Purpose

To provide the systems in the system group supported by the Defense Forces & Public Security component with the necessary users, you can use the Central User Administration (CUA) functions to distribute the users from the central system to the downstream decentralized systems (that is, decentralized ERP systems and their assigned systems such as middleware systems or LES).

Prerequisites

You use Central User Administration and are familiar with the functions for role and user administration. For more information, see SAP Library at SAP NetWeaver Library → SAP NetWeaver by Key Capability → Security → Identity Management → Users and Roles

For the user distribution functions, the Defense Forces & Public Security component does not have to be installed on a separate CUA system.

You have connected the systems involved to Central User Administration .

In all systems involved, you have mapped your system landscape. You do so in Customizing for Defense Forces & Public Security by choosing Distributed System Landscape → Systems and Connection Parameters.

You define up to three levels of your system landscape.

Level 1: central system

Level 2: decentralized ERP systems and central middleware systems or LES

Level 3: decentralized middleware systems or LES assigned to decentralized ERP systems

In the central system in Customizing for Defense Forces & Public Security, you have activated user distribution for each system by choosing Distributed System Landscape → User and Role Administration → User Distribution: Systems

In the central system in Customizing for Defense Forces & Public Security , you have made settings for user distribution by choosing Distributed System Landscape → User and Role Administration → User Distribution: Basic Settings.

In the Implementation Guide (IMG) in the central system, you have define options and filter criteria for the different target systems:

Transfer of role and profile assignments

In Customizing for Defense Forces & Public Security , you define whether user roles and profile assignments are to be transferred from the source system to the target system. To do so, choose Distributed System Landscape → User and Role Administration → User Distribution: Systems

Filter for restricting the distribution scope

You can use filters to limit the number of users to be distributed. To define your own filters, use interface /ISDFPS/IF_USER_DIST_FILTER. Also see SAP Note 965071.

Assignment of additional roles

You can define whether additional roles are to be assigned automatically to the users in the target system.

You define whether filters are to be used and whether additional roles are to be assigned by assigning a system type to each system. This allows you to specify the rules according to which users are distributed on a system type basis (for example, for decentralized ERP systems, decentralized LES; and so on).

You define the following assignments in Customizing for Defense Forces & Public Security by choosing Distributed System Landscape → User and Role Administration → User Distribution: Basic Settings

Under User Filter , you assign the filters to the system types.

Under Additional Roles , you assign the system types the additional roles that are to be assigned.

You assign a system type to the target system in Customizing for Defense Forces & Public Security by choosing Distributed System Landscape → User and Role Administration → User Distribution: Systems

You define whether the criteria and options assigned on the basis of the system type are actually to be used for a given system in Customizing for Defense Forces & Public Security by choosing Distributed System Landscape → User and Role Administration → User Distribution: Systems

All the roles that you want to use exist in the systems involved.

A system should contain only the roles that are needed in that system. To simplify administration, however, we recommend you keep all roles in all systems.

In the central system, you have made all the relevant assignments between users and roles or profiles.

In CUA , you have compared the texts of all roles.

Process Flow