Skip to Content
avatar image
Former Member

Role Assignment does not get distributed from CUA

Hi all.

I create user and role in CUA client.

There is no error in role generation.

When I try to find my role in SU01 by pressing F4 of my role (Y*), system give me message role not found. But that's not my biggest problem.

I can assign my role by typing manually.

My biggest problem is only SAP ID get distributed into target system, not the role assignment.

So in the target system I can see my user id without role assign to it.

I checked my user id from SCUL. User and profile does not contain any error message in target client.

I tried with transaction RSCCUSND, still my user id does not contain role.

I checked my SCUM transaction, profiles and roles has Global settings.

Does someone can give me a clue why this happens and how to solve this issue.

Many thanks

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Sep 22, 2010 at 08:14 AM

    > Does someone can give me a clue why this happens and how to solve this issue.

    Your CUA master probabely isn't aware of the role you have created in the CUA client yet. See [Performing a Text Comparison with Target System Specification|] on SAP help for the solution.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Martin Voros

      Hi All.

      Many thanks for your answers and clarification.

      Obviously my interpretation on CUA Global setting was not quite right

      "Global: You can only maintain the data in the central system. It is fully distributed."

  • avatar image
    Former Member
    Sep 23, 2010 at 11:10 PM

    Lets try to simplify the thing in layman language.

    CUA is to manage user ids of different SAP systems (client level) centrally from one system without logging into each of those child systems. To do so, the Central system stores the information of the Roles (and their Text and Generated Profile Name ONLY) and Profiles (standard or non-generated profiles) in few of it's tables like: USLA04, USRSYSACT, USRSYSACTT, USRSYSPRF, USRSYSPRFT etc.

    It doesn't mean that the Roles for the corresponding child system is present in the central system and no need of creating (or making available) such roles in the Child systems. The physical existence of the Role for each system doesn't get transferred in the Central system when you do the Text comparison rather the identity only against the corresponding system.

    So the Roles has to be there in the corresponding Child systems and the Assignment (not physical assignment - only linking the name for that child system) of them to the user ids can be done from Central system.

    Also you have got the idea of Text comparison and requirement of keeping or creating roles in each system based on it's nature from the other posts.

    Let us know any more questions you have.



    Add comment
    10|10000 characters needed characters exceeded