(3.10) A read-only role for SAP PO connection to production systems

An additional production RFC connection must be maintained to enable Int4 Suite to connect to the production PO.
For this purpose, a new PO user should be created. This user should have only the following roles and actions assigned:

• SAP_XI_MONITOR_J2EE (additionally, if Restrict access roles are used in Int4 Suite, the technical user must also have the role XiMdt.ExtendedMonitor)

• SAP_XI_PCK_MONITOR - optional, if you intend to read details of SAP PO objects and import them directly into Int4 Suite.

• SAP_XI_API_DISPLAY_J2EE

If access to the PI ABAP stack is neccesary, the following role is also required :

• SAP_XI_MONITOR_ABAP

This set of roles allows the creation of test cases based on production messages. However, it prevents users from sending messages to the production system during test case execution.
For information on how to block Int4 Suite access to the payload of selected interfaces on the production system, such as in cases of sensitive message data, please refer to this page.