User master comparison

Hi All,
In one system I created a role and assigned a user to it without doing the user master comparison. Using this user, I tried accessing the transactions, but it failed just because the user master comparison not done - correcty according to fundamentals.
In another system, I did the samething but the system assowed to launch the transaction without the user master record is updated.
Could anyone tell me the catastrophe behind this?
Thanks a lot for your time.
Thanks and Regards, Pradeep

Hi Pradeep,
please try that once again with a complete empty user. maybe the user had that authorization already through another role/profile.....
Please also keep in mind, that if you save a user in SU01 the user comparison is also performed automatically.
b.rgds, bernahrd

Similar Messages

Error : User master comparison incomplete

Dear All,
I am working on a CUA system. I have modified an existing role(it was a requirement to change Material Mvt typ) and transported to QA system. then run PFCG_TIME_DEPENDENCY.
But when I check user -> and roles using SU01, I see the role I transported is in RED color. but then when I try to do a user comparison I got new error user "Maximum profile exceeded for user ABCXX" , because of this error I cannot complete user comparison.
I also tried PFUD -> Cleanups first, then Profile matching unfortunately it still gives User master comparison incomplete.
Is there a alternative way to compare users except "ABCXX" which has "Maximum profile exceeded for user" or how do I skip this message and complete user comparison ?

Souyee,
If user needs access,then remove unimportant tcodes from the user menu.
or
If you have similar user id , without profile issues,then you can copy that id .(i.e if it is happening for only one user id)
NOTE:
even if you are able to do the user comparsion,Some of our users are not able to execute some transaction codes, even though the required roles are granted. these type of problems will occur.
Other option is:
you need to identify the profiles assigned and ensure that they are below 312, as you canu2019t assign more than 312 profiles to a SAP User ID.
If the issue happens even with very few profiles, verify the Number of authorizations in User Buffers value in the Instance profile. The value for Auth/authnum ber_in_userbuffer parameter can be increased_. The size of the buffer must always exceed the maximum number of authorizations as authorization checks are made only against those in the buffer. The default value is 800, but this can be set to a value which is between 1u20132000.
What happens when an instance profile parameter is set outside it's range ?
Note: Take the help of basis guys,if at all you need to change the Instance value.
Thanks,
Sri

User master comparison incomplete; see long text

I'm using SU01 and PFCG to assign roles. However, I often got the following error when I want to compare users and so on.
<b>User master comparison incomplete; see long text
Message no. S#260</b>
I always need to ask the administrator to do the comparison for finishing the role assignment. We are guessing that my account is lacking some authorizations.
Does anybody have any idea?
Sunny

Hello,
it's depending on an entry in table PRGN_CUST. If there's an entry CHECK_S_USER_SAS YES (view via SE16), then it's the authorization object
S_USER_SAS. If not, then there are the 'old' authorization objects S_USER_GRP, S_USER_AGR, S_USER_PRO and S_USER_SYS getting checked.
Anyway, using SU53 might be quicker than scanning through the different authorization objects.
Regards Wolfgang

Comparing User Master Records in SAP ECC 6.0

Hi,
I have 2 questions,
1.We have an issue with user master records comparison. we have assigned a certain role to the user with validity till 15.11.2010. But user had authorizations related to this role till 21.11.2010. The profile got deleted on 21.11.2010 from user record instead of 15.11.2010.Further I noticed that there was fresh assignment for this role as on 18.11.2010 for another new user. whenever fresh assignment happens the user master record should happen automatically but it is not the case here ? what can be reason ?
2.By google I have found one report PFCG_TIME_DEPENDENCY which can be scheduled as a background job periodically for user masster records comparision. I just want to know will there be any adverse impact on system performance if we run such jobs periodically ?
Please help.
Thanks in advance.
Regards,
Syam sundara babu.v

Hi Nikhil,
1.We have an issue with user master records comparison. we have assigned a certain role to the user with validity till 15.11.2010. But user had authorizations related to this role till 21.11.2010. The profile got deleted on 21.11.2010 from user record instead of 15.11.2010.Further I noticed that there was fresh assignment for this role as on 18.11.2010 for another new user. whenever fresh assignment happens the user master record should happen automatically but it is not the case here ? what can be reason ?
This happens if the role is assigned twice and only 1 instance is removed.
2.By google I have found one report PFCG_TIME_DEPENDENCY which can be scheduled as a background job periodically for user masster records comparision. I just want to know will there be any adverse impact on system performance if we run such jobs periodically ?
The PFCG_TIME_DEPENDENCY job is required to perform the user master record comparison, so that these kind of inconsistencies will not occur. There will not be any system performance issues and it should be scheduled to run Dialy after 00:00 hours, so that the expired profiles will be deleted.
Alternatively, you can use PFUD transaction to create this job or to run the comparison once.
Hope this answers!!
Best Regards,
Raghu
Edited by: Raghu Boddu on Nov 24, 2010 9:06 PM

User master comparision

Hi Experts,
Could you please advise on CUA User master comparision.
CUA with 9 child systems.
If the user master records showing yellow on particular roles assigned to users. Composite roles in CUA not showing yellow in users tab but when you going to child system for that particular role it is showing yellow.
Do we need to do user comparision manually in child systems?
Please advise.
Thanks,

Hi,
Better option will be scheduling a background job 'PFCG_TIME_DEPENDENCY".
Another option would be, Go to PFCG -->Utilities -->Settings -->Check the box 'Automatic User Master Adjustment When saving the role'. It will adjust the role each and every time you click the save button.
Another small tip,
If you are trying to add a role to a user in a CUA system which has been transported shortly form DEV system(or any) and if it is throwing you a error "Role does not exist in the system" even if the role is available in the respected child system, Just go to the PFCG of child system, enter the role name and go to 'Environment' and selsct option 'Text comparison for CUA central system'. Now u'll be able to asssign the role.

How to download (export) user master data from java code

Hi,
I've an requirment. I need to export the user master through java code from a dual stack system
The requirment is like an autmated of what we do in indentity management export.
Thanks in advance
Regards,
mcsekar_21

Solved it..
Wrote a bean using UME factory, to download, upload and modify.

Create the user master records using the Enterprise Portal

Hello gurus!!
I'm configuring SRM 7.0 with EP.
I'm configuring the organizational structure, and steps guide (pdf and Solution Manager ) are:
1. Go to transaction SU01 and create an ABAP User. (SRMADMIN)
2. Assign this user the administrator role /SAPSRM/ADMINISTRATOR
3. As the administrator, creater the organizational plan
4. Create the remaining organizational unit
5. Using the Enterprise Portal application, Business Parter:Employee, create the user master records for the departmental managers.
How I must create the user in Enterprise Portal? What user I have to use to log on in the Enterprise Portal application? Has the user to be integrated in the organzational structure??
Thanks in advance!!!!
Best regards.
Maria.

Hi,
You can create users in WebDynpro application. You can also create users in USERS_GEN transaction.
Regards,
Masa

SAP R/3 Mass User Master Record Update

I am currently involved in a project to update specific fields of the User Master Record for all applicable records from an external source.
For the mass change i was thinking along the lines of CATT, BDC/ABAP or Table Changes. Obviously table changes was out first because of the dangers of causing inconsistencies among the SAP standard tables. CATT i think is not really made for this purpose but could probably do the job, and BDC or ABAP is probably the right way to go.
Any suggestions/comments?
Thanks

hello Ashley,
All 3 options are good.
I personally use CATT for this purpose however it depends on what your trying to update. SU10 is another option but its drawback is that you can use only 1 value at a time. In CATT however you can use different values for different users. Also time involved in creating CATT tool is very less.
Obviously you have options like BDC/LSMW and ABAP also with you.
Regards.
Ruchit.

Insert data in a user master data Table

Hi every body,
I've created a User Master data table named 'MyTable'. i want to add data to this table but there is an error which occur : 'to generate this. First Define the Numbering Series in the Administration Module'. I want to add data to this table using C# code, without using UDO.
Is it possible?
Thank you for helping me
Haifa

Hi,
thank you for your answer.
I didn't understand very well, i will ask the question in an other way.
it is possible to insert records in a master data table by using the code C#
I mean :
            usertable = _Company.UserTables.Item(tablename);
            usertable.Code = code;
            usertable.Name = name;
            usertable.UserFields.Fields.Item("U_ContCode").Value = ContCode;
            usertable.UserFields.Fields.Item("U_CardCode").Value = CardCode;
            lRetCode = usertable.Add();
without encountering the problem of numbering series.
Haifa

Export and import user master records

Hi,
We are planning for system refresh activity. So I am planning Production server data to copy in Quality server. I want retain Quality server users like that only. Is there any way I can export user master records and import it later?
Please advice us.
Our environment is 4.6 C, Oracle 10g, windows 2003 server.
Regards
Satya

Hello Satyanarayana,
please be aware, that with SAP_USER standard change logs are not copied. So if you have such in your QAS, they will be propably overwritten by the PRD content. You will loose then change logs for role changes, which are kept in the standard change documents (cdpos,cdhdr).
User change docs are copied together with the users with provfile SAP_USER.
That is just for your information. In general there will not be change documents for roles in QAS.....
b.rgds, Bernhard

How to send User Master Data through XI

Dear SAP gurus,
We are currently configuring the e-recruiting module on a separate server than HR (following the SAP standard).
As our CUA is not connected to the E-REC systems, we are looking for a way to send properly the User Master Data from HR systems. We have seen that the report RSCUSND enable us to send iDoc with message type USERCLONE, but this repport can be only run from the CUA then we can t use it.
Another solution is to make a client copy with the profile SAP_USER, but we can t use this solution because in order to get the User Master Data in a real time we should make the copy each 15 minutes.
We can t figure out with the question, what is the standard way to send User Master Data to our E-Recruiting module
Regards
Hadrien

HR side:
1-Below t-code is what you should go through:
SM59
BD64
WE20
WE21
2-The key interface object is as below(I used it in LSMW, XI should be the same):
Business Object      HRMASTER
Method               SAVEREPLICAMULTIPLE
Message Type         HRMASTER
Basic Type           HRMASTER02
XI side:
1- The XI has the HR interface package in IR. You just need to select those you need.
2-Goto ID and do interface mapping between IDOC interface & XI outbound interface
All above is the skeleton processes. U can consult with XI consultant in details.
Hope helpful..

Maintain output device in user master data

when we try to print the Purchase order smartform we are getting the
following update terminated error message.
" Please maintain output device in user master data".
1. If we maintain output device in my user profile as any printer name
then we are not getting the update terminated error message.
2. when we select the network printer it is always printing
using the output device maintained in the user profile (example
LOCL). it is not printing using network printer.
when we select the network printer it should overwrite the user profile
output device.
Can we have the network printer selected irrespective of the printer
maintained in the user profile?
Please provide the solution
Title was edited by:
Alvaro Tejada Galindo

Hi
If you mention printer as LOCL the system will use network printer and the printer will be controled by Windows.
If you specify printer name the printer will be controled by SAP.
I hope now you can re-analyze your issue.
Regards
Surya.

User master records

Hey everybody!
I'm a newbie in the SRM-topic. Do I have to maintain 'user master records' in SRM and in the ERP? If I only maintain in SRM, how is this booked in the Backend-System (without 'user master records')?
Thanks in advance,
Felix

Felix,
It is not mandatory to maintain the same User Master Record in SRM and ERP. The User Master record is maintained in SRM for end users perfoming shopping cart functionality or processing any other request pertaining to SRM. Follow on documents booked in the backend system are created by a background RFC user which facilitates the connection between SRM and the backend system.
Also a User Master record (SU01 User) is maintained in SRM so that this will facilitate the creation on an EBP user. An EBP user consists of the followings objects:
1.) Position
2.) SU01 User
3.) Central Person
4.) Business Partner
The relationship built between these objects creates an EBP user which can perform shopping. These relationships are stored in table HRP1001.
Please assign points, if answer is usefull !!
Sundeep

User Master Records/Tables - Exporting User tables for Recovery

Hi there,
Work in the Security area ....Outside of the client export of SCC8 for user master records/roles. Is there another recommended method for saving user tables that can be re-imported on the chance of deletion of users and roles and can be selectively re-imported if needed. For instance if a particular User Grouip was deleted with X number of users, could that be re-imported by a selective means ? SU10 is handled delicately in prod when used but unwanted results still occur. Approaches appreciated ..

Hi,
Try the following..
BAPI_USER_CREATE Create a User
BAPI_USER_CREATE1 Create a User
Hope that helps!
Regards,
Tanveer
<b>Please mark helpful answers</b>

Export and import change document for user master data

Dear Gurus,
I have two queries on change document for user master data:
1. Are there any approaches to export and import change document for user master data?
We often do system copy from PRD to QAS for UAT and troubleshooting. Before system copy we export the user master data from QAS and then import after the copy process. We would like to keep the change document for user master data on QAS from being refreshed from PRD for security reason.
2. Change document for Role change in QAS
When the role is created or modified in DEV and then transported to QAS, the role change document doen't include this change log. The role change document in QAS only records those role changes directly made in QAS.
Could you advise this is by SAP design or are there any approaches to record this transported role change in the role change document in QAS?
Thanks
YBY

1. Perhaps you want to consider a system copy to a "virtual system" for UAT?
2. Changes in QAS (as with PROD as well) will give you the delta. They should ideally be clean... You need to check the source system.
Another option is to generate the profiles in the target system. But for that your config has to be sqeaky clean and in sync, including very well maintained and sync'ed Su24 data.
Cheers,
Julius

User master comparison

Similar Messages

Maybe you are looking for