We used CUA 3.6 without using access profiles and updated the CUA to 4.0SP1. The CUA failed and will be replaced. The procedure to replace CUA node mentions that the use of access profile is strongly recommended, however, we don't want to change any setting of the CUA because there is now no problem without using profiles. My understanding is that access profiles is used for only authentication of an application. Please let me know if CUA has any problems by not using  access profiles.