Skip to Content

Archived discussions are read-only. Learn more about SAP Q&A

JCO connection for the metadata - account permissions????

Hello All,

This is our first try at adaptive RFC and I'm trying to instruct our security people to set up a user account for jco metadata and have forwarded lots of excerpts from docs like ESS setup, etc., and generally that this user needs access to a all DDIC function modules. Our security people aren't getting it, and I can find nothing specific in an documents I find on specifically how to set up that account, and don't want to give SAP_ALL.

Any help is appreciated.




Hi Doug,

You are correct regarding the JCO destination metadata setup, and you can check the official SAP documentation for <a href="">SAP JCO Destination Setup</a> (see section 5 for user authentication requirements)

Bottom line, you have to set up a user type 'System' (no dialog authorization) in the back end, and its authorizations must be set so that this user <u>can access all DDIC function modules</u>.

I would suggest that you either try to:

- Determine with your security group a new authorization profile that would allow a new system user to access all required DDIC modules


- Check user 'SAPJSF' with role 'SAP_BC_JSF_COMMUNICATION' (if possible/compatible with your environment), and test if you can execute your application with this user initially.

If successful, then ask your security group to create a new system user, copy & customize the role 'SAP_BC_JSF_COMMUNICATION' and assign it to your new user so you can assign it for the JCO destination METADATA authentication configuration section.



Message was edited by:

Armin Reichert

0 View this answer in context
Not what you were looking for? View more on this topic or Ask a question