Authentication for BusinessObjects; "no RFC authorization"

Hi,
I installed BO Edge XI 3.1 and the Integration Kit; in SAP BW we created a user "bobw" to be used by the Integration Kit. I set the connection details in CMC -> Authentication -> SAP at "Entitlement Systems". When I click on the "Role Import" tab I get the following error message: "User BOBW has no RFC authorization for function group SYS".
We set the rights in BW according to the Integration Kit Installation Guide, page 66.
Is this only a missing right or another error?
Thanks!

>
Ingo Hilgefort wrote:
> did you run an authorization trace for the user that is entered in the CMC / entitlement system page ?
Not yet as we have done this once and there were a lot of authorisations to assign. That's why I hoped that the documentation contains the necessary authorisations.

Similar Messages

Configure SAP authentication for BusinessObjects

Hi,
I am configuring SAP authentication for BusinessObjects. I created a user account for BusinessObjects Enterprise on SAP with Authorization object, field, Value as "BusinessObjects XI Integration for SAP Solution Installation Guide". After add an SAP entitlement system to BusinessObjects Enterprise, I checked that an entitlement system. It show "User CRYSTAL has no RFC authorization for function group SYST." with CRYSTAL is user of SAP.
Please, help me!!!
Thanks
Duypm

Hi,
My CRYSTAL_ENTITLEMENT Role as below:
CRYSTAL_ENTITLEMENT
|
|--Manually     Cross-application Authorization Objects
|     |_Manually      Authoriaztion Check for RFC Access
|       |_ Manually      Authorization Check for RFC Access
|       |______Activity                    All activities
|       |______Name of RFC to be protected          *
|       |______Type of RFC objects to protected      All value
|
__Manually     Basic: Administration
__Manually     Authorization for file acccess
___Manually      Authorization for file access
__Activity                     Read, Write
__Physical file name               *
__Program Name with Search Help     *
__Manually      User Master Maintenace: User Groups
__manually      User Master Maintenance: User Groups
             |___Activity                Change, Display
             |___User group in user master main     *
I login CRYSTAL user directly on your SAP BW server using SAPGUI. It is ok.I don't get any error messages there.
My SAP entitlement system to BOE as below:
System is: PTS
Client: 100
Application
    Application server: sap-vpmn (with sap-vpmn is hostname BO server)
   System number : 00 (this is value of central instance number)
   Username: crystal
   Password : pythis
Thanks & Regards
Duypm

User |TMSADM has no RFC authorization for function group SYST

Hi All,
When we release any transports we are getting the above error, this is basically due to the fact that implificaiton of complex password parameters, to supress this we had followed the note 761637.
I had regenerated RFCs and reset TMS user, but still no use any ideas?
This is definely not the issue with Authorization as user TMSADM has right profiles.
Reg,
VV

Patch Downloader wrote:Patch Downloader wrote:>
> ... when I reset my TMSADM user though it says it was reset, but SU01 for TMSAMD user is intact , it did not change the user type to SYSTEM, it kept as it was before Communication data.
Then the reset is not working (which would be consistent with the note). You can administrate the connections (SM59) and user (SU01) manually now. Try to change the user type in SU01.
>
> I did not get the user to test the release , but I am checking in the RFC connection for this RFS desitnatation and it failes with same error.
You stated before that releasing the transport was failing, not the authorization test in SM59.
Note that default system settings for the "Connection Test" only verifies that there are no network gremlins between the servers and the RFC settings, it does not verify that the logon was successfull. The "Authorization Test" on the other hand verifies the authentication was successfull and the authorization to perform the RFC call was checked and successfull.
Most likely, the problem is caused either by the user type AND / OR the password is in fact not correct (or is arriving incorrectly - See SAP Note 1023437).
Some other suggestions:
- Check ST22 to see whether more details are available on the error (check source and target destination).
- Check whether the user doing the release is missing an authorization to use the TMS.
- Check the value of your system profile parameters auth/rfc_authority_check and rfc/reject_expired_password?
Cheers,
Julius

IDOC Scenario - User has no RFC authorization for function group EDIN

Hi all,
I'm trying to configure an IDOC scenario from ECC to XI.
RFC's, ports and destinations already configured. On WE19 I'm creating an IDOC for testing the scenario. The IDOC is sent successfully, and it stops on TRFC Monitor with error "User PIRFCUSER has no RFC authorization for function group EDIN." .
Some of you knows what authorization is needed? Basis team said the roles are the same at DEV environment, and there this scenario works fine.
Thanks for your help.
regards.
Roberti

Hi,
Check with PIRFCUSER user , that is having the right authorization or not ..
And make sure that this user is present in the system & it should not locked.
to check that user is present or not-----goto su01 of the system & check
Regards
Seshagiri

RFC Lookup error :No RFC authorization for function module

Hi All,
I have created RFC in the PI system and enabled it as remote. I am working on PI7.1
I have imported RFC into Repository.But when i am trying to execute RFC lookup function in the graphical mapping I am getting No RFC authorization for function module error.
Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception> com.sap.aii.mapping.api.StreamTransformationException: Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception> at com.sap.aii.mappingtool.flib7.RfcLookup.cacheMore(RfcLookup.java:95) at com.sap.aii.mappingtool.tf7.rt.AMultiResIterator$MultiOutIterator.gotoNextContext(AMultiResIterator.java:95) at com.sap.aii.mappingtool.tf7.AMappingProgram.processNode(AMappingProgram.java:315) at com.sap.aii.mappingtool.tf7.AMappingProgram.processNode(AMappingProgram.java:406) at com.sap.aii.mappingtool.tf7.AMappingProgram.start(AMappingProgram.java:496) at com.sap.aii.mappingtool.tf7.Transformer.start(Transformer.java:133) at com.sap.aii.mappingtool.tf7.AMappingProgram.transform(AMappingProgram.java:626) at com.sap.aii.ibrep.server.mapping.exec.ExecuteXiMappingCommand.transformInternal(ExecuteXiMappingCommand.java:197) at com.sap.aii.ibrep.server.mapping.exec.ExecuteXiMappingCommand.execute(ExecuteXiMappingCommand.java:94) at com.sap.aii.ib.server.mapping.exec.CommandManager.execute(CommandManager.java:43) at com.sap.aii.ibrep.server.mapping.ServerMapService.execute(ServerMapService.java:40) at com.sap.aii.ibrep.server.mapping.MapServiceBean.execute(MapServiceBean.java:40) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at com.sap.engine.services.ejb3.runtime.impl.RequestInvocationContext.proceedFinal(RequestInvocationContext.java:43) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:166) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatesTransition.invoke(Interceptors_StatesTransition.java:19) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Resource.invoke(Interceptors_Resource.java:71) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.doWorkWithAttribute(Interceptors_Transaction.java:38) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.invoke(Interceptors_Transaction.java:22) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:189) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatelessInstanceGetter.invoke(Interceptors_StatelessInstanceGetter.java:16) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_SecurityCheck.invoke(Interceptors_SecurityCheck.java:21) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_ExceptionTracer.invoke(Interceptors_ExceptionTracer.java:16) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.DefaultInvocationChainsManager.startChain(DefaultInvocationChainsManager.java:133) at com.sap.engine.services.ejb3.runtime.impl.DefaultEJBProxyInvocationHandler.invoke(DefaultEJBProxyInvocationHandler.java:164) at $Proxy1005_10002.execute(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at com.sap.engine.services.rmi_p4.P4DynamicSkeleton.dispatch(P4DynamicSkeleton.java:234) at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:351) at com.sap.engine.services.rmi_p4.server.ServerDispatchImpl.run(ServerDispatchImpl.java:70) at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:62) at com.sap.engine.services.rmi_p4.P4Message.execute(P4Message.java:37) at com.sap.engine.services.cross.fca.FCAConnectorImpl.executeRequest(FCAConnectorImpl.java:872) at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:53) at com.sap.engine.services.cross.fca.MessageReader.run(MessageReader.java:58) at com.sap.engine.core.thread.execution.Executable.run(Executable.java:108) at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:304) Runtime exception when processing target-field mapping /ns0:MT_FileDummy/File; root message: Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception>
13:42:37 End of test
Edited by: Rams on Apr 17, 2009 1:43 PM

Hi! Rams,
I think the issue is related to Authentification Issue..Even though u did correctly please check once the below
1) Check any Typo Erros are there while configuring or giving names in Lookups.
2) please check Authorizations like ID and PWD and Sufficient Roles
3) Also please check did u given paramters correctly while doing RFC look up I mean paramers , Binding parameters and RFC channel name and adapter type or Simple type it must be an adapter
4) In ID part while configuring Interface determinaition you need to give your RFC look Up name there also..Hence check whether u given or not if yes correctly or not
5) Also remember one thing if your scenario is correct mostly you can know the result in mapping itself it seems while testing Message mapping and Interface mappings give your RFC look up paramters in the parameters tab present in TEST tab and later in Document tab give Input...and execute it works if it doesn;t works and if there is an issue with RFC you can get there only..ok
Also go through the below document::
[https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20befc9a-aa72-2b10-ae9b-b0988791d457]
I hope this will give u brief idea...
Also check with basis while taking SAP_ALL authorization so that first u ill came to know whether issue is related to authentification or RFC module itself remote enabled and also do SXI_CACHE also ocne to refresh ESR and ID objects..
Regards::
Amar Srinivas Eli

I E ping error: User XIRWBUSER has no RFC authorization for ...

Hi all,
In the RWB->Component Monitoring when I select the
"Integration Engine" it is giving ping error and Self-Test Status errors.
Ping error: User XIRWBUSER has no RFC authorization for function group CHECKRFCS.
Self-Test status: JCo request failed.
Please help me, it is very urgent.
Thanks in advance,
Nagarjuna.

Hi Nagarjuna,
Please look at these..
User abcd has no RFC authorization for function group SYST
Delta Pull Fails with Short dump in R/3 - RFC_NO_AUTHORITY
http://help.sap.com/saphelp_nw04/helpdata/en/4f/b541d812aea34695d54758cec0796f/frameset.htm
cheers,
Prashanth

No RFC authorization for function module

Hi Experts,
I am working on PI 7.3, doing a idoc to jdbc scenario by using the AEX(Advance Adapter Engine Extended).
I created Integrated Configuration, in tab "Inbound Processing" pointed IDoc_AAE sender channel etc...
While doing the configuration testing i am getting the below error "No RFC authorization for function module IDOCTYPE_READ_COMPLETE."
Messages fails in tRFC.
What can i do, to solve this problem?
Thanks & Regards
Stanislav

I ordered the right to RFC-connect.
The problem was this: in RFC-connect, in Destination(in NWA), you must specify a username, who have permission to read idoc-metadata (from ERP).
More about settings AAE, you may read here http://scn.sap.com/community/pi-and-soa-middleware/blog/2010/10/21/pixi-pi-73-new-java-based-idoc-adapters-configuration-sender-receiver--teaser
Sorry for my bad English.
Thanks all.

No RFC authorization for function group AGS_TAO_REQUEST_MGMT_FGR

Hi,
I'm trying to build a connection between SAP TAO 2.0 and SolMan. I recevied following error message: for one of my user:
2010-12-21 16:28:24:577 : ERROR : SAPTAO.exe : Thread04 (SelfCheckWorker) : SAP.TAO.Common.Rfc.RequestListener.TaoCommonReqListProxy : SearchSoftwareComponents(): an error occured: SAP.TAO.Common.Rfc.SapAgentAgentException: CallBackend(RfcRequest): a call to the backend system failed: SAPAGENT_RFC_CALL_DETAILS(RFC_SYS_EXCEPTION) ---> SAP.TAO.Common.Rfc.SapAgentAgentException: SAPAGENT_RFC_CALL_DETAILS(RFC_SYS_EXCEPTION) ---> System.Exception: User GCRIBB has no RFC authorization for function group AGS_TAO_REQUEST_MGMT_FGR
Please help. Thanks in advance.
Subodh

Hello ,
You have mentioned you have received one of your user? rest of the users is it working?
Looks like i also received this error message when i did not instlal my ST-400 ..TAO Agent..i saw the same error message in the log.
Did you follow the this note to install SAP TAO - agent properly (OSS note - 1368112) ?
When you did self check are you getting any warning messages?
1440074 - Check this note also for RFC authorizations
Good luck.
Ram

No RFC authorization for function group HRXSS_SER

Hi,
after implementing portal (EP 7.0), when the end user tries to access the ESS functionalities, the following error occurs,
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: ComponentUsage(FPMConfigurationUsage): Active component must exist when getting interface controller. (Hint: Have you forgotten to create it with createComponent()? Should the lifecycle control of the component usage be "createOnDemand"?
in default trace, i found the following error,
com.sap.tc.webdynpro.modelimpl.dynamicrfc.WDDynamicRFCExecuteException: User AG1780 has no RFC authorization for function group HRXSS_SER
when i give SAP_ALL access to this user, then everything is working fine, but i cant give so.
help me regarding this...

Hi Ajay,
simply do what the exception tells you: provide RFC authorization in the backend for function group HRXSS_SER to user AG1780.
Cheers, Anja

No RFC authorization for function group RFC2

When I am trying to import RFCs/IDOCs from ECC to XI in the integration repository, I am getting this error:
User has no RFC authorization for function group RFC2.
Any input is appreciated.
Thanks,
tnv

Hi tnv,
I guess you have to use an authorization object S_RFC with parameters.. In your case, you would need to set
RFC_TYPE=FUGR
RFC_NAME=RFC2
See this link
http://help.sap.com/saphelp_nw04/helpdata/en/6b/af429b12e9214d9a2d6cba921b162f/frameset.htm
Hope this solves ur problem!
cheers
Prashanth
P.S Please mark helpful answers

User has no RFC authorization for fun ction group EDIN

Problem
Posted: Aug 11, 2005 1:57 AM Reply E-mail this post
Hi all
I am trying to send idocs from R/3 to R/3.
In WE05 I can see STATUS 3 for the test IDOCS Iam sending through WE19.
But in SM58 I am seeing the following error.
User <username> has no RFC authorization for fun ction group EDIN .
Could somebody suggest me a way to solve this problem.
Thankyou

I think you need to have S_TRANS_RFC authorisation.
OR
In the profile, you need to add the function group.
Sorry I do not remember the profile name.
Message was edited by: Vinod C

SMD_RFC has no RFC authorization for function group SPF.

Hi,
http://pw200-3.fcc.XXXXXXX.com:50000/smd ->Diagnostics Setup ->Setup Wizard - Step 1 receives an error message like . .
The value of profile parameter login/accept_sso2_ticket could not be checked
Attached the below error message
<< >>
Sat Nov 08 12:19:07 2008 SSO The value of profile parameter login/accept_sso2_ticket could not be checked
Step SSO Details
Found SID for SSO ACL entry : PW3
Found login.ticket_client for SSO ACL entry : 000
The Read entry permission on TicketKeystore/SAPLogonTicketKeypair-cert was given to sap.com/tcwebadministratorsolmandiag/servlet_jsp/smd/root/WEB-INF/lib/SetupLib.jar
The TicketKeystore/SAPLogonTicketKeypair-cert was succesfully read (619 bytes)
SSO ticket certificate of PW3 was imported in ABAP PSE of localhost (client 001) : remove_certificate_failed
The ticket certificate is already in ABAP PSE, but could not be updated. You might need to check whether the certificate is up to date in STRUSTSSO2
The value of profile parameter login/accept_sso2_ticket could not be checked
!! Exception : An exception occured during the execution of this function 'PFL_GET_PROFILE_LIST'.(cause=com.sap.mw.jco.JCO$Exception User SMD_RFC has no RFC authorization for function group SPFL.)
Thanks
Thirumal
Edited by: Thiru Thirumal on Nov 8, 2008 4:33 AM
Edited by: Thiru Thirumal on Nov 10, 2008 5:49 AM

Hi All,
Check the authorizations of user SMD_RFC as described in[ this guide|https://websmp106.sap-ag.de/~sapdownload/011000358700000178012009E/RCA_User_Adminguide_SP18.pdf], refer to section 2.3.3 [SOLMAN.ABAP.RFCCOM]: Internal RFC System User.
Also check notes 1170859 and 1371222.
1170859 - SMD_RFC: running RCA without SAP_ALL profile
1371222 - Additonal authorizations for E2E RCA EhP1 SP20
I hope this help.
BR,
Allam

UWL : User J2EE_ADMIN has no RFC authorization for function group SYST

Dear All,
When I am trying to register the system in universal Worklist Administration, It gives the following error,
System <>: Fri Jul 11 18:58:11 IST 2008
(Connector) :com.sap.netweaver.bc.uwl.connect.ConnectorExc eption:Fri Jul 11 18:58:11 IST 2008
(Connector) :com.sap.mw.jco.JCO$Exception:User J2EE_ADMIN has no RFC authorization for function group SYST.
I have tried by giving the role SAP_ALL to J2EE_ADMIN , then also i am getting the same error. Can anybody through some light on this....
Helpful tips will be rewarded...
Sanoj

Sanoj,
check these threads
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5489621
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5267551
https://forums.sdn.sap.com/click.jspa?searchID=13972376&messageID=5636365
reward points if helpful

QM-IDI : User QMIDI has no RFC authorization for function group QIRF

Hi,
I am in the process of trying to connect from Labware LIMS to SAP ECC 6, specifically the quality module. The aim is to use Labware to connect to SAP via the QM-IDI interface to
1) Download inspection lots from SAP
2) Upload usage decisions and inspection lot results to SAP.
Initially I specified an account on SAP of the type 'Communications Data', however any time I tried to connect to SAP from LIMS via the interface with this account it gives an 'Incorrect Username/Password' error in the trace logs. I then changed the account to a dialog user, which seems to be partially more successful, however the trace logs captures the following error 'User QMIDI has no RFC authorization for function group QIRF' when I try to connect from LIMS to SAP via the QM-IDI interface after changing the user to type dialog.
I would appreciate any guidance on how to resolve this issue.
Regards.

i got stuck on configuring idi. plz guide me. bond_chaitu at yahoo dot com

UWL: User MSSNO1 has No rfc authorization for function group SWK1

Dear all,
We have just recently upgrade our support pack and the UWL in the portal is not working anymore. It throw an error message when we click on the work item.
(connector): com.sap.mw.jco.JCOSE Exception:User MSSNO1 has No rfc authorization for function group SWK1
Anyone know how to fix this?
I am not too sure about the authorization part. Can someone guide me please?
Thanks.
Regards,
Bryan.

Hi Brain,
Pls check this thread for solution
Re: UWL and function group swk1
Regards,
Harini S

Authentication for BusinessObjects; "no RFC authorization"

Similar Messages

Maybe you are looking for