User permission at RFC functions

Hi,
How can i do that just one user can call my RFC functions and others can' t?
Best Regards.
Hakan.

Is it a local or remote call
- Remote Call, create/maintaint roles and authorizations related to object S_RFC
- Local : check an authorization object in your FM and create/maintain roles
Regards,
Raymond

Similar Messages

Best practice usage of system users for different RFC functions execution

Hello experts,
Could you guys share your thoughts on RFC type 3 - system userid usage:
Would it be recommended to use ONE RFC destination (type 3) for execution of various functions?
Is it recommended using the different RFC destinations (type 3) (with different system user ids) depending on the functions execution?
Thanks in advance for your thoughts.
Thanks
Himadama

Thanks Julius for your information.
Option 1: System user id / password:
Password is sent over the network. But SNC control would take care of this.
1 destination = 1 system userid
If the useru2019s password is compromised the risk would be limited to that destination function group (RFC_NAME in S_RFC auth object)
System users only need RFC authorizations (S_RFC).
Only monitoring System users would be enough.
Better password management if required.
Option 2: u201CCurrent Useru201D option:
One user may need access for more than one function groups access ( RFC_NAME).
Compromising user's password would result more damage than the system user. Since this user has broad access to execute multiple function groups.
Monitoring these users would be overloaded job in this case becoz of increased users numbers.
The management of authorizations (roles) to these users may require strict approval process.
Option 3: Trusted system option:
u2022          RFC_SYSID :
u2022          RFC_CLIENT:
u2022          RFC_USER : ' '
u2022          RFC_EQUSER: Y (for Yes)
u2022          RFC_TCODE : *
u2022          RFC_INFO :
u2022          ACTVT     : 16
Seems user requires both the auth objects S_RFCACL and S_RFC in this case.
Compromising user's password would result more damage than the system user. Since this user has broad access to execute multiple function groups.
Monitoring these users would be overloaded job in this case becoz of increased users numbers.
The management of authorizations (roles) to these users may require strict approval process.
Would you say considering the system userid/password is better option than other methods with SNC control in place? Please share your thoughts.
Thanks
Himadama

How to configure a user to access RFC functions

In production system, a user account with RFC access privilege is need to configured for a .NET Connector application.
Some documents see than need to add access object RFC_ACL for this user.
But how to operate to add such kind of access object?
Thanks a lot. I'm not very professional on R/3 operation.

Well, for fastest you don't want Fast User Switching enabled, that leaves everything in the other account running, you want to log out of that other account & log into the new one.
Just don't setup Mail or such things in the new account, remove uneeded things from Accounts Login Items.

Debugging RFC function module from ECC to CRM

Hi All,
My requirement is to debug an RFC function module present in CRM(7.0) system from ECC(6.0) system. A report program in ECC will call CRM custom FM. I found many posts in SDN with the same issue and tried to implement suggestions provided there. But I couldn't succeed. The approach I followed is:
I logged in to ECC report program and kept an external breakpoint just before the function module call.
I logged in to CRM system, opened the function module and kept an external breakpoint there.
In both the systems I provided the dialogue userid( id through which I log in to SAPGUI) in the system->settings->debugging option.
In CRM I activated the external break point in transaction SRDEBUG.
Now when I execute the report program in ECC, control stops at the breakpoint. If I press F5 at the function call, control is not going to the external break point set in the CRM FM. I am getting output of FM directly.
I tried with different settings like turning on the check box for IP matching and session breakpoint active immediate, switching to classic debugger etc. I also tried to provide the RFC user id instead of dialogue user but system throws exception saying only dialogue userids are allowed. I found that by inserting an infinite loop statement, control goes inside the RFC CRM FM but I prefer not to change the code.
Please let me know if I missed anything.
Thanks and Regards,
Naren

Hi,
Debug RFC calls
When an RFC function module is called it is usually not possible to debug the call, using the below techniques we can achieve the same. For this example we are calling an RFC enabled FM in ECC system from CRM system.
Scenario 1: Calling a custom RFC FM
STEP 1: Add an infinite loop in the remote custom Function Module (adding a u201CDO. ENDDO.u201D statement at the start of the FM would be enough).
STEP 2: Execute your program in the CRM system. The execution stops at the RFC call, because of the infinite loop.
STEP 3: Now login to the ECC system and go to transaction SM51 select the process which is executing the RFC and navigate to the menu: u201CProgram/Session->Program->Debuggingu201D this triggers the debugger session in a separate window.
Scenario 2: Calling a Standard RFC FM
When we are debugging a standard program we cannot add the infinite loop, hence we cannot go to SM51 and debug the work process. The RFC destination for the ECC system has a User specified, the RFC function module gets executed using this users credentials. Usually the basis team set up the RFC user as non Dialog user, this does not allow debugging. Contact your Basis team and get this changed to a dialog user enabling you to debug RFC function calls via the normal debugger.
Note: User name configured in the RFC destination (transaction SM59)
Note: User type for the RFC User (transaction SU01D)
Hope this will be helpful..

RFC function module always creating BPs with the same user name (RFC user )

Hi All
I posted the below question in a different area before. But thought it would be more suitable here.
Moderators - Please let me know if am doing any mistake.
Question:
I have a RFC function module in CRM that creates Business Partners in ECC (XD01 tcode).
I am using a dialog RFC destination configured in SM59 in CRM.
But my RFC function module in CRM is always creating the Business Partners in ECC with the RFC user id (the user that we maintain for the RFC destination in SM59).
This is a problem for the users because they are not able to track the actual person responsible for creating these Business Partners.
Can somebody please let me know how to solve this problem?
Thanks
Raj

Hi.
You may use the trust relationship between CRM and R/3 and in SM59 instead of set a specific username, you set the flag "current user".
With this flag, the system will access R/3 system with the user logged in CRM system. The Trust relationship must be created between CRM and R/3 in order to the system doesn't ask for a password to login in R/3.
If you need more details please reply.
Kind regards,
Susana Messias

User has no RFC authorization for function group.

Hi expert,
I am calling a new function module from the WebDynpro Java that is causing an issue that User has no RFC authorization for function group. if the user doesnt have proper authorization like SE37 Transactions Code and others.
But there is some more existing function module in the same application that is working fine without having above issues with same access.
I am passing the USERID as input in the function Module and execute simply.
So can you please tell me the Way to handle it?
I will really appreciate your answer.
Thanks
Ali

Hi Rali,
I think,there is problem with ur JCO connection..
Please check the following steps -
1. Go to transaction SM59.
2. Choose Create.
3. Enter the following:
RFC destination: SAPSLDAPI
Connection type: T (Start an external program via TCP/IP).
4. Choose Enter.
5. Choose Technical settings and specify the following data:
a. Select Registered Server Program as the activation type.
b. Enter the program ID of the SAP J2EE Engine that acts as the RFC server. Enter SAPSLD_xyz (xyz is the SID of SAP J2EE Engine Server.)
c. Enter the gateway host and the gateway service of R/3 server
d. If the system is a Unicode system, navigate to Special Options and select the option
Non-Unicode or Unicode in the section Character Width in Target System according to the gateway
server.
6. Save your entries.
Now
1. Go transaction SLDAPICUST.
2. Switch to editing mode and choose Insert Row. Specify the connection parameters of the J2ee server ,
Host name, port Number, user and password - and set this SLD server as Primary.
Only the entry marked as Primary is active.
Please check whether there is entryof r/3 server in the j2ee server /etc/services folder.If no entry is there then add -
R/3server port/TCP
in the service file.
Please check the r/3server service folder and host folder - do they have entry of java server, if no add the entry in the same way as done above for j2ee server.
Also check the Group ,that u have entered for r/3 server in SLD exist in R/3 server or not if not add it....
I hope this will help you ...
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks,
Gunja
Edited by: Armin Reichert on Apr 26, 2008 6:35 PM

Getting Return values from RFC function call with visual basic

Hi,
I am creating a sample app to connect to a SAP system which call its RFC functions created with ABAP. It was known that the function will return more than 1 return values.
   SAP Function name ==> "ZFMTP_RFC_GET_RESULT"
        Export parameters (to SAP):
                - Student Name [char 10]         ==> "STUNAME"
                - Student ID         [char 20]        ==> "STUID"
       Return values (From SAP):
                - Results [char 10]        ==> "RESULT"
                - Remarks [char 200]        ==> "REMARKS"
i have managed to get sample codes for connecting and call a RFC function with vb but they only get a return value. How do i retrieve multiple return values like the above function "RESULT" and "REMARKS"?
Here's my vb code to accessing the function
        Dim R3 As Object
        Dim FBFunc As Object
        Dim returnFunc As Boolean
        Dim connected As Boolean
        R3 = CreateObject("SAP.Functions")
        R3.Connection.Client = "000"
        R3.Connection.User = "BCUSER"
        R3.Connection.Password = "minisap"
        R3.Connection.Language = "DE"
        R3.Connection.System = "dtsystem"
        R3.Connection.Applicationserver = "xxx.xxx.xxx.xxx"
        connected = R3.Connection.Logon(0, True)
        If connected <> True Then
            MsgBox("Unable to connect to SAP")
        End If
        FBFunc = R3.add("ZFMTP_RFC_GET_RESULT")
        FBFunc.exports("STUNAME") = "Jonny"
        FBFunc.exports("STUID") = "12345"
        returnFunc = FBFunc.Call() <<== How do i get the return value? or RESULT and REMARKS of the RFC Function?
thanks alot.
Edited by: Eugene Tan on Mar 4, 2008 7:17 AM

Hi Gregor,
Thanks for the link....i am having some doubts with the codes, hope you can clarify them for me if you know the codes..
Below is the code snippet.
Set impReturn = CHPASS_FN.Imports("RETURN") <<=== is RETURN the standard keyword to get a                                                                                return object?
expPassword.Value = currpass
expNewPass.Value = newpass
expFillRet.Value = "1"
''' Call change password function
If CHPASS_FN.Call = True Then
    outFile.Write (", Called Function")
    Message = impReturn("MESSAGE") <<==== So if i have 3 return values..i just replace with the return                                                               value variable names?
    outFile.WriteLine " : " & Message
Else
    outFile.Write (", Call to function failed")
End If
thanks alot...all your help is very appreciated.

Unknown error calling a RFC Function Module in BODI

Hi all,
I am having an issue identifying the error that my batch job in BODI is giving with regards to a RFC function module call in my query. The value returned by the standard parameter 'AL_RFC_RETCODE' are square characters ( ).
At the completion of the job, the error message 'RFC CallReceive error <Function ZCT_INDSLS_SLS_TRN_INSERT: Invalid request.. Invalid request.>.' is being output.
Correct me if I'm wrong but the parameter 'AL_RFC_RETCODE' should return standard values as per the techical manual provided to undertand any errors that might occur during a RFC FM call.
Can anyone help me on this?
Best regards,
Andrew Wong

Hi Senthil,
I think you answered your query in your question itself
The user ID and password need to be maintained in RFC destination in SM59.
Go to SM59 and then click on test connection..if it does not ask for ID and passwoed that means correct ID and password is maintained in SM59 otherwise maintain it.
Regards,
Atish

Calling a RFC Function Module

Hello Guys,
I have a question regarding calling a RFC function module.
In BW - BI 7.0 I call a RFC function module:
(The ABAP program in BW-BI 7.0 is below)
CALL FUNCTION ''ZTESTFUNCTIONMODULE' " Function module in ECC
     DESTINATION 'DECCLNT110' " ECC system
    TABLES
      it_gl_item   = it_gl
      it_errlog_gl = it_errlog_gl.
The 'ZTESTFUNCTIONMODULE'   is RFC enabled in the ECC system.
The purpose is we retarct the data from BW to ECC.
When I run the function module it always asks for the user id and password.
The SAP logon screen appears and it asks for the user id and password.
The destination is maintained in the SM59 transaction and also the user is maintained there. I think it should login automatically into remote system and return the tables. is it correct. How to skip the logon screen.
Do I have to pass the user id and password in the function module. I think it should take the user id from the SM59 destination. Is it correct.
Please advise. As always thanks for your help guys.

Hi Senthil,
I think you answered your query in your question itself
The user ID and password need to be maintained in RFC destination in SM59.
Go to SM59 and then click on test connection..if it does not ask for ID and passwoed that means correct ID and password is maintained in SM59 otherwise maintain it.
Regards,
Atish

Get interface of RFC function modules in a remote system

Hi,
my goal is to write a report which checks if DDIC structures in two systems fit together when I use RFC`s.
I have the destination and the name of the RFC.
Can somebody tell me if I can get a list of the Importing/Exporting Parameters of this RFC? Maybe even with a typedescribtion?
Thanks for you help.
Best regards
Lars
Edited by: Lars-Eric Biewald on May 21, 2008 8:39 AM

Hello ,
Thank you for your quick help.
Here I have 3 ECC 6 system .
1 Central systen
2 Slave system
Data will be updated to 2 slave system using RFC function module .
We've already the SAP address, Client, User name , Password.. of the remote system
So here how we will create RFC in SM59 to be used in the RFC call ?
We will transfer the username, password , client in the RFC function module/..
Here I do not know how to create RFC connection in SM59 and how to use them in ABAP
Could you please help me ????
Thanks

RFC Function Module Configuration

Hi Experts,
             I have created an RFC function module which pushes data from R/3 system to XI. I need to configure this RFC in SM59. I am having XI server details and R/3 server details. Anyone can help me how to configure this and what kind of connection i have to use. so that data is pushed to XI system. we are having a bunch of RFC's in our project. we need to create configuration for all the RFCs.
              and what is Program ID?
              Please give me the sequence of steps for configuration.my mail id is [email protected]
              Points will be awarded for all the answers.
Thanks & Regards,
Poorna.

hi poorna,
              step 1- first go to the transaction sm59 and here you can
                        create a destination for R/3 to R/3 server type 3.
              step 2- Now give the IP address for the another R/3 system (XI) here
                         and the system no will be 00 (default).
               step 3- press save. now go to the second tab logon/ security
                           here declared the clind no, language , user name and
                         password.
               step 4- press save and then check the test connection.
Do reward if usefull.
regards,
vijay

RFC function module with call transaction and Import memory ID

Hi,
I am calling RFC function module from R/3 which exists in BW.
In BW stand alone function module works fine.
When I am Calling from R/3 it is not working,
Can you tell me is it because of the below code, And suggest if any corrections required.
I am calling the call transaction and using EXPORT memory iD inside the program
and IMPORT in after that.
And populating RFC table's table " p_i_tcode_user" finally.
set parameter id 'TCD' field p_tcode.
call transaction 'Z_BW_RSUSR002' AND SKIP FIRST SCREEN.
ENDIF.
get the final user data from submitted program
import gt_users_complete from memory id tcode_userid.
LOOP AT gt_users_complete.
      lwa_tcode_user-tcode = p_tcode.
      lwa_tcode_user-uname = gt_users_complete-Bname.
      APPEND lwa_tcode_user TO p_i_tcode_user.
ENDLOOP.
Thanks,
Veerendra.

HI,
   Can you just exaplin it clearly plz..
Thanks
Mahesh

Help on Parameters in RFC Function Module

Hi,
I am creating a RFC function module. The requirement is:
In a report program, the user enters ABC and XYZ values on the selection screen. These 2 fields are select options so will have From-Value and To-Value. This report program will pass these values to my RFC FM and depending upon these values I have to read a DB table and pass the data back to the program.
My doubt is, how should I intake these select options value? i.e should I specify them in import tab or tables tab? What TYPE/LIKE should I use?
Please help me in this...
Rgds,
Nimma.

Hi Anji,
What is 'WSELKUNNR'? Is it a user defined type?
I am doing as below in the IMPORT tab.
Parameter name/Type Spec/Associated Type
ABC/LIKE/
I am not sure what type I have to use here as the incoming values will be of type SELECT-OPTIONS. Is there any standard type to specify here? If not, what should I do?
Best Regards,
Nimma.

Rfc function module call error

Hi Abaper,
I'm doing upgrade from 4.7 to ecc 6.0 currently and encounter problem in one of the rfc function module that we used. I've tested the connection to destination using sm59 and the connection is successful.
As an information, in the rfc setting, the target system is not Unicode system.
When I test using se37 and put the rfc destination in my function module call, I always encountered system_error exception. There's no issue with this rfc call before in 4.7 system.
Please help me on this. Thank you.
Edited by: Abraham Bukit on Sep 3, 2008 2:36 AM

Hi,
I had the same issue in the past and solved it in the following way.
If the destination system is not Unicode please try to set the password for the communication user set in SM59 using only upper-case characters and taking into account that the password shouldn't be longer than 8 characters.
Hope this will help.

Error creating RFC function /BODS/ABAP_RUN : RFC_ABAP_EXCEPTION-(Exception_Key: FU_NOT_FOUND, SY-MSGTY: E, SY-MSGID: FL,

Hi Expert,
I try to execute job on development system but he showed error "Error creating RFC function </BODS/ABAP_RUN>: <RFC_ABAP_EXCEPTION-(Exception_Key: FU_NOT_FOUND, SY-MSGTY: E, SY-MSGID: FL, SY-MSGNO: 046, SY-MSGV1: /BODS/ABAP_RUN)>. Notify Customer Support.
In ECC I use ABAP execute option as Execute Preloaded. How to solve this problem? Thanks for your advise.

Dear,
have you checked in EXX wether the function group /BODS/BODS is available?
Some notes here:
You will have to have to import the new ABAP Program group "BODS/BOS" which you can find in the local install folder...
Here are some details:
Installing Functions on the SAP Server
SAP BusinessObjects Data Services provides functions that support the use of the ABAP, BAPI, and
IDoc interfaces on SAP servers. You will need some or all of these functions in the normal operation
of the software in an SAP environment. These functions perform such operations as dynamically loading
and executing ABAP programs from Data Services, efficiently running preloaded ABAP programs,
allowing for seamless metadata browsing and importing from SAP servers, and reporting the status of
running jobs. Some of these functions read data from SAP NetWeaver BW sources.
You must upload the provided functions to your SAP server in a production environment. It is
recommended that you always upload the functions to your SAP server whether you are in a
development, test, or production environment. The functions provide seamless integration between
Data Services and SAP servers.
The default installation places two function module files for SAP servers in the ...\Data
Services\Admin\R3_Functions\transport directory. You then upload these files to SAP servers
using the SAP Correction and Transport System (CTS) or manually. Using CTS allows for version
control as the functions evolve across releases.
The installation provides two versions of transport files (depending on the server version you are using)
to install the functions on the SAP server. To obtain the names of the latest transport files for installing
or upgrading these SAP server functions, see the readme.txt file
And I've found those files and text files in the local install folder....in:
Program Files\SAP BusinessObjects\Data Services\admin\R3_Functions
(that's where I've installed it).
There you'll find some descriptive txt as how to proceed.
After installing, it might happen that the executing user is missing some authorizations.
Here my authorizations team helped me by tracing the user and then adding the necessary rights.
Sure hope this will help you.
Notes to check:
see SAP Note 1919255
Note 1916294

User permission at RFC functions

Similar Messages

Maybe you are looking for