Create a SAP RFC user

Prev Next

Zilliant CPQ uses Remote Function Calls (RFCs) to access and execute operations in SAP ERP, such as simulating pricing, creating sales orders, or retrieving product and customer data. To enable this, create a dedicated RFC user in your SAP system. This should be a technical user, not a person, with assigned roles and authorizations needed for integration.

The purpose of the RFC user is to:

  • Authenticate and authorize integration traffic from CPQ

  • Provide logs of integration actions

  • Enable controlled access to specific BAPIs and business objects

Procedure

Note

Since this procedure is performed in SAP, not in CPQ, the following steps offer only a high-level overview. For detailed instructions, read the official SAP ERP documentation.

To create an RFC user:

  1. Create the user using the transaction SU01. For details on creating an RFC user, read Creating RFC User External link indicator in the SAP documentation.

  2. Create a role using the transaction PFCG. The following image shows a sample Z_ISS_RFC role:

    Create a role using Transaction PFCG

  3. Manually assign authorization objects to the role. Alternatively, add authorization objects from the profile S_A.SCON by selecting Edit > Insert authorizations > From profile > S_A.SCON. For details about supported values, read Authorization objects.

  4. Assign the role to the RFC user using the transaction SU01.

Tip

To debug a specific BAPI call, temporarily set the user to the dialog mode in SU01 and assign SAP_BC_DWB_ABAPDEVELOPER to the user to allow access to SE37.

Authorization objects

Use the following authorization objects to control user access to specific actions and data:

Purpose

Authorization objects

For SSC and configuration support

  • C_TCLA_BKA—Access to class types

  • C_TCLS_BER—Access to org areas in the classification system

  • C_TCLS_MNT—Access to characteristics of the org area

  • K_KEKO—Access to variant pricing

  • S_TABU_DIS—Access to tables for the knowledge base export

For RFC and BAPI execution

  • S_RFC—Access to RFC and BAPI calls

For sales order and quote creation or simulation

  • V_VBAK_AAT—Access to sales documents based on sales organization, distribution channel, and division.

  • V_VBAK_VKO—Access to sales documents.

For non-configurable material master

  • M_MATE_STA—Read access to the material master data with C, K, V status values for STATM