Purpose:
Creating Role with required RFC authorizations.
Creating and maintaining RFC user to be used for remote function calls.
Check attached document with screenshots!
Steps:
Navigate to Transaction "SU02"
- Click "To Profile Generator" pushbutton
Create Role
- Enter role name as "Z_GUIXTRFC"
- Click on "Role" or "Single Role" pushbutton
- Click on "Authorizations" tab
- This will give you a pop up screen to save the role
- Click "Yes" pushbutton
- Click "Change Authorization Data" pushbutton
- Click "Do not select templates" pushbutton
- Click "Manually" toolbar pushbutton
- Enter the below 3 Authorization Objects
S_RFC
S_USER_GRP
S_USER_SYS
- Click "Open" toolbar pushbutton
- Click on the "write" or "change" icon next to the first "Activity" keyword on the screen
- Check the "Execute" on the pop up screen and then click on "Save" pushbutton
- Similarly, the parameters for "name of RFC to be protected" and "Type of RFC to protect" could be set
- Using Existing Remote Enabled SAP Function Modules, specify the function group for those function modules (Name of RFC to be protected)
- Alternatively, add the appropriate role to the RFC User
- Click "Generate" toolbar pushbutton
- Click "Save"
- Click "Back"
- Pop-up is displayed with Exit Authorization Maintenance
- Click "Generate" on the pop-up screen again
Navigate to Transaction "SU01"
- Enter the username and click on "Create Role" toolbar pushbutton
- Enter Last Name and First Name of the user
- Click on "Logon data" tab
- Enter the password
- Choose "communications" radio button in the "user type" group box
- Click on "Role" tab
- Add the role we just created "Z_GUIXTRFC"
- Click on "Profile" tab
- Check the profile by double-clicking on detail on the profile
- Verify the Authorizations
- Save the user
