The notation is correct
without any spaces, i.e.
Role = RSD_CHANGE_SALESORDER GROUP1
is not correct.
A valid RFC user and password are needed.
Please note: You authorize the RFC user in the
current client, not in client 000.
The RFC user needs the fowllowing authorizations:
RFC_TYPE=FUGR, RFC_NAME=SU_USER, ACTVT=16
S_USER_SYS: CLASS=*,ACTVT=90 (if central user administration)