If you want to manage users from one system then you have to use Central User Administration. It is an easy setup. You have to pick one system as a Central system and others as the child system. Once you setup CUA you will not be able to change users in the child system. You can set up the system in such a way that the only thing you can maintain in the child system is password.

This helps the client maintaining the user master only one SAP System. This way the user Information is consistent across all the Systems. Additionally, the user's password changes and locking can be performed from one location

Some of the downsides are client copy takes a longer time as you need to uninstall CUA and reinstall CUA. The other downside is if the Central CUA system goes down then you will not be able to maintain users in the child system.

The third downside is any mass changes take time as the change happens with ideas. The advantages are you can maintain user master from one client saving you time and since user master data is maintained from one location it is clean

Resources:

Explore these Useful books

Surviving an SAP Audit: A Practical Guide to SAP Audits
[ Ссылка ]
Security, Audit and Control Features SAP ERP, 4th Edition
[ Ссылка ]
SAP License Management Step by Step Guide
[ Ссылка ]
Auditing and GRC Automation in SAP
[ Ссылка ]
Click here to download Free SAP GRC 10.1 Step by Step Guide
[ Ссылка ] of Central User Administration

•Once you configure CUA users can only be created or deleted in the central system.

•User attributes can be maintained only locally, only centrally, or both centrally and locally
•Therefore, the required roles and authorizations must exist in all child systems.
•As a result of each user only has to be administered once centrally which gives the administration a much clearer overview of all users and authorizations.

Important Transactions:
SCUA Central User Administration: Distribution Model Assignment
SCUG Central User Administration Structure Display
SCUL Central User Administration Log
SCUM Central User Administration Field Selection

Facebook:

[ Ссылка ]
Linkedin
[ Ссылка ]
Twitter
[ Ссылка ]

Email Info@expressgrc.com for SAP Security and SAP GRC Support

#SapLicense #sapsecurity #sapgrc #sapcybersecurity #expressgrc #sapbasis #sapcontrols

свернуть