## 13.3.5.1.3.4  Candidate
## Standard Roles
The table below shows the standard roles that are used by SAP E-Recruiting for candidates .
Standard Roles for Candidate Scenario
| Role                              | Description                                                                                                                                                                                                                                                                                                                                                                                                    |
|-----------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP _ RCF _UNREG_CANDIDATE_CLIENT | Unregistered Candidate (Client) (Obsolete) This role contains the necessary authorizations for unregis- tered candidates/service users that are required on the front-end system when using a separated system (front-end and backend on different systems). If you execute unregistered scenarios directly on the back- end system, you must also assign this role to the service user in the backend system. |
| SAP _ERC_ UNR_CAND_CLIENT_CI_4    | Unregistered Candidate (Client)                                                                                                                                                                                                                                                                                                                                                                                |
| SAP _ RCF _UNREG_CANDIDATE_SERVER | Unregistered Candidate (Server) This role provides the necessary authorizations for an un- registered candidate/service user in SAP E-Recruiting that are required on the backend system when using a separated system (front-end and backend on different systems).                                                                                                                                           |
| SAP _ RCF _UNREGISTERED_CANDIDATE | (Unregistered) Candidate - Service User (Obsolete) This role provides the necessary authorizations for an un- registered candidate/service user in SAP E-Recruiting that are required when using the front-end and backend on one system.                                                                                                                                                                      |
| SAP _ERC_ UNR_CANDIDATE_CI_4      | Unregistered Candidate                                                                                                                                                                                                                                                                                                                                                                                         |
## Description
| SAP _ RCF _EXT_CANDIDATE_CLIENT   | External Candidate (Client) (Obsolete) This role contains the necessary authorizations for                                                                                                                                                                    |
|-----------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                                   | external candidates that are required on the front-end system when using a separated system (front-end and backend on differ- ent systems).                                                                                                                   |
|                                   |  Note This role is obsolete and has been replaced with the role SAP _ERC_EXT_ CAND_CLIENT_CI_4.                                                                                                                                                              |
| SAP _ERC_EXT_ CAND_CLIENT_CI_4.   | External Candidate (Client)                                                                                                                                                                                                                                   |
| SAP _ RCF _EXT_CANDIDATE_SERVER   | External Candidate (Server)                                                                                                                                                                                                                                   |
|                                   | This role provides the necessary authorizations for an exter- nal candidate in SAP E-Recruiting that are required on the backend system when using a separated system (front-end and backend on different systems).                                           |
| SAP _ RCF _EXTERNAL_CANDIDATE     | External Candidate (Obsolete) This role may only display its own data. The role can only see job postings that you published via publications using the external posting channels.                                                                            |
|                                   |  Note This role is obsolete and has been replaced with the role SAP _ERC_EXT_CANDIDATE_CI_4.                                                                                                                                                                 |
| SAP _ERC_EXT_CANDIDATE_CI_4       | External Candidate                                                                                                                                                                                                                                            |
| SAP _ RCF _ INT _CANDIDATE_CLIENT | Internal Candidate (Client) (Obsolete)                                                                                                                                                                                                                        |
|                                   | This role contains the necessary authorizations for internal candidates that are required on the front-end system when using a separated system (front-end and backend on differ- ent systems). If you allow internal candidates direct access to the backend |
|                                   | system, you must also assign this role to the reference user for internal candidates in the backend system.  Note                                                                                                                                            |
|                                   | This role is obsolete and has been replaced with the role SAP _ERC_ INT _ CAND_CLIENT_CI_4.                                                                                                                                                                   |
## Role
| SAP _ERC_ INT _ CAND_CLIENT_CI_4   | Internal Candidate (Client)                                                                                                                                                                                                                                                                                                          |
|------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP _ RCF _ INT _CANDIDATE_SERVER  | Internal Candidate (Server) This role provides the necessary authorizations for an inter- nal candidate in SAP E-Recruiting that are required on the backend system when using a separated system (front-end and backend on different systems).                                                                                      |
| SAP _ RCF _INTERNAL_CANDIDATE      | Internal Candidate (Obsolete) This role may only display its own data. The role can only see job postings that you published via publications using the internal posting channels. The role does not have access to the following data: • Requisition data • Posting data • Application data • Data for the selection process  Note |
| SAP _ERC_ INT _ CAND_CLIENT_CI_4   | Internal Candidate                                                                                                                                                                                                                                                                                                                   |
| SAP _ RCF _ ESS _SR_ERC_CI_4       | E-Recruiting Services for ESS (WDA) (Obsolete) This role contains the authorizations in SAP E-Recruiting for employees that use E-Recruiting services inESSWDA (Employee Self-Service Web Dynpro ABAP).                                                                                                                              |
|                                    |  Note This role is obsolete and has been replaced with the role SAP _ERC_ INT _ CAND_CLIENT_CI_4.                                                                                                                                                                                                                                   |
## Standard Authorization Objects
The table below shows the security-relevant authorization objects that are used by SAP E-Recruiting . For more information, see the documentation for SAP E-Recruiting under Authorizations (Recruitment) .
## Description
Standard Authorization Objects
| Authorization Object   | Field            | Value                                                | Description                                                                                                                                                                                                                                 |
|------------------------|------------------|------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| P_ RCF _APPL           | RCF _APPL        | SAP E-Recruiting applica- tions                      | Authorization object that specifies within SAP E-Re- cruiting which SAP E-Recruit- ing applications a user can call. The authorization object is used for the (internal and ex- ternal) candidates' applica- tions.                         |
| R_ RCF _VIEW           | RCF _VIEW        | SAP E-Recruiting data over- views                    | Authorization object that specifies within SAP E-Re- cruiting which data overviews a user can access.                                                                                                                                       |
| P_ RCF _ STAT          | OTYPE RCF _ STAT | SAP E-Recruiting objects and permitted object status | Authorization object that specifies within SAP E-Re- cruiting the authorization for making status changes to SAP E-Recruiting objects (for example, candidate, applica- tion, candidacy).                                                   |
| P_ RCF _ACT            | ACTVT            | • Add or Create • Change • Delete                    | Authorization object that specifies within SAP E-Re- cruiting which type of access a user can have to activi- ties. An activity in SAP E-Re- cruiting is therefore identified through the assigned proc- ess and through the activity type. |
Additional Standard Authorization Objects when Using Candidate Scenario with Front-end and Backend on Separate Systems
| Authorization Object   | Field                   | Value   | Description                                                                                                        |
|------------------------|-------------------------|---------|--------------------------------------------------------------------------------------------------------------------|
| S_ RCF                 | ACTTV RFC_NAME RFC_TYPE |         | Authorization object for RFC access (For more information, see the documentation for Authorization Object S_RFC .) |
| Authorization Object   | Field                                                                 | Value                                    | Description                                                                                                                                                                                                                                                                               |
|------------------------|-----------------------------------------------------------------------|------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| S_RFCALC               | ACTTV RFC_CLIENT RFC_EQUSER RFC_ INFO RCF _SYSID RCF _TCODE RCF _USER |                                          | Authorization check for RFC users (for example, Trusted System ) (For more information, see the documentation for Authorization Object S_RFCACL .)                                                                                                                                        |
| S_ICF                  | ICF_FIELD                                                             | Internet Communication Framework Service | Authorization checks for using services in Internet Communication Framework (SICF), for calling remote function modules using an RFC destination (SM59), and for configuring proxy settings (SICF). (For more information, see the documentation for Authorization Object S_ICF .)  Note |
|                        |                                                                       |                                          | You can use the author- ization object S_ICF to safeguard the use of RFC destinations and access to individual SICF serv- ices.                                                                                                                                                           |