Transporting user content from ECC to Gateway system ?

[vivek_vishal]

Hi Experts,

We have a scenario where OData services are created on a Gateway system from the RFC's residing on the Backend ECC. (Different system)

These services are consumed from the SMP layer.

There are thousands of users present in the backend ECC with specific roles that are allowed to access the functionalities.

These same users should be present on the gateway system with assigned roles/authorizations so that the application is accessible, secure and correctly monitored on the service layer.

Question:

1. What is the right way of getting all this user data from ECC to Gateway system. Is there an automated procedure that migrates all the user content to the gateway system ?

2. If the users are now present in the gateway system, is there an easy way to assign common roles to the users collectively ?

3. Is it possible to go ahead with a service user on the gateway system to avoid getting all the user data on the gateway system. How secure would this be especially for POST/Update/critical scenarios. Also in this case, would generating tokens to authenticate be feasible ?

Thanks, Vivek

[kammaje_cis · Accepted solution]

Vivek,

If you do not want to do it manually or do not want to create custom solution, then you would need SAP CUA to achieve copying users and roles.

Using a service user is not recommended due to various reasons. (Issues with Authorization, Authentication, Change Log etc.). Also, if you use service users, license model is different (usage is metered). Keep that in mind as well.

Regards

Krishna

[vivek_vishal · Accepted solution]

Thanks Krishna,

I am aware of this but thinking about the available possibilities.

Would you know how can the roles be assigned to all these users collectively. Does CUA help in that regard as well or a custom solution would be required ?

Br, Vivek

[kammaje_cis · Accepted solution]

Yes, you can assign roles in CUA and expect to get distributed based on configurations to connected systems.

But keep in mind that roles required in HUB system are not same as roles in Backend system.

[vivek_vishal · Accepted solution]

Thanks Krishna,

I shall keep these points in mind.

Br, Vivek