CUA configuration

Why do we need CUA?

To manage large and similar user exist in many system in the landscape. This tool help us to manage all the user master record centrally from one client of the system.


Business Benefits:

1. In multiclient environment, Administration made easy (ECC PRD,CRM PRD,SRM PRD).

2. While doing user Audit, consolidation of users time will be reduced.

3. Continues backup of user master data is available in child systems.

4. Flexibly on user master data maintenance (global/local).

5. Security enhanced(centrally).

6. Authorization audits can be done in any child systems, in case of any issues.

7. Short time to create user in one landscape & maintenance.

Step 1: creation of system users

Users before CUA configuration:                                                                                                                          

Creating CUADMIN user.                                                                                                                              

Provide user type as system user and password deatails.

Here client 000 is central client

(roles in the central system)
SAP_BC_USR_CUA_CENTRAL
SAP_BC_USR_CUA_CENTRAL_BDIST
SAP_BC_USR_CUA_CENTRAL_EXTERN

Conformation screen.

System user creation in child system

User id: cuadminchild                                                                                                                                                                    

Roles in child system

SAP_BC_USR_CUA_CLIENT
SAP_BC_USR_CUA_SETUP_CLIENT 

Step-2: creation of RFC connections

In central client: 000

While performing authorization test

 

Resolution:

S_RFC                                      - object authorization is required.

 

Note: the same authorization problems raised in child client also. Resolved with above solution.

 

 Step 3: creation logical system:BD54 or SALE

Step 4: assign logical system to corresponding clients:

 

 5. Create model view:                                                                                                                                                        

 

Resultant screen:

Step 6: Add BAPI to model view

Note: Techinical name in the above screen, should start with Z

Select the below shown option                                                                                                                                        

without changing anything in the above screen, click on execute.

then the below screen will appears.

provide full authorization for create the distributive module

Resultant screen

 

Creating the distributive model

Select the child system in the below system

9. Maintain parameter between central  and child systems:

All tabs data of SU01 can be maintained, global or local here

Test case 1: user reflection

List of user in client 000

 

Creation of new user in central to reflect in child

 

Now, need to check whether the user id created in child system with client 620

 

Provide sap_all profile for cuadmin (system user ) in client 000

 

Trouble shooting 1:

Trouble shooting 2

 

Now the users are reflecting from central system to child system.

 

Test case 2:

In central system.

 

In child system

Reflecting . yahoo success

My references:

https://wiki.scn.sap.com/wiki/display/Basis/Central+User+Administration%28CUA%29+configuration

https://www.youtube.com/watch?v=_S5pGyHfIqI

https://blogs.sap.com/2012/10/16/cua-configuration-steps/