why did you need to grant full S_RFC? Please search on this object to see that what's you've done is almost up there with granting full S_TCODE
that error message meant the user has a SU01 record in the CUA system but does not have the CUA system assigned on the SU01 System tab.