CUA - child system roles have a grey diamond "status of the user master record is unknown"

[william_bowman]

Hello World! I hope you are all doing well. We have recently replatformed our system and re-implemented CUA in a client in our GRC system. It is release 10.1. We have configured it and it seems to be working fine, however the status next to all child system roles is grey. The local roles are green as expected. All idocs are being processed and changes are successful in the chiled systems. Our security team find's this rather annoying as they don't have a way to validate without going to the child systems or check idoc logs. Any thoughts as to why the status indicator isn't turning green? I have followed note 1642106 completely and the USR_ATCR_IMP(timestamp) jobs are running in the central system.

[Steffi_Warnecke]

Hello William,

I have re-tagged your question with "Access Control" in the hopes that fits better. I'm not completly sure though, maybe it should be "Security"?

The "Identity Management" tag is for questions relating to that specific SAP product, not role and identity management in general. 🙂

Regards,

Steffi.

[alessandr0]

retagged to Security as it is not related to Access Control.

[Bernhard_SAP]

It is pretty straight forward. The central system does not and cannot know, what the status of the user comparison is in the child system. The comparison is performed there locally. NO status information of the comparison is sent back to the central system. So the status icon for the comparison will always be grey except for assignments for the central system itself.

Use scul to monitor your assignments.

b.rgds, Bernhard

[Former Member]

Hello Bernhard

"It is pretty straight forward. The central system does not and cannot know, what the status of the user comparison is in the child system. The comparison is performed there locally. NO status information of the comparison is sent back to the central system. So the status icon for the comparison will always be grey except for assignments for the central system itself."

Is there any way the sent "status information of the comparison" back to central system ? So the status icon for the comparison will turn green or yellow in central system for child system assignments.. I am using Solution Manager 7.2 SP04 for CUA Central System.

Rajesh Narkhede

[Bernhard_SAP]

technically it is possible but you will have to write it yourself.

This functionality was _never_ available! Franks Statement, that he had it before in

SolMan 7.1 and earlier must be a mistake or misunderstanding. The Status field was not available at all in earlier versions (in SU01 in the CUA central System)....

brgds, Bernhard

[william_bowman]

Thanks for your input. It is much appreciated!

[former_member463084]

Hello Bernhard,

thanks for your answer on that.
Howerver, that´s causing big irritations to several customers and consultants as well, because it´s a big change to the situation we´ve had before (SolMan 7.1 and earlier). Furthermore, this change of the grey role status is not mentioned anywhere?! So, everybody is searching for "error solutions", what seems to be a waste of time (according to your answer)!? Why isn´t it possible to mention that clearly in a SAP note or the installation guides, or or...?
Thanks you very much and kind regards
Frank

[Former Member]

Hi Frank,

I guess this document can be helpful to you as it states that status of profile compare can not be displayed in central system of a Central User Administration; please refer point#1 in Symptom.

1272331 - PFCG: Status of user comparison
URL - https://launchpad.support.sap.com/#/notes/1272331

Thanks,
Aritra