---
title: "Create a SAP RFC user"
slug: "create-a-sap-rfc-user"
description: "Create an RFC user to access and execute operations in SAP ERP, such as simulating pricing, creating sales orders, or retrieving product and customer data."
updated: 2025-08-21T13:41:44Z
published: 2025-08-21T13:41:44Z
canonical: "docs.zilliant.com/create-a-sap-rfc-user"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zilliant.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create a SAP RFC user

Zilliant CPQ uses Remote Function Calls (RFCs) to access and execute operations in SAP ERP, such as simulating pricing, creating sales orders, or retrieving product and customer data. To enable this, create a dedicated RFC user in your SAP system. This should be a technical user, not a person, with assigned roles and authorizations needed for integration.

The purpose of the RFC user is to:

- Authenticate and authorize integration traffic from CPQ
- Provide logs of integration actions
- Enable controlled access to specific BAPIs and business objects

### Procedure

> [!WARNING]
> Note
> 
> Since this procedure is performed in SAP, not in CPQ, the following steps offer only a high-level overview. For detailed instructions, read the official SAP ERP documentation.

To create an RFC user:

1. Create the user using the transaction `SU01`. For details on creating an RFC user, read [Creating RFC User](https://help.sap.com/docs/ABAP_PLATFORM_NEW/7259d88d94bb48c7b80b7928b7977ac6/6e4807adf04e47dd988d6ba4f51466bf.html) ![External link indicator](https://cdn.document360.io/24f960e8-3c1c-4c18-a2c6-83b6ae4aab84/Images/Documentation/external-link-svgrepo-com.svg?sv=2026-02-06&spr=https&st=2026-11-11T12%3A49%3A02Z&se=2026-11-11T13%3A49%3A02Z&sr=c&sp=r&sig=uViaslM36Sxkna6%2B27KDN2zo8ZfOZFosUjPOKjE7quM%3D) in the SAP documentation.
2. Create a role using the transaction `PFCG`. The following image shows a sample `Z_ISS_RFC` role:

![Create a role using Transaction PFCG](https://cdn.document360.io/24f960e8-3c1c-4c18-a2c6-83b6ae4aab84/Images/Documentation/Create%20a%20role%20using%20Transaction%20PFCG.png?sv=2026-02-06&spr=https&st=2026-11-11T12%3A49%3A02Z&se=2026-11-11T13%3A49%3A02Z&sr=c&sp=r&sig=uViaslM36Sxkna6%2B27KDN2zo8ZfOZFosUjPOKjE7quM%3D)
3. Manually assign authorization objects to the role. Alternatively, add authorization objects from the profile `S_A.SCON` by selecting **Edit** > **Insert authorizations** > **From profile** > **S_A.SCON**. For details about supported values, read [Authorization objects](/main/docs/create-a-sap-rfc-user#authorization-objects).
4. Assign the role to the RFC user using the transaction `SU01`.

> [!NOTE]
> Tip
> 
> To debug a specific BAPI call, temporarily set the user to the dialog mode in `SU01` and assign `SAP_BC_DWB_ABAPDEVELOPER` to the user to allow access to `SE37`.

### Authorization objects

Use the following authorization objects to control user access to specific actions and data:

| Purpose | Authorization objects |
| --- | --- |
| For SSC and configuration support | - `C_TCLA_BKA`—Access to class types - `C_TCLS_BER`—Access to org areas in the classification system - `C_TCLS_MNT`—Access to characteristics of the org area - `K_KEKO`—Access to variant pricing - `S_TABU_DIS`—Access to tables for the knowledge base export |
| For RFC and BAPI execution | - `S_RFC`—Access to RFC and BAPI calls |
| For sales order and quote creation or simulation | - `V_VBAK_AAT`—Access to sales documents based on sales organization, distribution channel, and division. - `V_VBAK_VKO`—Access to sales documents. |
| For non-configurable material master | - `M_MATE_STA`—Read access to the material master data with C, K, V status values for STATM |