Central User Distribution (SAP Library - Users and Roles (BC-CCM-USR))

Central User Distribution

You maintain users within central user administration using the user maintenance transaction (Transaction SU01). If central user administration is activated, you maintain users in the transaction differently:

Whether fields are ready for input or not depends on the distribution attributes that were assigned to the field in Transaction SCUM. See Setup field distribution parameters.

Only the fields that may be maintained in the system are ready for input.

In the central system, you can only change a field that is to be maintained globally. This field is not ready for input in the dependent systems.

In the central system, the user maintenance transaction also displays the tab Systems. Here you enter the systems to which users are to be distributed. Use the possible entries help. The systems selected in the distribution model are displayed. Each time you save, the system distributes the user data to these listed systems.

The Roles and Profiles tabs each contain an additional column, specifying the system for which the user is assigned the role or profile.

By choosing Compare text from dependent systems in the Roles and Profiles tabs, you can update the texts for roles and profiles that were changed in the dependent systems, for example. The texts in the dependent systems are stored temporarily so that they are available in the central system. Since the comparison requires some time, it is executed asynchronously. The current texts may not be immediately available.

You can only assign profiles to users for the systems in which they are distributed. If you enter a new system when you assign profiles to users, the system displays a warning that the user was assigned a new system. The entry is automatically transferred into the tab Systems. After this, the user master record is also distributed in the new system.

All user master records are created in the user master records. Users can then only log onto the central system if the central system itself is entered in Systems tab of the corresponding user master record.

You can display global user data from a dependent system in the Infosystem.

Additional Notes

As well as the authorizations already mentioned, you also need another authorization in the central system for object S_USER_SYS. You can only assign new systems to a new user with this authorization.

If you make any incorrect entries when you maintain roles and profiles, you can only see this in the log (Transaction SCUL).

When a user is deleted in the central system, the system entry for the user is retained until the deletion is confirmed. If an error occurs, the deletion can be repeated by withdrawing the systems (in the subsidiary system).

In the dependent systems, the RFC user is output as the last person to make changes. Choose an appropriate name when you set up the RFC user.