Show TOC

Interaction of Required User Groups and Central User AdministrationLocate this document in the navigation structure

Use

You can customize your SAP NetWeaver Application Server ABAP to require user groups for authorization checks for user master records. If the central system of the Central User Administration (CUA) does not assign user groups, but the child system of the CUA requires user groups, this discrepancy leads to the behaviors described in the following table.

Action of Central System of the CUA

Reaction of Child System of the CUA

The central system of the CUA tries to create users without user groups in child system of the CUA.

The child system creates the user and assigns the default user group that is valid for the RFC user. In addition, the child system returns an error message in Log Display for Central User Administration (transaction SCUL) stating that the user from the central system of the CUA must be assigned a user group for authorization checks. This reaction occurs regardless of how the distribution parameters are maintained for user groups for authorization checks in transaction SCUM.

The central system of the CUA tries to change users without user groups for authorization checks in a child system of the CUA and the distribution parameter for user groups for authorization checks is set to Global or Redistribution.

The child system rejects the changes and returns a corresponding error message in Log Display for Central User Administration (transaction SCUL).