REX 3.2 Minimum User Authorization Roles/Objects

[former_member584562]

We have a large number of users providing in-store service using REX.  They should not have direct access to CRM or ECC.  The team extending GRC support to CRM wish to assign a position based authorization profile that is limited to functions required by REX device users to support visits.

Is there any documentation concerning the PFCG authorization objects we need for a REX device user business role?  We have done some synchronizations with an ST01 trace active but are concerned that we might not have tested all possible scenarios on the device.

We are currently using Activity Management for visits.  We are not using sales or marketing scenarios.

[former_member204055]

Hi Frank,

Since most of the business functions of SAP Retail Execution use the CRM and ERP objects, the ABAP authorization concept must be referred to. For more information on how to create roles, see SAP Library documentation for Role Maintenance. The mandatory authorization objects that is required for a REX business user is the following.

Authorization Object	Field	Value	Description
S_RFC	RFC_NAME	Names of the RFC function modules that are used by SAP Retail Execution	Needed to allow access to my business functionality in the back-end that is accessed via an RFC. Never assign full authorization to this authorization object.

Based on your business requirement you can assign additional authorization objects to the user

Regards,

Ashwini