How To Fix XT559 - Changes only permitted in domain controller system

SAP Error Message - Details

• Message type: E = Error

• Message class: XT - Transport Management System

• Message number: 559

• Message text: Changes only permitted in domain controller system

What causes this issue?

You want to change the entries for critical transport objects. You can
only make these changes on the domain controller.

System Response

You can only make changes on the domain controller.

How to fix this error?

In the TMS System Overview, find which system is the domain controller.
Log on to this system and change the entries for the critical objects
there. The changes are distributed to all systems in the domain when
you save the changes.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message XT559 - Changes only permitted in domain controller system ?

  The SAP error message XT559, which states "Changes only permitted in domain controller system," typically occurs in a system landscape that is configured with a Central User Administration (CUA) or when using a domain controller setup. This error indicates that you are trying to make changes to user data or authorization data in a system that is not designated as the domain controller.
  Cause:
  
  Domain Controller Configuration: In a CUA setup, there is a designated domain controller system that manages user data and authorizations for multiple child systems. Changes to user data must be made in the domain controller, and not in the child systems.
  User Management: If you are trying to create, modify, or delete user accounts or roles in a non-domain controller system, you will encounter this error.
  Authorization Issues: Sometimes, the user may not have the necessary authorizations to make changes in the system.
  
  Solution:
  
  Identify the Domain Controller: Determine which system is configured as the domain controller in your landscape. This is typically done in the CUA configuration.
  Make Changes in the Domain Controller: Log into the domain controller system and perform the necessary changes there. This includes creating or modifying user accounts and roles.
  Check Authorizations: Ensure that you have the necessary authorizations to make changes in the domain controller. If not, contact your system administrator to grant you the required permissions.
  Synchronize Changes: After making changes in the domain controller, ensure that the changes are synchronized with the child systems if necessary.
  
  Related Information:
  
  Central User Administration (CUA): This is a feature in SAP that allows for centralized management of user accounts across multiple SAP systems.
  Transaction Codes: Familiarize yourself with relevant transaction codes such as SU01 (User Maintenance), SU10 (Mass User Maintenance), and others that may be used in user management.
  Documentation: Refer to SAP Help documentation for detailed information on CUA and user management best practices.
  System Landscape: Understanding your system landscape and how the domain controller fits into it is crucial for effective user management.
  
  If you continue to experience issues or if the setup is complex, it may be beneficial to consult with your SAP Basis team or a consultant who specializes in SAP user management and CUA configurations.