RFC destination role for the user

[former_member187447]

Hi

I am trying to connect from PI to SCM. SCM has a user ID PIAPPLUSER created with role "SAP_XI_APPL_SERV_USER" and i am trying to use this user in PI sm59 under abap connections, but i am getting adapter error at the outbound side as seen in SXMB_MONI. Do we need to have any other role assigned to the user. FYI, If i use my user id which has SAP_ALL access the connection works good and the idoc gets processed successfully. So i suppose there should be some other role which is needed. Please suggest.

[former_member184720 · Accepted solution]

Hi Kalyan - You can refer to the below link

http://help.sap.com/saphelp_nw73ehp1/helpdata/en/78/44ac98ab764581a3b3c0b7d166e7e1/content.htm

The below authorization object might be missing.

[former_member187447 · Accepted solution]

Hareesh,

I am still getting the same authorization issue in sm58 even after adding the new role B_ALE_RECV. I think it looks like the authorization to this particular IDOC that i am trying to send. Is there any other trace i can check?

[former_member184720 · Accepted solution]

can you share the screenshot? error message?

what is the user name you see in sm58 for that entry?

[former_member184720 · Accepted solution]

If you see the below thread

http://scn.sap.com/message/713228

For some reason, they had to delete and recreate the user inorder to work. May be can you try that?

[former_member187447 · Accepted solution]

[former_member184720 · Accepted solution]

why it showing the user PIAFXD1?

It should be the user which you defined in RFC destination. Can you check which user you have configured in the RFC destination.

If it is PIAFXD1 then this user should have the access in ECC system to create the IDOC's

[former_member187447 · Accepted solution]

you sure thats not the function call which is same for all the idocs but it should be the actual user that i am trying to use. Even i was wondering why it is so.

[former_member184720 · Accepted solution]

Hi Kalyan - Got to know something

You can refer to this thread - http://scn.sap.com/message/9547458

There is also an SAP note he mentioned. There are some additional authorization objects. May be you have a look into it.

[former_member187447 · Accepted solution]

yeah seems like PIAFUSER is the valid thing that is showing up in sm58. Looks like we need to give SAP_ALL, need to check what the security team has to say about this. Thanks. Will get back once it works.