Unable to see user created in Child system

Hi There,
I am facing a peculiar issue with CUA.
1) A user created in CUA is not appearing in Child system.
2)When I checked the IDOC status it is Green(03) in both the systems.
3)When I remove the system in the CUA for that client , it is fine.
4)When i again added the system it is fine in IDOCs as well and when I reset the password the status of IDOC in child system says user does not exist.
Please let me know if anybody had similar issue and any solutions I could look into

Just to make things more clear.
1)logical systems would not be an issue because the idocs would not appear in child system had it been the case.
2)I tried the option to remove the particular child system from the user profile under systems ,saved and then added the system.
When I went to child system, the idoc says user created but again when I reset the password in the CUA for that system and check the idoc in child systems it fails saying user does not exist.

Similar Messages

I am unable to see the created AD RMS Templates office 2010

Hi,
We have a SBS 2011 server (AD, exchange, DNS, ...etc) and a File server 2008 R2.
We installed the AD RMS feature on the File server and created the templates needed.
On AD RMS client (W7):
-We run the task scheduler.
-We create the registry key:
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\DRM for office 2010 clients
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common\DRM for office 2007clients
On all MS 2007 client hasn't any problems but on all MS 2010 has a problem that: "unable to see the created AD RMS Templates.
Please advise,
Note: I prefer to contact me using my email
[email protected] to acceleratre our communication.

Hi,
We need to check the templates in the path: C:\Users\martinr\AppData\Local\Microsoft\DRM\Templates
first.
Then, if you use 32-bit editions of Office running on 64-bit versions of Microsoft Windows,please try the following command:
HKEY_CURRENT_USER\Software\Wow6432Node\Microsoft\Office\<version>\Common\DRM.
Following this, I recommond do the two methods:
The permission policy path in the ADMX file is setup to use EDITTEXT (Regular Reg_sz), instead of EXPANDABLETEXT (REg_Expand_Sz).
The policy template is setup out of the box expects a static path (i.e. c:\templates, and cannot use %localappdata%\Microsoft\DRM\Templates)
For more detail information, please refer to the following link:
http://technet.microsoft.com/en-us/library/cc179103.aspx
http://technet.microsoft.com/en-us/library/dd772637(v=ws.10).aspx
Here is a similar issue, we could refer to:
http://social.technet.microsoft.com/Forums/en-US/224574c4-599b-4843-b235-f86ac74d03e9/ad-rms-template-problem?forum=rms
Regards,
George Zhao
TechNet Community Support

Users were re-created in Child systems not in Cnetral System (CUA)

Hi,
The set of users were deleted some time back and today i verified in child system (PROD) with criteria as list of users without roles/profiles then I found a set of users in child systems.
Were as those user master records are not showing in Central System (CUA).
I verified the change document, It is showing the deleted date and later some time again it was created with no roles and profiles. On the same date all the others users are also get created.
Then I have checked the change document of a user and verified is there any IDOC was generated in central system on that time and date but I didnu2019t find anything...
I was expecting that the old IDOC's which are in status "distribution unconfirmed" with of the user and later there would be happen many changes for that user and which are get reflected in child system but the IDOC which was in unconfirmed status. When any one try's to execute the process through BDM2 or BD87 for that IDOC then again there would be chance of re-build the user account..... But one thing i was confused is if the old IDOC get re-generate then it has to be shown in the CUA system also?.
It was strange issue, so please let me know what the reason behind it.....
Please help me out...
SV

>
Nishant Sourabh wrote:
> I assume BD87 was executed in the child system and the idocs where manually processed which created these ids back again ....not sure if that is what happened. never seen something like that.
Hi Nishant,
what you are writing is the most common situation of how these users got 'recreated'.
If you have a look at the method for user change idocs, you will notice, that it is the same method for creation and changing (CLONE).
So if you have an unprocessed change idoc in the child system and you delete the user (succesfully) and reprocess this idoc in the child system locally, the user will get 'recreated'.
b.rgds,
Bernhard

Unable to see User eixt macro in SCM 4.1 - When creating a Collective Macro

Hello :
we are SCM 4.1. We have a need to run 4 macro in a sequence. I felt that I could create a collective macro and list the macro's.. The macro are user exit macro's. and I am unable to see them in the drop down list.. tried to search OSS Notes . did not find a lot of info.
Would appreciate any insights and suggestions. We are on SCM 4.1
Raghu

Hello Andy
Thank you for the reply.
I am trying to create a "Collective MAcro" which would run 4 macros. In hte COllective macro there is a drop down option to select the macro that we want to run.. We can select upto 6 macros..
In this drop down list, I am unabel to see the 4 user exit macros. The macro that I want to run in a sequence are "user exit macros". They are active and can be executed one at a time in Interactive Planning.
I am creating a "Collective Macro" as this would ensure that the 4 user exit macros are run in the correct sequence.
OSS note 907177 refers to availabilty of "badi macros" in Collective macro. This is only for SCM50..
We are in SCM 4.1. ANy pointers can be of great help
Raghu

How to delete users in the child systems with CUA?

Hi All,
We have:
1. My SAP ERP 2005 (ECC 6.0)+ Windows 64bit + Oracle 10
2. EP 7.0 + Windows 64bit + Oracle 10
3. BI 7.0 + Windows 64bit + Oracle 10
4. Solution Manager 4.0 (CUA)
We managed all our QA and DEV users in ECC, EP using CUA from the Solution Manager server (Productive servers and all the BI 7.0 System Landscape aren't in the CUA).
My problem is when i want to delete a user. Sometimes if you delete a user in the solution manager (where the CUA is defined) the user still exists in the Child Systems. In fact you can see it with the SU01 only in the child system. I guess the idea is that if you delete the user in the CUA them the user is delete in the child system.
I found this information in the SAP Help:
As well as the authorizations already mentioned, you also need another authorization in the central system for object S_USER_SYS. You can only assign new systems to a new user with this authorization. ( No Problem with this )
When a user is deleted in the central system, the system entry for the user is retained until the deletion is confirmed. If an error occurs, you can repeat the deletion by canceling the system (in the child system).
What does mean: deletion is confirmed?
Best Regards,
Erick Ilarraza

Hi, thanks a lot for your reply.
We used the SAP Transaction SCUG to solve CUA Problem.
It is something about the refresh of the user in the Parent / Child systems, you need to Re-Refresh users and delete it again.
Best Regrads,
Erick Ilarraza

User update in Child system through CUA

Hi,
I created a role in child system and assigned it to the users in the parent system
However, users are not getting updated in the child system
Plz suggest

Did you run text comparison after creating the role ?
If not do that .
[SU01 --> enter user --> Roles --> Text comparison from child system OR run report SUSR_ZBV_GET_RECEIVER_PROFILES ]
Thanks
Prince Jose
Message was edited by:
Prince Jose

User created in ECC system does not appear in Identity management

Hi all,
For the already new built GRC system, I am trying to configure buidling blocks 678: RiskAnalysis and Remediation.
1- In section 5.2 (5.2 Add Roles to Existing Users in User Management Engine) I have to add roles to the users which were created in ECC system. But in Identity management I could not see those ID's existing.
2 - I could not see these roles RE_ADMIN and CC_ADMIN in UME
Could anybody help me moving forward.
Thanks
Lakshmi

Hi,
> 1- In section 5.2 (5.2 Add Roles to Existing Users in User Management Engine) I have to add roles to the users which were >created in ECC system. But in Identity management I could not see those ID's existing.
>
Have you defined Master User Source in RAR ?
> 2 - I could not see these roles RE_ADMIN and CC_ADMIN in UME
>
Initially you have to upload Roles in Identity management. There will be 3 files:
cc_ume_roles.txt
ae_ume_roles.txt
re_ume_roles.txt
Upload them in identity management then you will get these roles.
Thanks
Sunny

CUA- Deleting user IDs from Child systems

Is there a possibility of configuring CUA in such a way that user IDs can be created and access can be updated from CUA but deleting user IDs should be taking place only in the child system (Not in all the child systems)?

Generally good advice to keep the uniqueness of UIDs over time, also after Elvis has left the building
What you could consider is a CUA RFC user which is not authorized to delete UID's and schedule a purge job for those IDOCs which deleted only them.
However these sorts of "workaround" solutions are not the best advise, to be honest. What happens it someone temporarily assigns SAP_ALL because there is a big problem and authorizations should be excluded as the cause to get it working again?
Also, every time a new child system is added to the CUA you will be flooded.
My advice: Rather change your procedure (as discribed by Jurgen).
What would be interesting to test is whether you are authorized to move a user (change the authorization relevevant group which they currently have) to a group which the CUA user is no long able to subsequently administrate? But theen you will still be hunting down IDOCs from time to time, most likely.
If your shop is big enough to have these systems you have described, then you might want to consider an IdM system to replace your CUA at some time.
If you wish, I will move this thread to the IdM forum.
Cheers,
Julius
ps: Please do not cross-post.

Anonymous FTP User created by the system lacks the user name

I'm experiencing some problems and inconsistencies in the Mac OS X Server 10.4.7 FTP service.
First I'll report this behaviour to evaluate if it's worth a bug report.
I read in the that the user with user name 'Anonymous FTP User" and short name 'ftp' is created by the system the first time the FTP server is accessed using an anonymous user.
I noticed that the user is indeed created but its user name field is empty. It doesn't have the associated LDAP record, too.
If I try to manually create a user with an empty user name field WGM errors, so could this be considered a bug?
PowerBook G4 867MHz 12,1" Mac OS X (10.4.7)

Hi
Using NFS u can write the file in XI directories only not on other system
If u want to write in other System (ECC in u r case) u shud use FTP protocol.
NFS ===> xi local path
other path ==> use FTP protocol
thx
srini

CUA-User does not exist in Child system

Hi All,
User has been created in child system through central system,and respective roles also assigned through central system.Now,the issue is when user is trying to log in child system,it's showing user does not exist.
I did Text comparison also,status is okay.
Kindly help!
Regards,
Naveen

Hi,
Could you just login to the child system and view the userid created through su01?
1. In case you are unable to do the same, there is certainly a problem with idoc distribution for which you can find the reasons in SCUL.
2. In case the userid exists in child syatem, you need to check if address data for the userid is being maintained in child system or not.
In case you get an error message " Address data not maintained" while viewing the userid through su01 in the child system, then you need to execute report RSADRCK2 in the child system.
You may refer to the following link in this case:
http://help.sap.com/saphelp_sm32/helpdata/en/85/91cd3b11571962e10000000a11402f/frameset.htm

CUA - Users not created in Central System

Hi - Just put in CUA into a Solution Manager 4.0 client - and have the following issue.
After performing SCUG - the users are brought into the central system BUT not created into the central system.
For example:
Child system is CLNT100
Parent system is CLNT200
In CUA - if I search on the user - I can see it exists in CLNT100, but no entry is created in CLNT200.
This is an issue as I can't use SU10 in CUA - to do mass changes as the users don't exist in this client.
I am pretty experienced with CUA - but have not seen this before - is there some new settitng that I need to make to create the users in the CUA client when performing SCUG?
Thanks

Hi - you only need to perform SCUG in the central system.
I have brought all the users accross from each child system.
I think I may have incorrectly analysed the error.
What I am trying to do is use SU10 in the Central system to make changes on users in the child systems. Issue is that none of the users that are in the child system only show up in SU10.
I therefore think that this is an issue with SU10 in CUA parent - as it is only picking up uses if they exist in this CUA parent client (i.e. not if they only exist in the child systems)
Is there any way to change the behaviour of SU10?

CUA: Model view not created automatically in Child System

Hi, I try to create a CUA with just a child system thru txn SCUA. The result of generation is good and all green. The part that is not right is I do not see the model view created in txn BD64 of child system, I can see it created in master system. Both RFC of master and child system are working fine. I do not see errors at WE20 & WE21 as well. Under this situation, I can see CUA active in master system but not child system. Hence, CUA is not working as it says in master system.
I have setup CUA couple of times before but this is the first time that I encounter such a weird situation. Does anyone has any clue where could have gone wrong?
Edited by: Annie Chan on Jul 25, 2008 5:23 PM

Hi Everyone,
It is indeed a RFC issue but it was a silly mistake with the incorrect hostname that I am suppose to connect to. Hence, the Distribution Model doesn't exist in the child system. Nervertheless, your advise does point to the right direction.
Thanks so much for your input. Points are granted as accordingly.
Regards,
Annie

New role in CUA user record not getting pushed to child system

I added a new child system to our CUA setup. I've confirmed that the RFC connections from both sides are working properly (test connection succeeds) and I've successfully completed the user transfer function in SCUG. All exisitng roles assigned to the users in the child system are now appearing in the CUA central system as expected. I added a new role to a user via SU01 in the central system to this child system, but when I go to the child system, it does not appear in the user's SU01 record. Any ideas why this would not be syncing properly?
Thanks,
Michael

Hi,
Whenever you create a new role in child system, it has to be sync up with the central system.
To sync up with the central system, login to central system goto su01>enter any user name>go to roles tab- click on Text comparision from chiled system. Its navigate to another screen, there you have to mention the child system and click on execute. it syncs up with child sytem. Hope it will help you out to resolve the issue.
If still you are getting the same issue login to the central system.. goto SE38-- enter the program name as "RSCCUSND" and click on execute there mention the user name and the logical system id of the Child system name, select the parameters which you wanted to distribute to child system and execute it.
Best Regards
Mani

CUA history for child systems

Hi all
I have seen quite a few forum entries about change history and tables to see the mapping of roles to users, such as:
Table AGR_USERS (actual assignments)
Table USLA04 (actual assignments in a CUA central system)
SUIM report RSSCD100_PFCG for viewing change documents of roles.
- but does anyone know of any reports / tables that show the change history of a user/what roles they have had assigned, for child system in a CUA set up?
SUIM and RSSCD100_PFCG only show the local client... we have lost our child systems user <-> roles mappings after a refresh and we want to see history of what roles where assigned to what user, but running these reports in the CUA system only shows local users, and running it in the child is no good as it's just been refreshed and is a copy of the CUA system now anyway!
Any help much appreciated... we have users in the child system shouting as the don't have the correct authorisations...
Thanks
Ross

Seems nobody knows.... Closing....

Unable to see the "Password Reset" tab in Indentity Store (SAP IDM 7.1)

I am trying to implement Password self-service as per the document "SAP NewWeaver Idenitty Management Identity Center Self-service password reset Implementation Guide" Version 7.1 Rev 2. In this guide, references are made to the Password Reset Tab in the Identity Store properties view in Identity Center. I do not see that tab in my view.
I followed the standard inst guides during the upgrade. Its a fresh implementation and we are on IDM 7.1 SP5
I have checked out couple of similar posts where it was resolved by installing SP3/4, does anyone have any other solution than applying the SP again ??
What do I need to do to have that tab?
Thanks

Matt,
Ours is a fresh installation
According to the PSS 7.1 V2 guide, i completed the section 1 where i creted the UME roles and the
Section 1: Creating the tasks
Creating the folder for the tasks
Creating the password reset task
Creating the password reset failed task
Then started the Section 2 Configuring the identity store and the first point the document says is "Select the identity store in the console tree and choose the "Password reset" tab: " which i am unable to see the tab in my system.
I am i missing some config steps here ? again i am just goin line - by - line what the doc says
Thanks
Edited by: Chetan on May 23, 2011 4:43 PM

Unable to see user created in Child system

Similar Messages

Maybe you are looking for