topic Re: Narrowing RFC authorizations in Application Development and Automation Discussions

Narrowing RFC authorizations

Former Member — Tue, 08 Jan 2008 17:41:02 GMT

I have seen the following objects thats directly related to the RFC auths

1.S_RFC ( Auth Check for RFC acess)

2.S_RFCACL (Auth check for RFC user )

3.S_TABU_RFC ( Client comaprison & Copy -Data export withRFC)

Now the question :

What else is needed ? The answer we need to determinewhat else is doen by the RFC user ..etc I understand!!

Thanks

Re: Narrowing RFC authorizations

Former Member — Tue, 08 Jan 2008 23:33:06 GMT

> What else is needed ?

Activating the checks?

Re: Narrowing RFC authorizations

Former Member — Wed, 09 Jan 2008 00:24:54 GMT

Certianly I will activate the checks. Now my question is will this sufficiently replace the system user profile

my quest is to limit the RFC User profile to the bare minimum

Re: Narrowing RFC authorizations

Former Member — Wed, 09 Jan 2008 08:53:11 GMT

What does your RFC user need to do?

Re: Narrowing RFC authorizations

Former Member — Wed, 09 Jan 2008 09:03:10 GMT

Hi George

How and where you will activate the checks, there are 2 types of profile, 1) roles & authorization profile, 2) user-profile about his logon data and attached roles inforamtion.

As i understand from your question, once you activate the RFC authorization check in the role, the attahed users will authorized immediately.

Regards

Anwer Waseem

SAP BASIS

Re: Narrowing RFC authorizations

Former Member — Wed, 09 Jan 2008 21:45:45 GMT

> Certianly I will activate the checks. Now my question is will this sufficiently replace the system user profile

My understanding is that there are dependencies. Activating S_RFCACL deactivates S_RFC (all else being the same), however deactivating the password might be more desirable.

I would say, it depends.

Cheers,

Julius

Re: Narrowing RFC authorizations

Former Member — Wed, 09 Jan 2008 22:18:21 GMT

Thanks Juluis!

Anwer,On the Auth & Profiles--> on general interest, not few days back there was a very interesting discussion you may want to check that too ..its starts with a very seeminlgy insignificant question but .....the posts - its a thriller !