CUA vs. Access Enforcer

[Former Member]

Can anyone explain the need for implemented both CUA and Access Enforcer?

We are currently upgrading to ECC6.0 and implementing the GRC tools(5.2) and CUA With the distributed access provisioning available in Access Enforcer, I am trying to determine the benefit of implementing CUA .

[Former Member · Accepted solution]

Hello Patrick,

The only reason I can think of is that your user master records would be centrally located and therefore assist with administration tasks since you would only need to login and work on the CUA and not each system. It also means that the effort to setup provisioning for AE is slightly less since you would only need to link to one system.

Regards,

Chris

[Former Member]

Hello All,

speaking for CUA clients and AE. Can you tell me if mass user maintenance is possible from AE?

Thanx

Iliya

[Former Member]

Hi Patrick

1) In this scenario the only benefit with CUA i can see is

a) Password reset

b) locking and unlocking the user.

2) If you use GRC AC in landscape, it is not at all recommended to assign roles, profiles using CUA. This can lead to high level compliance /regulatory issues.

3) If you are implementing new CUA, then i would recommend to go for NW Identity Management Solution. Advantages are

1) User provisioning for SAP and non-SAP system

2) can be integrated with GRC for Risk analysis and remediation.

3) Password Management also possible.

https://www.sdn.sap.com/irj/sdn/nw-identitymanagement

regards

Anand.M