Create and distribution PFCG Profile from CUA to child with auth data

[Former Member]

I have setup CUA using my SOLMAN 4.0 as master.

It talks to a BW 3.1C and R3 4.70.

I can create users from CUA and they are created in target systems.

I can assign roles from CUA and they are saved correctly.

However, if I create a new role in CUA and try and distribute to the child systems, only the role name etc is created in child.

No authorisation data is saved.

For example, I create Single Role Z:CPS_ADMIN.

I assign Auth objects for "Cross-application Authorization Objects" and save it.

I then distribute to one of the child systems.

The role is created in child, but the auth object data doesn't exist.

Is this correct, or is there another part ofthe process I need to perform?

[JPReyes · Accepted solution]

Hi Stephen,

As long as i know... you're not suppose to create roles in CUA.

You create and ditribute roles normally... as create a role in dev, after testing move to QA, after testing move to LIV... once you sync CUA and the child systems you will use CUA to assign the role... CUA use idocs to send the requests to the child system, so assignment is transfered but no data is transported to the system.

Basically, you need to create the Roles normally using PFCG on the target systems then use CUA to assign the roles.

Regards

Juan

[Former Member · Accepted solution]

Juan

thanks for the reply.

It's a pity that CUA isn't 100% CUA, where all user roles/profiles etc can be created and distributed.

thanks,

Stephen