Hi,
you should handle RFC enabled FMs as transactions. So you can maintain authorization defaults for them in SU24, Then in PFCG you can add authorization default for RFC function module. This will bring S_RFC plus defaults maintained for FM.
Cheers