SAP Basis

ADM100 Lesson: Security in the SAP Environment
System Security and Central User Administration
Figure 186: User Administration: Central User Administration (CUA)
The role concept has already been explained in the “Fundamentals of User
Administration” unit. CUA is presented in detail in SAP course ADM102.
Outline it again briefly here, and explain it in the context of system security.
If CUA is active, authorizations should only be maintained centrally in one
system for the users; you can, however, permit local changes using the
child systems for addresses or other input fields.
To simplify the administration of user master records over several logical
systems, you should use Central User Administration (CUA). In this case,
a logical system corresponds to a client in an SAP system
CUA provides an overview of all users, all user groups, defined systems,
andsystemgroups,anddefinedroles.
Using the CUA, you can maintain user master records from a single client,
and distribute this information to all included clients of all systems. In this
context, there is one logical system that controls the user master records
of all logical systems.
Reasons for using CUA:
• Complex system landscape with multiple clients in different systems
• The same user works in multiple logical systems
• The same user name is to represent the same user
2003/Q3 © 2003 SAP AG. All rights reserved. 589