How to check if CUA is used

You can quickly run transaction SU01 and see if the "Systems" tab is available. If it is then CUA has been
configured. Well there is another way to see whether CUA is used. Run transaction code SCUA to see if
there are any distribution models defined. Run transaction code SCUL to see to view logs that are
generated by CUA & if you have logged into a child system, then goto transaction code SU01 and see,
there will be no CREATE activity.
0 comments
Labels: CUA Faqs

What is a CUA buffer? in sap

What is a CUA buffer?

The CUA buffer holds objects from the GUI interface, such as menus, pushbuttons, and so on. In the
database, these objects are held in tables D342L and D345T.
Its size is expressed in KB.
The standard SAP recommendation is:
Up to 2500 KB for small systems, up to 3000 KB for medium systems and up to 6000 KB for large
systems.
0 comments
Labels: CUA Faqs

List users in CUA client

Question: Is there any table that contains CUA only user IDs? (rather than listing all the IDs
connected to CUA). Thanks.

Answer:
once you have a CUA all users which are distributed via your cua should be visible in your CUA-
central. i do not know that you are able to create users in a CUA central bypassing the CUA ...
0 comments
Labels: CUA Faqs

CUA deletion
I have configured CUA in my system but i want to delete the CUA in my system as it is not
configured properly.i have executed rsdelcua report but its still not deleted.kindly provide me the
steps to delete completely.

thanks in advance

Answer:
Make you sure you selected the following options and run it from CUA
1. Under Delete, select "Complete CUA"
2. Uncheck the check box which says "Test"
0 comments
Labels: CUA Faqs

CUA (Central User Administration) and logging of changes

Question: We use central user administration with about 50 client-systems. we want to logg all
changes in SU01 in the master system (also including the changes which will be done in the
client-systems !).
We have 2 approaches :
1. User-Exit in SU01 : does there is such an exit ? we have found nothing
2. Logging of IDOC-Informations (if possible also with user-Exit, perhaps in IDOC-Processing).

What will be the best and easiest way (also regarding upgrades and so on).

Siggi

Answer:
1. yes it exist but not via SMOD, it is a record entry in SSM_CUST.
2. IDOC info is already captured use BD87 to look at the info, note there is an idoc for every client
in every system even though one client is used, CUA is not realy designed for more than one
client "workplace" and R/3.
3. THe change history is already capture for you and avilable in the history reports of SUIM.
0 comments
Labels: CUA Faqs

CUA - Users not created in Central System

Question: Hi - Just put in CUA into a Solution Manager 4.0 client - and have the following issue.

After performing SCUG - the users are brought into the central system BUT not created into the
central system.

For example:
Child system in CLNT100
Parent system is CLNT200

In CUA - if I search on the user - I can see it exists in CLNT100, but no entry is created in CLNT200.

This is an issue as I can't use SU10 in CUA - to do mass changes as the users don't exist in this
client.
I have not seen this before - is there some new settitng that I need to make to create the users in
the CUA client when performing SCUG?

Thanks

Answer:
It shows up that way because the user does not have "System " assignment of CLNT200. You can
do mass changes in SUA on this user since you can always distribute the assignments to
CLNT200.

Answer:
Thanks for your reply - sorry I didn't understand your comment "You can do mass changes in SUA
on this user since you can always distribute the assignments to CLNT200"

Could you please explain a little more to me what you mean?

Currently I can't use SU10 in CUA - as the users don't appear

Answer:
o. k. this one i understand a little ...

do as mithileshkotwal adviced: add the system assignment CLNT200 and distribute.

_________________
0 comments
Labels: CUA Faqs

CUA - User License Information

Question: Does anyone know if it is possible to distribute user license data to other systems
using CUA?

Answer:
I certainly hope this can be done.

I intend to do this work this weekend and my current line of thinging is that I would set up my CUA
clienmt first and then any production clients and do a test.

If it works I will let you know my email address is jwallace@uk.loreal.com

good luck and let me know if you are successful before this weekend

Jack
Answer:
In case anyone else is looking for the answer to this.

There was no note on this, but SAP listed it on the FAQ page for CUA on SAPNet. They are
planning in WAS 6.30 to use CUA to distribute user licensing but is currently not available for
lower versions of WAS.

"There is a development planned for the WebAS release higher than 6.30 to use the CUA to
distribute the user classification required by the system measurement tools, including the License
Administration Workbench (LAW). To use this functionality, you will need a minimum of WebAS
release higher than 6.30 for the central system and WebAS 6.20 plus the relevant support package
for the client systems. In general, you can run the LAW and CUA in the same central system, but
the two do not communicate directly. No license measurement is carried out by the CUA itself,
because the LAW requires more information than the CUA can provide, for example, with regard to
engines (an engine is a chargeable software component that is not exclusively calculated for each
user)."

Answer:
Apparently SAP just issued a note on this so it may now be possible in some versions. Take a
look at note #704412.
0 comments
Labels: CUA Faqs

CUA - showing status 53 not 51 for idocs

Question: I know CUA has been done to death but I can't find this exact problem in previous
posts.

From the parent system idocs are sending fine. When I check BD87 (in target) there are no failed
idocs with 51 but some 53 ones that show record wasn't processed as locked by usermaster (the
CPIC ID for CUA).

Firstly they seem to be tripping over each other as all idocs sent at same time (SU10) and nothing
in the target locking them - I'll get over this as not unusual for CUA.

Secondly why aren't they as 51 so that I can reprocess them in child system? Instead I have to go
back to parent and re-distribute.

Forgot to say we are on ECC 5.0

Answer:
I remeber having the some of the same issues. CUA is kind of funny when there are
inconsistencies in the USER data such as USER GROUPS, ADRESS Data, etc. that's one thing to
check for and the IDOCS did tend to trip over themselves, where a series would come back locked
by usermaster but if I remeber correctly that was due to allocation of resources for processing.
Check with your BASIS team for resources available for processing IDOCS. There is an OSS note
that talks about that; 399271 - CUA: Tips for optimizing ALE distribution performance

brief synopsys

CUA has a restricted number of work processes available which is smaller than the number of
child systems. In this case, it may happen that when sending the IDocs to all systems in parallel,
all work processes of the central system are blocked by ALE processing. For further information,
see Notes 527481 and 400330.

-------------------------------------------------------
For error code analysis look at OSS Note: 333441

CUA: Tips for problem analysis

A brief synopsis:
Evaluating IDOC status records (table EDIDS)

You can start some interesting evaluations with transaction SE16.

Caution:there may be long runtimes here, therefore always specify a key field if you can.

Field selection:

DOCNUM
LOGDAT
LOGTIM
STATUS
STAPA1
STAPA2
STATYP
STAMID
STAMNO

Selektionen:
LOGDAT > Datum der letzten manuellen Bereinigung
STATUS STAMID STAMNO
51 01 124 User & does not exist
51 01 224 User & already exists

51 01 518 User group & does not exist

51 01 519 Invalid user type &
51 S# 234 Activity group & does not exist

53 01 49 Activity group assignment to user & not executedfully

51 01 263 User & is full. Please enter fewer profiles

51 S# 423 No authorization to change activity group &

51 S# 492 No authorization for user in group & in activitygroups
51 01 492 You are not authorized to change users in group &
51 01 410 Maintenance of user & locked by another user

51 01 22 Inconsistency with address

53 01 59 Company address & not found in the system
53 01 67 Unable to assign company address &1. &2 usedinstead.

53 01 102 User & created

53 01 232 User & deleted
53 01 39 User & has changed
53 01 48 Activity group assignment to user & has changed
53 01 90 Activity group assignment to user & was deleted
53 01 46 Profile assignment for user & has changed
53 01 246 User & unlocked, if this is permitted in thissystem
53 01 245 User & locked

51 S# 14 Error in lock management

53 01 406 Program error occurred
0 comments
Labels: CUA Faqs

CUA - Role Maintenance

Question: Hi SAP Fans,

After activate CUA in the WP client, we have to do all profile and role maintenance in WP, however,
I find that some transaction codes are not available in WP, so I have to maintain the role and
transaction in Production Client.

My questions are :
1. when I assign the role to user by using CUA, I have to add the role from both WP and
Production Client system, right?

2. After user comparison, I find that personal data such as first name and last name in the user
profile (t_code : su01) are lost or mess up. Why? and How to fix it?

Please advise.

Answer:
Working as desined,,, WP is an expensive personal web-page builder and not much mose, all
PFCG wants in WP is the menu, so maintianing roles in WP is fruitless, hence the
download/upload feature in PFCG. Roles Must be maintianed in Developemtn and transported,
one target can be WP.

THe name is SU01 is at the discretion of th euser and changeable by then so you would have to
sync these up. I do not recall is there is configuraion to "send-back" the data onced changed. Also
you may have your address management system messed up and you will have to manually
change all the data in WP.
0 comments
Labels: CUA Faqs

CUA - Cleanup user profile (USL04)

Question: Hello everyone

The Central User administration has been installed on our system.

The problem I do have now is some users have still the old profiles defined on the CUA server but
should be empty. We hare not longer using profiles, we are using roles.

When I tried to do a mass change through SU10, it didn't remove the profile from the users profile
into SU01.

Is there any mass change transaction to removed non wanted profile into the table USL04.

Basicly we need to remove all old profiles from the users profile.

Regards

Answer:
Hello everyone
The Central User administration has been installed on our system.

The problem I do have now is some users have still the old profiles defined on the CUA server but
should be empty. We hare not longer using profiles, we are using roles.

When I tried to do a mass change through SU10, it didn't remove the profile from the users profile
into SU01.

Is there any mass change transaction to removed non wanted profile into the table USL04.

Basicly we need to remove all old profiles from the users profile.

Regards

SAP doesn't provide such a beautiful transaction. You may need to develop CAT script to remove
profiles from mass volume of users OR have your abaper to develop a small program to perform
this task.

Answer:
I did a program to perform the cleanup.

*&---------------------------------------------------------------------*
*& Report ZWW_CLEAN_USL04
*&
*& Program to delete all Profile from the
*& Central User Administration (CUA).
*&
*& That program has been created because the CUA was containing
*& errors at the KCI rollout
*&
*& The program will delete all profile else than SAP_ALL and SAP_NEW
*& from user CUA profile table
*&---------------------------------------------------------------------*
*& 2007/03/07 D.St-Jacques TSKK901875 Creation
*&
*&---------------------------------------------------------------------*

REPORT ZWW_CLEAN_USL04.
tables: usl04. " CUA user profiles

data: t_usl04 like usl04 occurs 0 with header line.

SELECTION-SCREEN BEGIN OF BLOCK ELEMENT1.

selection-screen comment /1(60) TEXT-001.
PARAMETER P_TEST as checkbox default 'X'.

parameter p_file type string default 'c:\USL04.TXT'.

SELECTION-SCREEN END OF BLOCK ELEMENT1.

at selection-screen.
if p_test is initial.
if p_file is initial.
MESSAGE E011(Z1) WITH
'Output file has to be entered'.
endif.
endif.

Start-of-selection.

select * from usl04 into t_usl04 where profile <> 'SAP_ALL'

and profile <> 'SAP_NEW'.

write:/ t_usl04-bname, t_usl04-subsystem, t_usl04-profile.

append t_usl04.

endselect.

if p_file is not initial.

CALL FUNCTION 'GUI_DOWNLOAD'
EXPORTING
* BIN_FILESIZE =
FILENAME = p_file
FILETYPE = 'ASC'
* APPEND = ' '
* WRITE_FIELD_SEPARATOR = ' '
* HEADER = '00'
* TRUNC_TRAILING_BLANKS = ' '
* WRITE_LF = 'X'
* COL_SELECT = ' '
* COL_SELECT_MASK = ' '
* DAT_MODE = ' '
* CONFIRM_OVERWRITE = ' '
* NO_AUTH_CHECK = ' '
* CODEPAGE = ' '
* IGNORE_CERR = ABAP_TRUE
* REPLACEMENT = '#'
* WRITE_BOM = ' '
* TRUNC_TRAILING_BLANKS_EOL = 'X'
* WK1_N_FORMAT = ' '
* WK1_N_SIZE = ' '
* WK1_T_FORMAT = ' '
* WK1_T_SIZE = ' '
* IMPORTING
* FILELENGTH =
TABLES
DATA_TAB = t_usl04
* FIELDNAMES =
EXCEPTIONS
FILE_WRITE_ERROR = 1
NO_BATCH = 2
GUI_REFUSE_FILETRANSFER = 3
INVALID_TYPE = 4
NO_AUTHORITY = 5
UNKNOWN_ERROR = 6
HEADER_NOT_ALLOWED = 7
SEPARATOR_NOT_ALLOWED = 8
FILESIZE_NOT_ALLOWED = 9
HEADER_TOO_LONG = 10
DP_ERROR_CREATE = 11
DP_ERROR_SEND = 12
DP_ERROR_WRITE = 13
UNKNOWN_DP_ERROR = 14
ACCESS_DENIED = 15
DP_OUT_OF_MEMORY = 16
DISK_FULL = 17
DP_TIMEOUT = 18
FILE_NOT_FOUND = 19
DATAPROVIDER_EXCEPTION = 20
CONTROL_FLUSH_ERROR = 21
OTHERS = 22
.
IF SY-SUBRC <> 0.
MESSAGE ID SY-MSGID TYPE SY-MSGTY NUMBER SY-MSGNO
WITH SY-MSGV1 SY-MSGV2 SY-MSGV3 SY-MSGV4.
ENDIF.

endif.

if p_test is initial and sy-subrc = 0.

loop at t_usl04.
delete from usl04 where bname = t_usl04-bname
and subsystem = t_usl04-subsystem
and profile = t_usl04-profile.
endloop.
endif.

TEXT-001 = Program to delete CUA user profile data (USL04)

P_FILE = Output file name
P_TEST = Test run

Feel free to use the program and modifying it.

The bugs are yours.

0 comments
Labels: CUA Faqs

Changing Role is CUA

I have newly implemented a CUA on 4 of my CLIENTS (1 central and 4 child). My central client
contains around 300 users, and each of them has around 10 ROLEs assignement.

After the imlplementation of CUA, it seems that I need to go to SU01, maintain the ROLE to the
USER assignment for each of my child clients. This task is very tedious as I have more than 300
users and most of them have different role to user mapping. Is there a way that I could distribute
the ROLE to USER mapping to all my child client authomatically ?

Thanks a lot.

AllieC.
Answer:
You do not have your CUS set-up correctly as this is what it is supose to do , or you CUA is
working as designed, poorly. In CIA in PFCG you upload the roles and assign them tot he target
system, THere is a config table which tell SAP where they are ans the RFC connectin to use. Look
in th eIMG (SPRO) and all thisis detailed in there).

Answer:
Thanks John,

I am not quite sure what you mean. In my central client, SU01 has one more TAB called SYSTEM,
which I need to manually assign my child client in this tab in order for this user to access this
child. Similarly, on the ROLE & PROFILE tabs, there is an extra column called SYSTEM, which I
need to manually assign the ROLE and PROFILE given to the user in this child client:

(Eg: QAS300 is my central client, DEV100 is one of my child clients. I need to manually assign
both roles to this user in DEV100)
DEV100
QAS300 BASIS ADMIN
QAS300 BATCH ADMIN

Do you mean that, if I setup CUA correctly, I don't need to assign the ROLE to users in DEV100,
and this ROLE assignment will be populated automatically based on the assignment in QAS300 ?

Thanks a lot.
Allie

Answer:
If I understand your problem correctly.

I have a CUA and 12 child systems and I have never come accross your problem.

1. Roles are not maintained in your CUA they should be maintained in your developmeent client.
The CUA only needs the Text information of the roles and this is done by going into SU01 enter a
User and select change, go to the Tab roles and select the text Compare from child Icon

2. go to transaction SCUG and select the USERS Icon. Select each of the tab icons in turn select 1
page of users at a time and execute This pulls in the full user master for each of your users. I have
600 Users and I can do this in about 20 minutes.

my email address is jwallace@uk.loreal.com if you need further assistance with the CUA
implementation/

Answer:
If you have your CUA system set up probably, you can use transaction su10 to add a role to
multiple users cross-system.