TheS_RFCACLauthorization object is essential for trusted system access to an SAP Fiori back-end server. It controls Remote Function Call (RFC) access by verifying trust relationships and ensuring secure communication between systems.
Key Fields in S_RFCACL:
* ACTVT:Specifies the activity, such as execution or maintenance of RFC connections.
* RFC_SYSID:Identifies the trusted system by its System ID (SID).
* RFC_CLIENT:Specifies the client number in the trusted system.
SAP Security References:
* SAP Note on S_RFCACL and Trusted System Configuration
* SAP Help Portal: Trusted RFC Connection Setup

In a Central User Administration (CUA) scenario, the table PRGN_CUST is used to configure settings for role and user management during transports. The correct setting for user assignments when transporting roles is USER_REL_IMPORT = NO. This setting ensures that user assignments linked to roles in the source system are not imported into the target system during the transport process. In CUA, user assignments are centrally managed in the CUA master system, and importing user assignments from a child system could lead to inconsistencies or overwrites, disrupting centralized control. By setting USER_REL_IMPORT to NO, the system preserves the CUA's authority to manage user-role assignments, ensuring that only role definitions are transported. The options related to SET_IMP_LOCK_USERS control user locking during imports, not user assignments, and USER_REL_IMPORT = YES would incorrectly allow user assignments to be transported, which is undesirable in a CUA setup. This configuration maintains the integrity of centralized user administration in SAP landscapes.

* Context:Access categories in SAP S/4HANA Cloud Public Edition define the type of restrictions applied to business users' data access.
* Solution Explanation:
* A:"Read" allows view-only access.
* C:"Read, Value Help" includes read access and field-level help for specific data.
* D:"Value Help" restricts access to value-help fields.
SAP Security References:
* SAP Authorization Management in S/4HANA Cloud
* SAP Restriction Types and Configuration Guide

TheDisplay Authorization Tracetool inSAP S/4HANA Cloud Public Editionprovides the following functionalities:
* Display Business Roles (A):
* Identifies the business roles that grant access to specific objects or transactions.
* Analyze Missing Authorizations (C):
* Helps detect authorization gaps by reviewing failed checks, enabling role adjustment.
* Analyze Assigned Authorizations (E):
* Verifies successful checks for already assigned authorizations, ensuring roles are functioning as intended.
SAP Security References:
* SAP Help Portal: Authorization Trace Tool Documentation
* SAP Note on Using Authorization Traces in S/4HANA Cloud