03, and User Group * in S_USER_GRP Object(sap_grc_fn_base) If you don’t maintain actvt 3 , u cant perform logon and actvt 5 ,you cant perform additional activity. Make sure the role name maintained parameter 4010 is assigned to the FF ID in target system. Make sure EAM master data synch job is running. You need to check the parameters 1000 (The Plug-in Connector) & 1001 (The GRC Connector) in the Plug-in system. Make sure your RFC user has all the required authorizations. RFC user has SAP_ALL profile