Application Development Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Relation between PFUD and SCUL

Former Member

‎01-16-2012 6:23 AM

0 Kudos

Hello,

We had this issue in our system where tables USLA04 and AGR_USERS were not in sync.

Even though a particular Role was delimited for a user in SU01 (USLA04), that role still existed in table AGR_USERS for that user.

PFUD was running daily for all the custom Roles in the system, including our culprit Role and everyday the PFUD logs were successful for that Role:

HR comparison successfully completed for role XYZ

Indirect user assignments of single role XYZ completely

Profile comparison successfully completed for role XYZ

This is a big anomaly, since the job of PFUD is to sync USLA04 and AGR_USERS.

later we realized that this was the case for quite a few roles in the system.

Then we redistributed SCUL Idocs for one of the users who was affected by this anomaly and we found that USLA04 and AGR_USERS were synchronized for that particular user.

The SCUL logs for this user was not in error. It was green.

Finally we redistributed SCUL for all of the affected users and the issue was resolved.

My question is - How come PFUD wasn't synchronizing the 2 tables and SCUL did it?

Could you please explain this to me?

1 REPLY 1

Bernhard_SAP
Employee
Employee

‎01-25-2012 10:56 AM

0 Kudos

Hi,

we should keep in mind, that rhautupd_new is primarily a local tool.

Generally it does not take care about usla04, but it does of course when performing the composite role comparison part.

The leading table will be always agr_users.

In contrast SCUL uses the information it got from SU01, means usla04. Based on the usla04 entries the idocs are composed (in case of assignemetn to the central system itself of course no idoc is used).

As a matter of fact, pfud trusts in a consistent data model and uses agr_users for selection.

To get an overview, which users need some cleanups form the admin (or scul), you can use the report RSUSR_CHECK_ROLE_ASSIGNMENTS from SAP note 1591201, which will list you also missing usla04-entries.

b.rgds, Bernhard