BI and Source: RFC Destination and RFC user

[Former Member]

Hi BI Experts,

I have some doubts about the RFC users set up for RFC destinations (connection between BI and ERP Source System). My questions are:

in BI system (BI Itself source system): should RFC user (for example BWREMOTE) have user type as "System User" or any other type?

in ERP Source system: should RFC user (ALEREMOTE) be system user as well or dialog?

Thanks for your advise!

Regards,

Sally

[Sujai · Accepted solution]

should be system user for both.

[|http://help.sap.com/saphelp_nw70/helpdata/en/e3/e60138fede083de10000009b38f8cf/frameset.htm]]

Regards

Sujai

[former_member184494 · Accepted solution]

Sally,

All three types are possible ...

Recommended : System User

Also recommended : Communication User

Not recommended : Dialog User

System User has license implications and hence you need to clarify the same..

Basically the User ID should be an ID which has a password but you cannot log in using this userid through the Logon Pad.

For that reason create the user ID as dialog first - create the initial password - log in and change the password because it is an initial password and then change the user type to communication / system.

[Former Member · Accepted solution]

Hi Arun,

many thanks for your advise. very helpful.

one more question:

From security point of view, what I understood is Dialog user for RFC conncection is not recommended.

Should I expect any issues within BI system concerning Reading application logs, transport import of process chains, datamart activations etc?

Thanks!

Sally

[Former Member · Accepted solution]

Hi Sujai,

thanks for your reply. unfortunately, I am not able to see the content on this page. could you please check again if the link is correct?

Rg,

Sally

[former_member184494 · Accepted solution]

Sally,

The background user typically ALEREMOTE or RFCUSER has SAP_ALL and SAP_NEW as the roles assigned which is super user roles - you sholuld be having all necessary access with this ID...

[Former Member]

Hi Sally,

I would set the RFC Users to be "system users" so that they do not have direct access (SAP GUI) to the systems.

Cheers,

Marco

[Former Member]

any comments, feedback or advise are highly appreciated.

Thanks!

Sally