Role in frontend and backend

H,

we are using NW GW that is connected via SSO to an SAP-backend. Is there any best practice for the roles/auth obj that allow the connection between the two systems? I need S_RFC and what else? Is there somewhere a list of required auth objects for the frontend- and the backend?

thanks,

  Vanessa