Skip to Content
author's profile photo Former Member
0
Former Member

LSMW Recording issue

Posted on Oct 19, 2006 at 04:08 PM 154 Views

I created an LSMW recording using t-code su10 to update user master records from Central User Administration (CUA). Specifically, adding roles to users in a child system. "Batch input Recording" is the method selected in this recording. There are only 3 fields to work with , the userid, system id and the role name. The objective is to add the designated role to a user in a child system. The recording saves the system id but never saves the role. There are no error messages but still the role is never added to the user master record.

Any ideas, what can be causing this problem?

I just want to mention this. When the transaction is in recording mode the system displays a cua message confirming that the system was added to the record. After I acknowledge the message by hitting the "ENTER" key the recording ends automatically.

If the tcode is run manually, after closing the pop up message window the main screen is redisplayed. At this point I have to click on the "SAVE" icon to save the added roles also.

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Oct 19, 2006 at 05:46 PM
    0

    Hello Jose,

    First question is this thing working fine when you are trying to do so through SU01/Su10. If it is not then there is an authorization issue. Check for your authorizations and the authroization of user specified in the RFC destinations of child systems. Check for the activity 22 in authroization object s_user_agr.Also check if the user in RFC destination is not locked or has incorrect password.

    If however it goes through well with Su01 then most likely it should be happening because roles are getting locked in child systems. Just check in transaction SCUL if there are any entries for the user to which you done role assignment. Try processing these errors.Once they get successfully processed role assignment will also take place successfully. I think this is going to be most likely scenario becasue roles will get locked in case of mass assignment.

    Please award points for useful answers.

    Regards.

    ruchit.

    Message was edited by: Ruchit Khushu

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member
      Oct 24, 2006 at 02:06 PM

      Ruchit,

      After posting the question I have done some more testing on this issue. To answer your question, yes, I did follow the cua paths that you mention and the Idocs are been processed. For example, I tried to create a user from scratch adding new roles and the UMR gets created but the roles are not assigned. I think the problem is with the recording itself because even during the creation of the recording the CUA UMR doesn't get updated.I also encountered the same problem with another LSMW script to create composite roles with multiple roles in a none CUA linked system. I did noticed a pattern though. Any function that requiere to do dual savings of data in the same process confuses LSMW. For example, when roles are added via cua there is a 'SYSTEM" save message before you can continue to complete saving the role addition. Actually the recording ends after the system message.

      I ended up creating a catt script that works nicely. Still I would like to find out what is happening with LSMW since some of the security people still want to use it.

  • author's profile photo Former Member
    Former Member
    Posted on Oct 19, 2006 at 05:51 PM
    0

    Hello Jose,

    One more check for the status of USERCLONE message type idocs in BD87 in child systems. Check if they are in status 51 or 64.

    regards.

    Ruchit.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.