How to set up Central User

Administration (CUA) in SAP

As we have seen the overview of CUA in our pervious blog , now, I will
explain the procedure to set up the CUA. At macro level details, below
steps need to be perormed to set up the CUA!
Steps to Set Up the CUA
1 Create Administrator
2 Speci" #o$ical s"stems
3 Assi$n lo$ical s"stems to client
4 Create s"stem users
5 Create %&C destinations
6 Create CUA
7 Set ield distributor parameters
8 S"nchroni'ation o compan" addresses
9 (ranser Users
)elow are the s"stems considered as an example to set up CUA!
S"stem A)C with client *+,
S"stem P-% with client ./0
S"stem 123 with client 456
Here, we will set s"stem A)C (client *+,) as a CUA central s"stem and
other s"stems as child s"stems. As per this structure, we will proceed
with above mentioned steps!
*. Create Administrator User
In a completel" new s"stem that is to be set up, an administration user
needs to be created with which all urther steps can be perormed. (o
create such administrator user!
#o$in to all s"stems with user SAP7 and create the user in t8code
SU9*
Assi$n the relevant administrator role to user
Appl" the securit" measures to secure SAP7 user a$ainst misuse
+. Speci" #o$ical s"stems
In CUA landscape, SAP s"stems are identiied with #o$ical s"stem names.
:ue to this, #o$ical s"stems need to be created or ever" s"stem which
is $oin$ to be included in CUA landscape. (his is one time tas; to be
perormed beore settin$ up CUA. (he #o$ical s"stems can be deined be
ollowin$ below steps!
#o$in to s"stem A)C (client *+,) with administrator user created
in step *
<o to t8code ):/. 2ou can= alternativel" maintain the table view
>?():#S usin$ transaction S@,9.
Choose Adit B Cew Antries
In the #o$S"stem column, create a new lo$ical name in capital
letters or ever" CUA s"stem (that is, or the central and all child
s"stems includin$ those rom other SAP S"stems). Here, the standard
namin$ convention or lo$ical s"stem is DS"stem I:EC#C(DClientE. In
this wa", the below lo$ical s"stems will be created in CUA central
s"stem (A)C s"stem)!
o A)CC#C(*+,
o P-%C#C(./0
o 123C#C(456
In the same wa", create the lo$ical s"stem name or the central s"stem
in all child s"stems.
,. Assi$n lo$ical s"stems to client
Fe need to perorm this cross8client procedure onl" once or each SAP
s"stem as per below procedure!
#o$in with administrator user and execute the t8code SCC.
Switch to chan$e mode
Call the detail displa" o the client that "ou want to assi$n a
lo$ical s"stem b" double clic;in$ on the line o the client
In the #o$ical S"stem ield, speci" the name o the lo$ical
s"stem to which the selected client is to be assi$ned
Ax! G I we execute the t8code SCC. in s"stem A)C then, open the client
*+, and maintain the lo$ical s"stem name as A)CC#C(*+,
..Create s"stem users
S"stem users are reHuired or the internal communication o the s"stems
in an A#A $roup. (hese s"stem users, deined in the tar$et s"stems, are
entered in %&C destinations in the callin$ s"stems.
Cote! G Co license ees appl" to these s"stem users.
(o simpli" the maintenance o s"stem users, use the ollowin$ namin$
conventions!
In the central s"stem (s"stem A)C), the namin$ convention will be
CUA?Ds"stem IdE. (his s"stem user is used in the %&C destinations
rom child to central s"stem. Fith this namin$ convention, we need to
create the s"stem user in s"stem A)C with name! CUA?A)C
In the child s"stems, the namin$ convention CUA??DS"stem
IdE?DClientE. (hese s"stem users are used in the %&C destinations
rom central to child s"stem. Fith this namin$ convention, we need to
create the s"stem users as below!

(able *
)elow are SAP delivered roles or s"stem users which need to be copied
to customer namespace beore assi$nin$ them to s"stem users.
%oles in Central s"stem!
SAP?)C?US%?CUA?SA(UP?CAC(%A#
SAP?)C?US%?CUA?CAC(%A#
SAP?)C?US%?CUA?CAC(%A#?):IS(
%oles in child s"stem!
SAP?)C?US%?CUA?SA(UP?C#IAC(
SAP?)C?US%?CUA?C#IAC(
Fith these details, we need to create the respective users with their
applicable authori'ations in t8code SU9* as below!

(able +
/. Create %&C destinations
(ill this step, we are read" with #o$ical s"stems and s"stem users, Cow,
we need to create %&C connections between the s"stems as mentioned in
below steps!
#o$in to central s"stem A)C, execute the t8code S@/6 and Choose
Create.
Anter the ollowin$ data!

(able ,
Cote! G 2ou must create the name o the %&C destination in
capital letters.
Conirm "our entries with AC(A%
Choose the option Host Came or Save as and Conirm "our entries
with AC(A%
Speci" the name o the SAP s"stem o the child s"stem (such as
P-%) in the tar$et s"stem I: ield. (o do this, overwrite the
automatic entr".
Speci" the messa$e server o the tar$et s"stem in the
@essa$eServer ield. (o do this, overwrite the automatic entr".
Save "our entries.
(o deine the return connection, repeat the procedure in the child
s"stem or the central s"stem
(o determine whether the networ; connection between the two
s"stems is unctionin$ correctl", choose (est Connection.
In this wa", we have created the %&C connections (with names identical
to #o$ical s"stem name o tar$et s"stem) in each SAP s"stems.
0. Create CUA
(ill now, we have connected all the s"stems A)C, P-% and 123 as in below
i$ure!

i$ure
G
Create
CUA G
Central
User
Administration
Cow, we will deine the s"stem A)C as CUA in this landscape as detailed
in below steps!
#o$in to s"stem A)C and execute the t8code SCUA
Anter the name o "our distribution model, such as CUA.
Choose Create.
Anter the name o the child s"stems vi'. P-%C#C(./0 and 123C#C(456
Save "our entries.
In this wa", we have deined the s"stem A)C as central s"stem. Ater
completion o this step, "ou can no lon$er create user master records in
the child s"stems.
4. Set ield distributor parameters
In Central User Administration, we can use the distribution parameters
in transaction SCU@ to determine where individual parts o a user master
record are maintained.
In the central s"stem
#ocall" in the child s"stem
In the child s"stem with automatic redistribution to the central
s"stem and the other CUA child s"stem
Aver" input ield o the user maintenance transaction SU9* has a ield
attribute that "ou set once in the central s"stem with transaction SCU@
durin$ Customi'in$. (o perorm this customi'in$, perorm the below
steps!
#o$in to s"stem A)C and execute the t8code SCU@
(he s"stem displa"s the User :istribution &ield Selection screen, with
tab pa$es o the ields whose distribution parameters "ou can set. 2ou
can select the ollowin$ options on the tab pa$es!

SAP Set ield distributor parameters

(o maintain the other parameters, too, switch to the other tab
pa$es. (he tab pa$es correspond to those o user maintenance.
Save "our entries. (he distribution parameters are automaticall"
transerred to the child s"stems.
5. S"nchroni'ation o compan" addresses
(he compan" addresses are maintained in individual s"stems P-% and 123.
(o enable CUA to communicate properl" "ou must ensure that at least the
central s"stem contains complete inormation about all valid compan"
addresses. 2ou then distribute this complete compan" address set to all
child s"stems, meanin$ that there is a consistent status o compan"
addresses in the entire CUA.
Steps!
#o$in to central s"stem A)C and execute the t8code SCU<
Select the irst child s"stem P-% and choose S"nchroni'e Compan"
Addresses in the Central S"stem
Process all sub lists or the address cate$ories in succession and
repeat the above steps or s"stem 123
Choose )ac; to start the address distribution rom the central
s"stem.
Choose :istribute
S"nchroni'ed Compan"
Addresses to tar$et S"stems icon.
6. (ranser Users
As soon as we have coni$ured the CUA, the users rom child s"stems need
to be transerred to Central s"stem so that we can see their
authori'ation details (such as roles to be assi$ned to users or child
s"stem and the roles assi$ned to them). (he procedure is $iven in below
steps!
#o$in to central s"stem A)C and execute the t8code SCU<
Place the cursor on central s"stem name appeared on the screen and
clic; on the (ranser Users.
(he s"stem displa"s the ollowin$ tab pa$es!

SAP (ranser User

Select all new and chan$ed users and choose (ranser Users.
Perorm the above + steps or child s"stems P-% and 123
Ater "ou have completed the user transer, remove the roles
3?SAP?)C?CUA?SA(UP?CAC(%A# and 3?SAP?)C?US%?CUA?SA(UP?C#IAC( rom the
s"stem users.
At this sta$e, the CUA set up is completed.