Central and De-Central Firefighting

[matthias_konetzny3]

Dear Community,

I have a quick (and hopefully) easy question:

Might it be possible to run both, central and de-central firefighting, on a single SAP GRC 10.1 system?

Central for Emergency FFID, de-central for Support-FFIDs.

Thanks therefor.

Kind Regards

Matthias

[alessandr0 · Accepted solution]

Matthias,

depending on your requirement I think this is achievable (maybe I don't understand correctly).

Let's assume you have two systems:

- GRC

- ECC

If you have the plug-in (GRCPINW) installed on both systems and configured decentralized access so that you can use the /GRCPI/GRIA_EAM transaction in both systems. If you assign Emergency Firefighter IDs and authorize them only in GRC (for local firefighting) you can start that either via /GRCPI/GRIA_EAM or GRAC_EAM transaction. Other FF IDs like Support you create and authorize only in the ECC which means it can be used decentralized.

For sure if a user has access to GRC and is assigned to a Support FF and he/she is able to start centralized Firefighting (GRAC_EAM) from GRC system the this can be considered as centralized (but here I don't see an issue since this gives the users more flexibility).

If my assumption or your concern is different please let me know and share an example.

ps. from configuration point of view (parameter 4015) it can only be set YES/NO at once.

Thanks and regards,

Alessandro

[matthias_konetzny3 · Accepted solution]

Hi Allesandro,

Thanks for your information.

Of course, your assumption is correct: Two separated SAP Systems for ECC and GRC.

Furthermore: The parameter ID 4015 is set to YES.

And based on this I would like to know if it might be possible to handle the centralized confirmation process for the Emergency FFID via the GRC ARQ additionally to the de-centralized firefighting within the ECC system, using transaction /GRCPI/GRIA_EAM.

I will be afraid that THIS will not be possible in parallel.

Regards

Matthias

[alessandr0 · Accepted solution]

Matthias,

sure - you can use both in parallel. Did you test the scenario? From my understanding of your requirement this will work.

Regards,

Alessandro

[matthias_konetzny3 · Accepted solution]

Hi Alessandro,

I will test and keep you informed.

Regards,

Matthias

[Former Member · Accepted solution]

Hello Matthias,

may I ask if you tests were successfull?

Thanks

Bianca

[japneet_singh2 · Accepted solution]

Hello Mathias, Bianca,

The scenario is possible. You can use both centralized and decentralized simultaneously. For more details, refer to the wiki page

http://scn.sap.com/community/grc/blog/2014/01/16/de-centralized-eam-grc-100

Thanks & Regards Japneet

[matthias_konetzny3 · Accepted solution]

Hi Bianca,

Yes it was. But....

We implemented the de-centralized solutions as already mentioned earlier in this chat (parameter ID 4015 is set to YES), so that all 'Support-FF's' can be run their transactions without any request process directly within the ERP system.

Secondly we implemented the request process for the 'Emergency-FF' within our IdM system. So, whenever this FF is required, the release of the UID at SAP system has to be triggered out of the incident ticket. From IdM system the UID will be unlocked and receive a new 'valid from' and 'valid to' date. Additionally a new initial pwd had been send to the related support-user by email. So he or she will be able to resolve the issue.

Right after closure of the issue the 'Emergency-FF' will be locked by IdM system again.

Rads.

Matthias

[plaban_sahoo6]

This message was moderated.

[matthias_konetzny3]

Hi Faisal,

I've already expected your answer...

Thanks

Matthias

[former_member184114]

Matthias,

I was thinking if you could make one of them customized. This way you can have both of them. I have seen people designing/customizing the FireFighter application according to their requirements and using it successfully. They have not used standard SAP FF application.

Hope this might work.

Regards

[former_member184114]

Matthias,

To the best of my knowledge, it is not possible.

Regards,

Faisal