Each CRM user must be mapped to a Sage 300 user account with a corresponding password, and Allow VMEP Access turned on.
Make sure all CRM user accounts are mapped to unique Sage 300 user accounts, otherwise they will log with the same credentials and can “rug pull” each other sessions.