Setting Up Central User Administration

Purpose

With this process, you set up Central User Administration, with which you perform the maintenance of the user master records centrally in an AS ABAP system. Changes are automatically distributed to the child systems. This means that you have an overview in the central system of the user data for all AS ABAP systems.

Prerequisites

· You are familiar with the basics of the integration technology ALE. An ALE system group is used by the central user administration to distribute user data between a central system and child systems linked by ALE.

· Use the most up-to-date AS ABAP system in your system landscape as your central system (if possible with a release status of 4.6C or higher). In this way, the newest functions in CUA are available to you.

Process Flow

...

1. Create administration users

In this step, you create the administration users for AS ABAP systems to be set up completely newly, with which you can perform all further steps.

2. Specify logical systems

In this step, you specify the logical systems. This is necessary, since the systems of the Central User Administration (CUA) are referred to using logical system IDs. In the SAP context, a logical system is a client. Therefore, you first need to set up logical system names.

3. Assign logical systems to clients

In this step, you assign the logical system names to the clients in the AS ABAP systems.

4. Define authorization roles for system users

In this step, you assign the system users appropriate copies of the authorization roles, to give the system users only the authorizations they require to set up and operate the CUA.

5. Determine existing RFC destinations and system users

In this step, you determine whether you systems are already configured for ALE distribution. If this is the case, you do not need to create a new system user, but rather use the existing system user and extend its authorizations by assigning appropriate roles to it.

6. Create system users with roles

In this step, you create the system users and assign the roles required for their tasks to them.

7. Create an RFC destination for the target system

In this step, you define the RFC calls between the central and child systems bidirectionally, to define communication in the system landscape.

8. Create the Central User Administration

You create the Central User Administration (CUA) in this step. The following steps are performed automatically in the background:

¡ The partner profiles are created.

¡ The corresponding ALE model is created or, in the case of changes, adjusted to the new CUA model.

¡ The text comparison for roles is performed with the child systems.

9. Set up field distribution parameters

In this step, you use the distribution parameters to define where the individual parts of a user master record are maintained.

10. Synchronize and distribute company addresses

In this step, you ensure that every cross-system company address key is unique and that company addresses with the same name contain the same data in all systems of the CUA.

11. Synchronize user groups

In this step, you ensure that the user group to which the user is assigned exists in all systems in which the user exists.

12. Transfer users from new systems

In this step, you ensure that the user master records of a system that has been newly included in the selected distribution model are transferred to the central system.

13. Display and process distribution logs

In this step, you primarily check the status of the IDoc distribution when you change company addresses or users.

Result

You have set up Central User Administration for your AS ABAP systems.