Question:
Hello,
I am been thrown under the train, not a security/basis person but are shirt handed and i am helping out with Security.
We got adutied recently and almost all the end user had full access to S_RFC object.
Can someone tell me what S_RFC onbject is used for and how the authorization can be limited. Also it would help if someone can provide an example where this object is requried by end user.
Thanks
Answer:
S_RFC control acces to remote function calls whaich you will see that most ALL users will need. SAP prerforms updates to databases using RFC back to itseld to ensure the save occurs all at once at a prescribed time, so almost all users will need S_RFC.
What is at issue is Which RFC can the user have access and which type. There are a few Function groups that should be protected and they relate to security and HR.