CUA Client Restore

[Former Member]

Hi Experts,

We have a situation where we have restore 2 months old data on Dev system(4.7) because of some corrupted tables.

We have multiple clients on Dev system and 1 of the clients in it is CUA client.

This CUA client is maintaining all the systems in landscape (DEV, QA and PRD). We also have multiple clients in QA as well as PRD which all are handled by single CUA system through DEV.

Which will be the best profile for export which will save us from data loss.

Is SAP_USER profile sufficent to take export of a CUA client and will contain system's Tab data also.

or SAP_UCUS

OR which will be the best profile.

Doubt is that after import of SAP_USER, will it contain all the system Tab information so that we know that which user is created in which client with what all authroizations.

When we take the export of above profiles dose it not contain the CUA tables as per note 161347.

What will be the best process to do this activity from security side to save CUA and user master data.

Also as we are using 4.7 system is there any temperory way to disable to  CUA like we have option in 6.0

Regards,

Sandeep

[Former Member]

Hi Experts,

We have a situation where we have restore 2 months old data on Dev system(4.7) because of some corrupted tables.

We have multiple clients on Dev system and 1 of the clients in it is CUA client.

This CUA client is maintaining all the systems in landscape (DEV, QA and PRD). We also have multiple clients in QA as well as PRD which all are handled by single CUA system through DEV.

Which will be the best profile for export which will save us from data loss.

Is SAP_USER profile sufficent to take export of a CUA client and will contain system's Tab data also.

or SAP_UCUS

OR which will be the best profile.

Doubt is that after import of SAP_USER, will it contain all the system Tab information so that we know that which user is created in which client with what all authroizations.

When we take the export of above profiles dose it not contain the CUA tables as per note 161347.

What will be the best process to do this activity from security side to save CUA and user master data.

Also as we are using 4.7 system is there any temperory way to disable to  CUA like we have option in 6.0

Regards,

Sandeep

[Former Member]

Hello Sandeep,

In the table USLA04 you can see all systems/clients and  roles assigned to the users.

You can extract that + USR02 to have general info on the users.

Other interresting report to be sure to have all data :

What I usually do and is I extract some reports from SUIM :

- Users --> Users by Complex criteria --> Users by complex selection Criteria (export that report)

- Same report, but push on "roles" button after you get the users and export that report

- Table USR02

If you work with the tab Groups (not the main user group), you need to extract the table : USGRP_USER

With USLA04 + USR02 + SUIM reports + USGRP_USER you will have the content of all tab of SU01.

Nicolas.

[Colleen]

You can also add tables

USL04 for User to Profiles (non-generated profiles)

USZBVSYS for User to Recipients (It will show the summary of SCUL)

It does seem a bit concerning to connect Production Systems to a Non Production CUA. You create additional risk of corrupted Prod or users gaining additional access.