Child system user management in SAP CUA


I have configured central and child sync projects for SAP CUA.

1. When I change sap user's password in Manager, the change is provisioned only to central system and it doesn't propagate the password to a child system. Is it by design? How am I supposed to manage sap user's password in child system?

2. When sap user is locked in Manager it is locked globally in SAP. Is it possible to lock/unlock user account only in one child system?