RFC Authorization Requirements

Hi,
I hope a simple question here. I am trying to call up an RFC using .Net connector 1.0 (yes I am old school). The server is one where I have limited access. I am trying to just establish an RFC connection at this point but cannot get past it. The message is below. I know I have the correct username and password (have tried 2 different logons. Is it possible that I haven't the proper authorization to establish an RFC connection, and the error thrown is below? I could see if I don't have access, but the error message doesn't seem to fit the bill in that case.
Any input would be appreciated, thanks!
SAP.Connector.RfcLogonException: Name or password is incorrect (repeat logon)
at SAP.Connector.SAPConnection.ThrowRfcException(RFC_ERROR_INFO_EX rfcerrInfo, Encoding encoding, String languangeCode)
at SAP.Connector.SAPConnection.Open()

Hi Jonathan,
Are you getting this error while executing your application or while creating a proxy?
Check other parameters. System number, application server IP number, language. Also I recommend, if you are getting this error while creating proxy, use custom settings not select the SAP server on dropdown.
Best Regards,
Huseyin Akturk
SW Engineer & SAP ABAP Consultant
www.huseyinakturk.net

Similar Messages

Authorization Required for RFC user in R/3-APO system.

Could you please help regarding one authorization issue. I want to know the authorization required for one RFC user. Now this RFC user used for RFC connection of SAP R/3 - SAP APO system. user type is given dialog type and SAP_ALL profile has been given to this user id. Now I have to remove SAP_ALL from this user id in R/3 and APO system and provide the required the authorization in R/3 and APO system.
Regard
Auroshikha

The RFC authorisation depends completely on what the user is doing (ALEREMOTE?). We can't tell you what RFC auths your connection requires.
There is a guide to doing this here: https://wiki.sdn.sap.com/wiki/display/Security/BestPractice-HowtoanalyzeandsecureRFC+connections

DB connect no data found is rfc connection required

Hi Gurus,
I want to retrieve data from oracle database, i have all the table with data in it, but through the source system i.e db connect it does not display any contents of the table, it says no data found, the installation was all done perfecttly fine, i can read the table fields but i am not able to read the data from the table. what could be the problem.
Is an RFC connection required for this db connect to retrieve the data from oracle. or else what is the issue. Can anyone please help me out on this, I already posted long back on this still no reply on it. From the osss notes it allgives information about the intallation but it there is no data found then it does not give any information onthis. Can anyone please help me out on this.
Thanks,
Hem

Hi Hem,
You want to retrieve data from Oracle Database using BW and you are having a problem?
Try isolation technique to solve your problem.
Try to use third party softwares e.g. MS Excel. Retrieve data from Oracle using MSExcel. If MSExcel can retrieve data then you can conclude:
a.) The network connection to Oracle is fine.
b.) Oracle is up and running and is able to serve data from your specified table.
RFC Connection is not required. RFC is only useful for SAP to SAP communication. This connection uses a different technique and uses a different driver to communicate. SAP provided DB Connect Engine. A similar approach as what Microsoft's OLEDB is doing. This to make a transparent connection between various database systems. (whether MSSQL, Oracle, MSACCESS, SYBASE etc.)
As part of isolation technique, are you sure you are accessing the correct table? Try to access other tables. If you can access data of different tables then something is wrong with the table you want to access.
Have you check authorization issues? Are you allowed to extract data?
Hope I have helped. If I did, please grant points...
--Jkyle

S_RFC,RFC authorization - what names of the RFC objects to be protected(+)?

Good day. I have a WebDynpro component which executes a BAPI in backend.
Which names of the RFC objects to be protected should I enter?
I have entered the following PRGN_G2EE, RFC1, SDIFRUNTIME, SYST, SYSU... But now it says that "User XXX has no RFC authorization for function group RFC2.".
OK, I can add RFC2 but where is the end? Where can I find a minimum required list to run BAPIs?

Hi
for this question : But now it says that "User XXX has no RFC authorization for function group RFC2."
1. Before executing the model u can check the logged in your and its role ,based on this credentials only allow to execute .
and for this : Where can I find a minimum required list to run BAPIs
1. Just a set of authentication to deal with that system in other words All those things to create a JCO connection required to run a BAPI.
(Elaborate this problem. I have written based on some keywords only )
Best Regards
Satish Kumar

User PI_JCO_RFC has no RFC authorization for function group ERFC

I am doing IDOC-File scenario between newly installed PI and ECC 6.0 systems.
I have done all the configurations on XI and R/3 end.
When I TEST to send an IDOC from WE19, I could do it successfully and the status is 03 in we02.
But when I go and check SM58, I get the said error: User PI_JCO_RFC has no RFC authorization for function group ERFC.
From that I understand RFC in R/3 end require some authorizations. Am I right? If so, what objects need to be added my user role?
Please advise.
Thanks
Shiva

Hi,
Try to add the following authorization object to the role(s) of the RFC user:
S_RFC
Set the following authorizations:
RFC_TYPE = FUGR (function group)
RFC_NAME = <name of the function group containing the BAPI>
ACTVT = 16 (execute)
Regards
Seshagiri

UWL:User has no RFC authorization for function group SDIFRUNTIME .

Hi,
In portal, while registering the system in UWL , I am getting this error:
(Connector) :com.sap.mw.jco.JCO$Exception:User <userid> has no RFC authorization for function group SDIFRUNTIME .
I have given the permission to the user id as owner for the system, with which I am logged in, and registering the system.
It is also confirmed, that in the backend, the same user has authorization for the said RFC.
Please help as it is urgent.
Thanks,
Sonali
Edited by: Sonali M S on May 30, 2008 6:32 AM

Hi Sonali,
If your component is a webdynpro component, back end system is accessed via a logical system / JCO Destination. User id ( Lets say JCOUSER) and password is given for accessing backend via this JCO connection. This user id is different from particular user's backend user id. Verify whether JCOUSER has required authorizations in backend.
I hope it helps.
Regards,
Uday.

Content Server Error: 407 Proxy Authorization Required

Hi Experts,
I am new to Content Server and have recently installed Content Server 6.40 with MaxDB 7.8 database on a Windows 2008 server.
The installation completed successfully and IIS server was configured as per guide. The Content server is running when checked through URL on server.
Next, we created a new repository with following details, but are facing "HTTP error: 407 Proxy Authorization Required" while testing the connection.
Settings in OAC0
Content Rep.    A1
Document Area: ArchiveLink
Storage type: HTTP Content Server
Version no.: 0046
HTTP server: <IP of Windows server where CS is intalled>
Port Number     1090
HTTP Script     ContentServer/ContentServer
Transfer drctry C:\temp
HTTP Port 1090 is open from SAP system(HP-UX) to Content Server(windows) and there is no firewall between the 2 servers, but we still see the error in OAC0 and CSADMIN. I also tried setting the security parameter to 0 in contentserver.ini file, but that didn't help either.
The content server was installed using administrator user.
Would appreciate your inputs on what am I missing?
Thanks.
Regards,
Varun

Hi Varun,
Please change Document Area: ArchiveLink .
Remove Archive link and change it to Document Management system ( DMS)
Check the results and post the output.
Regards,
Deepak Kori

IDOC Scenario - User has no RFC authorization for function group EDIN

Hi all,
I'm trying to configure an IDOC scenario from ECC to XI.
RFC's, ports and destinations already configured. On WE19 I'm creating an IDOC for testing the scenario. The IDOC is sent successfully, and it stops on TRFC Monitor with error "User PIRFCUSER has no RFC authorization for function group EDIN." .
Some of you knows what authorization is needed? Basis team said the roles are the same at DEV environment, and there this scenario works fine.
Thanks for your help.
regards.
Roberti

Hi,
Check with PIRFCUSER user , that is having the right authorization or not ..
And make sure that this user is present in the system & it should not locked.
to check that user is present or not-----goto su01 of the system & check
Regards
Seshagiri

RFC Lookup error :No RFC authorization for function module

Hi All,
I have created RFC in the PI system and enabled it as remote. I am working on PI7.1
I have imported RFC into Repository.But when i am trying to execute RFC lookup function in the graphical mapping I am getting No RFC authorization for function module error.
Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception> com.sap.aii.mapping.api.StreamTransformationException: Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception> at com.sap.aii.mappingtool.flib7.RfcLookup.cacheMore(RfcLookup.java:95) at com.sap.aii.mappingtool.tf7.rt.AMultiResIterator$MultiOutIterator.gotoNextContext(AMultiResIterator.java:95) at com.sap.aii.mappingtool.tf7.AMappingProgram.processNode(AMappingProgram.java:315) at com.sap.aii.mappingtool.tf7.AMappingProgram.processNode(AMappingProgram.java:406) at com.sap.aii.mappingtool.tf7.AMappingProgram.start(AMappingProgram.java:496) at com.sap.aii.mappingtool.tf7.Transformer.start(Transformer.java:133) at com.sap.aii.mappingtool.tf7.AMappingProgram.transform(AMappingProgram.java:626) at com.sap.aii.ibrep.server.mapping.exec.ExecuteXiMappingCommand.transformInternal(ExecuteXiMappingCommand.java:197) at com.sap.aii.ibrep.server.mapping.exec.ExecuteXiMappingCommand.execute(ExecuteXiMappingCommand.java:94) at com.sap.aii.ib.server.mapping.exec.CommandManager.execute(CommandManager.java:43) at com.sap.aii.ibrep.server.mapping.ServerMapService.execute(ServerMapService.java:40) at com.sap.aii.ibrep.server.mapping.MapServiceBean.execute(MapServiceBean.java:40) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at com.sap.engine.services.ejb3.runtime.impl.RequestInvocationContext.proceedFinal(RequestInvocationContext.java:43) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:166) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatesTransition.invoke(Interceptors_StatesTransition.java:19) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Resource.invoke(Interceptors_Resource.java:71) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.doWorkWithAttribute(Interceptors_Transaction.java:38) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_Transaction.invoke(Interceptors_Transaction.java:22) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:189) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_StatelessInstanceGetter.invoke(Interceptors_StatelessInstanceGetter.java:16) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_SecurityCheck.invoke(Interceptors_SecurityCheck.java:21) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.Interceptors_ExceptionTracer.invoke(Interceptors_ExceptionTracer.java:16) at com.sap.engine.services.ejb3.runtime.impl.AbstractInvocationContext.proceed(AbstractInvocationContext.java:177) at com.sap.engine.services.ejb3.runtime.impl.DefaultInvocationChainsManager.startChain(DefaultInvocationChainsManager.java:133) at com.sap.engine.services.ejb3.runtime.impl.DefaultEJBProxyInvocationHandler.invoke(DefaultEJBProxyInvocationHandler.java:164) at $Proxy1005_10002.execute(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:585) at com.sap.engine.services.rmi_p4.P4DynamicSkeleton.dispatch(P4DynamicSkeleton.java:234) at com.sap.engine.services.rmi_p4.DispatchImpl._runInternal(DispatchImpl.java:351) at com.sap.engine.services.rmi_p4.server.ServerDispatchImpl.run(ServerDispatchImpl.java:70) at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:62) at com.sap.engine.services.rmi_p4.P4Message.execute(P4Message.java:37) at com.sap.engine.services.cross.fca.FCAConnectorImpl.executeRequest(FCAConnectorImpl.java:872) at com.sap.engine.services.rmi_p4.P4Message.process(P4Message.java:53) at com.sap.engine.services.cross.fca.MessageReader.run(MessageReader.java:58) at com.sap.engine.core.thread.execution.Executable.run(Executable.java:108) at com.sap.engine.core.thread.execution.CentralExecutor$SingleThread.run(CentralExecutor.java:304) Runtime exception when processing target-field mapping /ns0:MT_FileDummy/File; root message: Unhandled RFC exception: <rfc:Z_MAIL_LOOKUP.Exception xmlns:rfc="urn:sap-com:document:sap:rfc:functions"><Name>RFC_ERROR_SYSTEM_FAILURE</Name><Text>No RFC authorization for function module Z_MAIL_LOOKUP.</Text><Message><ID>RFC_ERROR_SYSTEM_FAILURE</ID><Number>341</Number></Message><Attributes><V1>RFC_NO_AUTHORITY</V1></Attributes></rfc:Z_MAIL_LOOKUP.Exception>
13:42:37 End of test
Edited by: Rams on Apr 17, 2009 1:43 PM

Hi! Rams,
I think the issue is related to Authentification Issue..Even though u did correctly please check once the below
1) Check any Typo Erros are there while configuring or giving names in Lookups.
2) please check Authorizations like ID and PWD and Sufficient Roles
3) Also please check did u given paramters correctly while doing RFC look up I mean paramers , Binding parameters and RFC channel name and adapter type or Simple type it must be an adapter
4) In ID part while configuring Interface determinaition you need to give your RFC look Up name there also..Hence check whether u given or not if yes correctly or not
5) Also remember one thing if your scenario is correct mostly you can know the result in mapping itself it seems while testing Message mapping and Interface mappings give your RFC look up paramters in the parameters tab present in TEST tab and later in Document tab give Input...and execute it works if it doesn;t works and if there is an issue with RFC you can get there only..ok
Also go through the below document::
[https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/20befc9a-aa72-2b10-ae9b-b0988791d457]
I hope this will give u brief idea...
Also check with basis while taking SAP_ALL authorization so that first u ill came to know whether issue is related to authentification or RFC module itself remote enabled and also do SXI_CACHE also ocne to refresh ESR and ID objects..
Regards::
Amar Srinivas Eli

How to return "HTTP/1.0 401 Authorization Required" from OSB's Message Flow

How can I return "HTTP/1.0 401 Authorization Required" header from OSB's Message Flow?
Using of "HTTP Transport -> Authentification" is not possible, because I need flow condition. Transports Headers activity from design palette doesn't allow to send such headers.
Practical usage: request for kerberos ticket by sending two headers: 401 and WWW-Authenticate: Negotiate...

Can you briefly expand the use case for better understanding?
HTTP Client---> Hand Shakes or what ever ----> HTTP Proxy (OSB )---> Pipeline----
Philosophy behind pipeline is that it is designed to work on the request. Correct me if I'm wrong.
What you are asking is ability to control the hand shake either in Pipeline or some way during proxy configuration. Unfortunately there is no configuration that is exposed for HTTP proxies in OSB to control that behavior.
Manoj

CE10 ; Crystal_webcompserver : Log message: NT Authorization Required.

Post Author: gjmoyer
CA Forum: Administration
On our Crystal Enterprise 10 server. We are getting thousands of Warning messages logged to the Application event log from Crysal_webcompserver with description "Log message: NT Authorization Required."
What are these caused from, and how to I resolve this?

Post Author: edoco
CA Forum: Administration
Having the same issue here...
The symptom was removed after restarting all services related to Crystal..
Seems to happen every few weeks.. Still investigating the actual problem.
gjmoyer:
On our Crystal Enterprise 10 server. We are getting thousands of Warning messages logged to the Application event log from Crysal_webcompserver with description "Log message: NT Authorization Required."
What are these caused from, and how to I resolve this?

Authorization requirement

hi,
this is my requirement
how to provide authorization to be primarily based on
plant code
purchasing group
material group
incoterm
vendor account group.
please provide me the procedure and if there is any code for it please provide.
thanks in advance

PARAMETERS carr TYPE spfli-carrid.
AT SELECTION-SCREEN.
AUTHORITY-CHECK OBJECT 'S_CARRID'
    ID 'CARRID' FIELD carr
    ID 'ACTVT' FIELD '03'.
IF sy-subrc <> 0.
    MESSAGE 'No authorization' TYPE 'E'.
ENDIF.
AUTHORITY-CHECK OBJECT auth_obj [FOR USER user]
                        ID id1 {FIELD val1}|DUMMY
                       [ID id2 {FIELD val2}|DUMMY]
                       [ID id10 {FIELD val10}|DUMMY].
Addition:
... FOR USER user
Effect
This statement checks whether authorization is entered in the user master record of the current user or the user specified in user for the authorization object entered in the field auth_obj, and whether this authorization is sufficient for the request specified in the statement. A flat character-type field that contains the name of an authorization object is expected for auth_obj. Without the addition FOR USER, the authorization of the current user is checked.
With id1 ... id10, you must have at least one and can have a maximum of 10 authorization fields listed for the authorization object specified. With id1 ... id10, "flat", character-type fields are expected that contain the name of the authorization fields in uppercase letters. If an authorization field is specified that does not appear in the authorization object, no check can be executed and sy-subrc is set to 4. For each specified authorization field, you must specify with FIELD either a value to be checked in a flat, character-type field val1 ... val10 or the addition DUMMY.
The authority check is carried out if the check indicator for the specified authorization object for the current context is set to check with any proposal status. If the check indicator is set to no check, no authority check is carried out and sy-subrc is set to 0, as with a successful check.
The authorization check is successful if one or several authorizations are created for the authorization object in the user master record and if - for at least one of the authorizations - each of the value sets defined there for the authorization fields specified using FIELD includes the value val1 ... val10 to be checked. Authorization fields that are not included in the statement or that have DUMMY specified for them are not checked. If the check is successful, sy-subrc is set to 0. Otherwise, it is set to a value not equal to 0 (see below).
System Fields
sy-subrc Meaning
0 Authorization successful or no check was carried out. An authorization for the authorization object was found in the user master record. It's value sets include the specified values.
4 Authorization check not successful. One or several authorizations were indeed found for the authorization object in the user master record and they include the value sets, but not the values specified, or incorrect or too many authorization fields were specified.
12 No authorization was found for the authorization object in the user master record.
24 Incorrect authorization fields or an incorrect number of authorization fields was found. This return value is no longer set since Release 6.20. Up to Release 4.6 it is set only if the profile parameter "auth/new_buffering" has a value less than 3.
40 An invalid user ID has been entered in user.
Notes
The authorization fields of an authorization object are fields for data and a field with the name ACTVT for activities. Activities are represented by abbreviations with two characters that are defined in the ACTVT column of the database table TACT or have a customer-specific definition in TACTZ. Possible activities are assigned to the authorization field ACTVT in the authorization object. In the user master record, you have authorizations for data and activities in the form of operands for logical expressions stored as value sets. Here, masking characters can be used for generic authorizations.
When checking the authorization of the current user without the addition FOR USER, the content of the system field sy-uname is not evaluated, but the actual user name is used instead.
The most important contexts for which check indicators can be set are transactions. The execution of a statement AUTHORITY-CHECK can have different results depending on how the current program flow was started. In general, a check indicator should always been set to check.
For authorization objects of the areas SAP NW AS ABAP (BC) and human resources management (HR), a check indicator cannot be set to no check.
Addition
... FOR USER user
Example
Check as to whether the current user has the authorization required for displaying the airline that he specifies on the selection screen. The used authorization object is called S_CARRID and includes the authorization fields CARRID for the name of an airline and ACTVT for the activity. The abbreviation "03" stands for the "Display" activity and is one of the activities that are assigned to the authorization object S_CARRID.
PARAMETERS carr TYPE spfli-carrid.
AT SELECTION-SCREEN.
AUTHORITY-CHECK OBJECT 'S_CARRID'
    ID 'CARRID' FIELD carr
    ID 'ACTVT' FIELD '03'.
IF sy-subrc <> 0.
    MESSAGE 'No authorization' TYPE 'E'.
ENDIF.

Authentication for BusinessObjects; "no RFC authorization"

Hi,
I installed BO Edge XI 3.1 and the Integration Kit; in SAP BW we created a user "bobw" to be used by the Integration Kit. I set the connection details in CMC -> Authentication -> SAP at "Entitlement Systems". When I click on the "Role Import" tab I get the following error message: "User BOBW has no RFC authorization for function group SYS".
We set the rights in BW according to the Integration Kit Installation Guide, page 66.
Is this only a missing right or another error?
Thanks!

>
Ingo Hilgefort wrote:
> did you run an authorization trace for the user that is entered in the CMC / entitlement system page ?
Not yet as we have done this once and there were a lot of authorisations to assign. That's why I hoped that the documentation contains the necessary authorisations.

RFC Authorization

All,
we are trying to do a HTTP to RFC sccenario and we get the following error while sending the message to the remote R3 system - "User xxx has no RFC authorization for function group nnnn".
First we tried giving access to that function group later it complained about another function group and another. Im able to log into the R3 system and execute the BAPI directly without issues.
What RFC related permission should my user have to make the call work from HTTP to RFC?
Thanks.

Hi,
please see the below threads
RFC: Non-unicode to Unicode - Authorization error
I E ping error: User XIRWBUSER has no RFC authorization for ...
com.sap.mw.jco.JCO$Exception (104) RFC_ERROR_SYSTEM_FAILURE
no RFC authorization for function group RFC2
Regards..
Chilla..

(104) RFC_ERROR_SYSTEM_FAILURE: User has no RFC authorization

Hello Guru's
I am getting the followong error when trying to open the BI reports.
The initial exception that caused the request to fail was:
User has no RFC authorization for function group SDIFRUNTIME.
com.sap.mw.jco.JCO$Exception: (104) RFC_ERROR_SYSTEM_FAILURE: User has no RFC authorization for function group SDIFRUNTIME.
at com.sap.mw.jco.MiddlewareJRfc.generateJCoException(MiddlewareJRfc.java:455)
at com.sap.mw.jco.MiddlewareJRfc$Client.execute(MiddlewareJRfc.java:1442)
at com.sap.mw.jco.JCO$Client.execute(JCO.java:3979)
at com.sap.mw.jco.JCO$Client.execute(JCO.java:3416)
at com.sap.mw.jco.JCO$Repository.execute(JCO.java:20471)
I have no clue what is the reason I am getting the error.
Please help me out in this.
Regards,
Pramod

Hi,
   This is due to BI system authorization issues. You need to give/get proper authorizations to the BI user id with which you are connecting to back end via JCO connection. You have to assign additional roles to this user id to resolve this issue.
      If you are working on client environment you have to contact back end (BI) security administrator to get more authorizations. If you provide the error message to them, they will know which role to assign.
     If you are working in sandbox environment assign SAP_ALL. This will resolve the issue.
    I hope it helps..

RFC Authorization Requirements

Similar Messages

Maybe you are looking for