Transport Expresso may update the client field of an RFC destination at runtime. This may be necessary when releasing a transport request or creating a backup request as these actions are client-specific. In these situations, the specified user ID and password must be valid for all possible clients.
When defining these RFC destinations, we recommend that you create and assign a special System user ID called TE_RFC. A system user ID is a special type of SAP user ID that cannot be used to access the SAP system via the SAPGUI. Therefore by using a system user ID, potential security holes, such as a remote logon to your production system, are avoided. Another advantage of a system user ID is that the password does not expire.
For SAPGUI processing of the transport form and task screens the domain controller RFC user must be setup as a Service user type as a system user doesn’t support popup screens.
Finally, since the user ID requires authority to both Transport Expresso functions and many CTS functions and background jobs, we recommend that you assign Transport Expresso role /BTI/TE:CTS_RFC and standard SAP security role SAP_BC_TRANSPORT_ADMINISTRATOR.
The RFC user in the TE Domain Controller also requires also reqiores /BTI/TE:CTS_ADMIN_USER and /BTI/TE:CTS_ADMIN.
Post your comment on this topic.