## 13.8.8.1.3  Roles and Authorizations in the SAP S/4HANA Hub System
To process messages coming from the SAP ERP back-end systems, a technical user is needed in the SAP S/4HANA hub system.
The ABAP Platform authorization concept is based on assigning authorizations to users based on roles. To maintain roles for ABAP technology, you use the profile generator (transaction PFCG).
The table below shows the roles used in Central Procurement:
Business Roles
| Role                     | User                 |
|--------------------------|----------------------|
| SAP_BR_CENTRAL_PURCHASER | Central Purchaser    |
| SAP_BR_ADMINISTRATOR     | Administrator        |
| SAP_BPC_EXPERT           | Configuration expert |
The table below shows the security-relevant authorization objects that the technical user needs:
Roles and Authorizations in the SAP S/4HANA Hub System
| Authorization Object   | Field    | Value                                                                                                                                   | Description                                          |
|------------------------|----------|-----------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------|
| S_RFC                  | RFC_TYPE | Function Module                                                                                                                         | Type of RFC object for which access is to be allowed |
|                        | RFC_NAME | /IWNGW/ FM_IN_CREATE_NOTIF /IWNGW/ FM_IN_DELETE_NOTIF                                                                                   | Nameof RFC object for which access is allowed        |
| S_SERVICE              | SRV_NAME | WS PURCHASEREQUISITION REPLICATIO3/ PURCHASE_REQUISITIO N_REPLICATI WS PURCHASEREQUISITION REPLICATION/ PURCHASE_REQUISITIO N_REPLICATI | Program, transaction, or function module name        |
| Authorization Object   | Field      | Value                           | Description                                               |
|------------------------|------------|---------------------------------|-----------------------------------------------------------|
| /AIF/PROC              | SRV_TYPE   | Hash Value for External Service | Type of check flag and au- thorization for default values |
|                        | ACTVT      | Import, Export, Resubmit        | Activity                                                  |
|                        | /AIF/NS    | /MMHUB                          | Namespace                                                 |
|                        | /AIF/IF    | PRRECOIN , PRSRCNOTIN           | InterfaceName                                             |
|                        | /AIF/IFVER | *                               | Interface Version                                         |
|                        | /AIF/VNS   | *                               | Variant Namespace                                         |
|                        | /AIF/VNAME | *                               | Nameof Interface Variant                                  |