SAP Basis

Unit 11: Basics of User Administration ADM100
• Initial password: When users are newly created, an initial password
is transferred to the child systems. This can be changed in the usual
way.
• Lock status: In addition to the familiar lock reasons (failed logon
attempts or locked by an administrator) there is a new “general lock”.
This takes effect in all child systems in which the affected user is
permitted and can be removed either centrally or in an individual
child system.
You can assign Single or composite roles and authorization profiles from
the central system. However, the authorization profiles are maintained
locally rather than centrally, since different system settings and release
statuses require local administration of authorization profiles.
Note: With central role maintenance, you can define the menu
of a role in an SAP system for a different target system. The
authorization profiles are always to be maintained in the target
system. You can implement the CUA and central role maintenance
concepts together or independently.
Central User Administration is discussed in detail In SAP course ADM102
- SAP Web AS Administration II.
Directory Services
Figure 143: Connection to Directory Services
442 © 2003 SAP AG. All rights reserved. 2003/Q3