Skip to Content

Central and De-Central Firefighting

Dear Community,

I have a quick (and hopefully) easy question:

Might it be possible to run both, central and de-central firefighting, on a single SAP GRC 10.1 system?

Central for Emergency FFID, de-central for Support-FFIDs.

Thanks therefor.

Kind Regards


Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

4 Answers

  • Best Answer
    Posted on May 29, 2016 at 07:52 AM


    depending on your requirement I think this is achievable (maybe I don't understand correctly).

    Let's assume you have two systems:

    - GRC

    - ECC

    If you have the plug-in (GRCPINW) installed on both systems and configured decentralized access so that you can use the /GRCPI/GRIA_EAM transaction in both systems. If you assign Emergency Firefighter IDs and authorize them only in GRC (for local firefighting) you can start that either via /GRCPI/GRIA_EAM or GRAC_EAM transaction. Other FF IDs like Support you create and authorize only in the ECC which means it can be used decentralized.

    For sure if a user has access to GRC and is assigned to a Support FF and he/she is able to start centralized Firefighting (GRAC_EAM) from GRC system the this can be considered as centralized (but here I don't see an issue since this gives the users more flexibility).

    If my assumption or your concern is different please let me know and share an example.

    ps. from configuration point of view (parameter 4015) it can only be set YES/NO at once.

    Thanks and regards,


    Add a comment
    10|10000 characters needed characters exceeded

    • Hi Bianca,

      Yes it was. But....

      We implemented the de-centralized solutions as already mentioned earlier in this chat (parameter ID 4015 is set to YES), so that all 'Support-FF's' can be run their transactions without any request process directly within the ERP system.

      Secondly we implemented the request process for the 'Emergency-FF' within our IdM system. So, whenever this FF is required, the release of the UID at SAP system has to be triggered out of the incident ticket. From IdM system the UID will be unlocked and receive a new 'valid from' and 'valid to' date. Additionally a new initial pwd had been send to the related support-user by email. So he or she will be able to resolve the issue.

      Right after closure of the issue the 'Emergency-FF' will be locked by IdM system again.



  • author's profile photo Former Member
    Former Member
    Posted on May 25, 2016 at 08:57 AM


    To the best of my knowledge, it is not possible.



    Add a comment
    10|10000 characters needed characters exceeded

  • Posted on May 25, 2016 at 11:00 AM

    Hi Faisal,

    I've already expected your answer...



    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member


      I was thinking if you could make one of them customized. This way you can have both of them. I have seen people designing/customizing the FireFighter application according to their requirements and using it successfully. They have not used standard SAP FF application.

      Hope this might work.


  • Posted on May 30, 2016 at 03:34 AM

    This message was moderated.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.