Skip to Content

Role assignment to user in child system


We have a CUA with role assignment in SCUM defined as global. There is any way of assigning roles to users in child system when CUA system is not available? There is any way to allow roles assignement in both Parent and child systems?

Many thanks for your help!!


Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Aug 16, 2011 at 08:16 PM

    One way would be to temporarily delete the CUA assignment in the child and then maintain locally, but you will need to attach it again... and decide whether you want the CUA master to know about what you have done.

    Plan B on older Support Packs is to take a look at the correction instructions of [SAP Note 1504495|] but for this you need full access () to the S_USER objects, in which case you could detatch the CUA anyway.

    However as a temporary workaround in Test systems it could have been usefull.

    Plan C: Allow reference user assignments locally and authorize the role indirectly. Via the available authorizations of and access to the reference users you can then contain the scenario. Works fine for me if the concept of reference users is understood.

    However in most cases you should do it via the CUA and will end up doing this anyway via the CUA - that is what you have a CUA for. So... logon to your CUA in the morning, give the SAPGui scheme a nice bright colour and administrate the users and role assignments there. This is a small price to pay compared to not having a CUA or IdM... 😉



    Add comment
    10|10000 characters needed characters exceeded

  • Aug 16, 2011 at 02:30 PM


    I don't have a CUA in front of me but f you set the field distribution for roles & profiles to RetVal then this should be possible.

    Add comment
    10|10000 characters needed characters exceeded