDEFINITION> ... string was too long to copy
paste ... </SCRIPTDEFINITION>
<SCRIPTLOCKDATE/>
<SCRIPTHASH>0940f540423630687449f52159cdb5d9</SCRIPTHASH>
<SCRIPTDESCRIPTION/>
<SCRIPTNAME>sap_getRoles</SCRIPTNAME>
<SCRIPTLOCKSTATE>0</SCRIPTLOCKSTATE>
-> Script last change 2009-05-07 08:00:23.54 -> that's no update !
So I assume the updates mentioned in Note 1398312 aren't included in SP3 Patch 1. Manually replaced the current scripts with those of the note and re- tested : no luck. Same issue.
Thanks again for the help,
Kevin

LDAP - CUA Mappping

Hello,
This is regarding configuration of Microsoft Active directory and SAP CUA (on Solman 7.01)
I have multiple OU (Organization Units) under root in Windows Active Directory.
E.g.;
Root: u201CDC=CompanyName,DC=comu201D
OU: Country 1
OU: Country 2
OU: Country 3.
I want to synchronize users from all above OU (Country 1, Country 2, Country 3) into SAP CUA using LDAP.
See below cases:
Case 1:
I maintain u201CBASE ENTRYu201D in LDAP configuration (LDAPMAP) as below:
BASE ENTRY: OU= Country 1,DC= companyname,DC=com
Result: I get all users of Country 1.
Case 2:
I maintain u201CBASE ENTRYu201D in LDAP configuration (LDAPMAP) as below:
BASE ENTRY: OU= Country 2,DC= companyname,DC=com
Result: I get all users of Country 2.
Case 3:
I maintain u201CBASE ENTRYu201D in LDAP configuration (LDAPMAP) as below:
BASE ENTRY: OU= Country 3,DC= companyname,DC=com
Result: I get all users of Country 3.
Case 4:
I maintain u201CBASE ENTRYu201D in LDAP configuration (LDAPMAP) as below:
BASE ENTRY: DC= companyname,DC=com
Result: I do not get all users of country 1+ country 2+ country 3.
My Question:
Can I set base entry to root level (as in case 4) and get all users? Is that supported in SAP?
If yes, please guide steps required.
Regards.

Hi Martin,
Thanks for the reply.
I can define multiple enteris. And then will have to create multiple synchronization background jobs.
But, the problem is that if client is then defining new country then client has to create one more entry.
Requirement is that if we can have root entry as in case 4 (mentioned in earlier mail) so that all countries are covered.
Is this possible?
Thanks.

SAP Roles and Profiles provisioning

Hi all,
I am trying to provision SAP CUA using the SAP UM Connector.
User gets provisioned, but its role and profile do not get assigned.
The tasks "Add Role" and "Add Profile" are seen as completed.
But the roles and profiles are not seen in SAP.
Thanks in advance

Any inputs from anyone ???

ECC SAP Connector with OIM

Hi,
I have configured ECC SAP Connector on OIM which is running on JBOSS.
The configuration is successful.However when i try to provision user i am getting exception as below--
Point to be noted here is i am using ECC Sap Type not CUA.
2008-11-24 20:37:43,763 INFO [STDOUT] Running SAP CUA Create User
2008-11-24 20:37:43,763 INFO [XL_INTG.SAPCUA] createUser(): Create User Request
2008-11-24 20:37:43,810 INFO [XL_INTG.SAPCUA] createUser(): userId :EAI_12, userGroup:,lastName:eai_1212,firstName:eai_12,userTitle:,langComm:,department:,langLogIn:,timeZone:,telephone:,extension:,Fax:,email:,dateFormat:,decimalNotation:,function:,roomNo:,floor:,building:,code:,commType:,alias:,startMenu:,userType:,RoleProfile:admin,RoleProfileOption:Profile
2008-11-24 20:37:43,810 INFO [XL_INTG.SAPCUA] SAP CUA Create Connection Request
2008-11-24 20:37:43,826 INFO [XL_INTG.SAPCUA] createCUAConnection(): START SAP Connection creation.
2008-11-24 20:37:44,982 INFO [XL_INTG.SAPCUA] createCUAConnection(): SAP Connection creation successfull.
2008-11-24 20:37:45,154 INFO [XL_INTG.SAPCUA] getStatus() :returnStructure:User EAI_12 does not exist
2008-11-24 20:37:45,154 INFO [XL_INTG.SAPCUA] getStatus() :Type:I
2008-11-24 20:37:45,154 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:124
2008-11-24 20:37:45,154 INFO [XL_INTG.SAPCUA] findUser(): User not exist in SAP CUA
2008-11-24 20:37:45,154 INFO [XL_INTG.SAPCUA] createUser(): Create User Start
2008-11-24 20:37:46,701 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :User EAI_12 created
2008-11-24 20:37:46,701 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2008-11-24 20:37:46,701 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:102
2008-11-24 20:37:46,701 INFO [XL_INTG.SAPCUA] addProfileToUser():Add Profile to User
2008-11-24 20:37:46,748 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :You have not logged onto the central system
2008-11-24 20:37:46,748 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2008-11-24 20:37:46,748 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:351
2008-11-24 20:37:46,779 ERROR [XL_INTG.SAPCUA] addProfileToUser():Profile: admin is not added to user: EAI_12 for System: ECC
2008-11-24 20:37:46,779 INFO [XL_INTG.SAPCUA] createUser():Unsuccessful in assigning the profile to the User.
2008-11-24 20:37:46,779 INFO [XL_INTG.SAPCUA] deleteUser(): Delete User Start
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user EAI_12 deleted
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user EAI_12 deleted
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage :Role assignment to user EAI_12 deleted
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage Type:S
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] getStatus() :Mesage NUMBER:090
2008-11-24 20:37:48,138 INFO [XL_INTG.SAPCUA] deleteUser(): User deleted SUCCESSFUL
2008-11-24 20:37:48,138 DEBUG [XL_INTG.SAPCUA] createUser(): EAI_12:SAP.USER_CREATION_FAILED
If you have faced such an issue earlier.Please provide me pointers.
Thanks

Rename the copied file to match the VOYAGER_ID property. For example, if the target system has VOYAGER_ID = VOYAGE14, then the .properties file should be named VOYAGE14.properties.
The Voyager reconciliation agent sends a unique identifier value, called VOYAGER_ID, each time a reconciliation event occurs. This value must match the name of the .properties file being used by the topsecret-adv-agent-recon.jar file for reconciliation.

Roles in child system

Hi,
Is there any way that I can see the roles in all child systems from CUA ? I cant use USLA04 table as it is a new role and no users are assigned.
Thanks in advance.
Regards,
Subha

Hi Colleen,
I have related same question like,
I want to get child-parent relationship for roles and profiles across the SAP CUA system.
there we like to get the list of assigned roles to user, type of role and the subsystem on which it is residing.
Same like we can get through BAPI_USER_ACTGROUPS_ASSIGN
From the table USRSYSPRF we can get similar information for profile but I also want same for roles.

SAP CUA

Similar Messages

Maybe you are looking for