How To Fix PP037 - CUA with global role assignment is active. No indirect role assignment

SAP Error Message - Details

• Message type: E = Error

• Message class: PP -

• Message number: 037

• Message text: CUA with global role assignment is active. No indirect role assignment

What causes this issue?

In this system, Central User Administration is active with global
role assignment. This means that you cannot use this program to
perform indirect role assignments.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

To do this, use transaction PFUD with the option: Synchronize HR
Organizational Management.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message PP037 - CUA with global role assignment is active. No indirect role assignment ?

  The SAP error message PP037 indicates that there is an issue with the assignment of roles in the Central User Administration (CUA) system. Specifically, it suggests that a global role assignment is active, but there is no indirect role assignment available for the user in question. This can occur in environments where CUA is used to manage user roles across multiple systems.
  Cause:
  
  Global Role Assignment Active: The system is configured to use global role assignments, which means that roles are assigned at a central level rather than individually in each child system.
  No Indirect Role Assignment: The user does not have any indirect roles assigned that would allow them to inherit the necessary permissions or access rights. Indirect roles are typically used to provide users with access to a set of transactions or authorizations based on their assigned global roles.
  
  Solution:
  To resolve the PP037 error, you can take the following steps:
  
  
  Check Role Assignments:
  
  Verify the global roles assigned to the user in the CUA system.
  Ensure that the user has the necessary indirect roles assigned that correspond to the global roles.
  
  
  
  Assign Indirect Roles:
  
  If the user does not have any indirect roles, you will need to assign the appropriate indirect roles that provide the necessary authorizations.
  This can be done through the user management interface in the CUA system.
  
  
  
  Review Role Configuration:
  
  Check the configuration of the roles to ensure that they are set up correctly for indirect assignments.
  Make sure that the roles are properly linked and that the necessary authorizations are included.
  
  
  
  Test User Access:
  
  After making changes, test the user’s access to ensure that the error is resolved and that they can perform the required transactions.
  
  
  
  Consult Documentation:
  
  Refer to SAP documentation or support resources for detailed guidance on managing roles in CUA and troubleshooting related issues.
  
  
  
  Related Information:
  
  CUA (Central User Administration): A tool in SAP that allows for centralized management of user accounts and roles across multiple SAP systems.
  Roles and Authorizations: In SAP, roles define what transactions and data a user can access. Indirect roles are often used to group multiple authorizations together.
  SAP Notes: Check for any relevant SAP Notes that may address specific issues related to PP037 or CUA role assignments.
  
  If the issue persists after following these steps, it may be beneficial to consult with your SAP Basis or security team for further assistance, as they may have additional insights or tools to diagnose the problem.