Skip to Content
avatar image
Former Member

Fire Fighter in Virsa

Can someone please describe me how fire fighter works

Thanks

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

14 Answers

  • avatar image
    Former Member
    Sep 07, 2006 at 03:09 PM

    The way the firefighter tool works is it allows you to give special authorizations (ie SAP_ALL) to User ID which in turn can be used as required. When this ID is used the actions perfomed by this ID are record. In addition, emails are sent to predefined email accounts to inform the necessary people that an Firefighter ID has been used.

    To initiate the use of a firefighter ID one would log into the required SAP system with your normal ID, then call the firefighter transaction and then log in using the firefighter ID in a separate session called by the firefighter tool. From that point on all actions are recorded. And can be viewed as required.

    I have documentation for the earlier versions of firefighter and can forward those to you if you would like. I'm not sure how much the tool has changed as I have been away from it for some time. If any one can add to what I have provided please do so.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 07, 2006 at 03:21 PM

    Hi Mike

    Thanks for your response. Correct me if I'm wrong. Basically what firefighter ID does is just record user actions. Do you know when this firefighter ID comes in handy or whats the purpose of it?Also do we need to assign any particular roles to this user firefighter ID? I would appreciate it if you can send me the documents <b><email removed by moderator></b>

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member Former Member

      Hi Mike,

      This is Raj Bathula.Can you please email the documents regarding the firefighter to xxx@xxx.

      Message was edited by:

      Frank Koehntopp

  • avatar image
    Former Member
    Sep 07, 2006 at 03:34 PM

    we do face many situations when we have to give SAP_ALL or equal access to a user to resolve an emergency issue.

    these situations are hard moments for a security administrator. this firefighter ID allows security \

    people not get blamed because all activities get traced.

    and the user using it will be responsible for anything.

    Multiple firefighterID's can be used seperating them by application to get rid of congestion in emergency situations.

    If a Firefighter ID is getting used you can keep a message to get it opened for you immediately after its free. and remember trace/log files will be counted under

    the user account who is using it.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 07, 2006 at 03:49 PM

    Hi,

    In addition to the others comments, the fire fighter id may not necessarily have SAP ALL or SAP * in it. It can be an id with access greater than what the developers or individual people have on the system.

    Cheers,

    Kedar

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      In addition to the above use of Firefighter ... it'll especially come handy to be SOX compliant while not limiting the job roles.

      Eg. A certain company employes a single person to 'Update vendor master' & 'post vendor payments' and as per SOX there is a SOD violation here as that person can create a dummy vendor and post payment to it.

      So ideally you segregate the jobs thus assign a different person to post the payments.

      If the company does not want to change the business process however needs to be compliant .. FireFighter comes handy as the same person is given additional access with the firefighter and the actions (Payments posted to the vendors with firefighter) are emailed so the concerned body is aware of any risks/fraudulent payments... thus SOX compliant.

  • avatar image
    Former Member
    Sep 07, 2006 at 04:12 PM

    I got the documents. Thanks Mike. I appreciate it.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 07, 2006 at 08:42 PM

    hi Prasant

    Can you email me at <b><email removed by moderator></b> . I have few other questions that I want to ask if u dont mind. I would appreciate it.

    Thanks

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 08, 2006 at 05:01 PM

    Hello Mike,

    Can you please send the documents at <b><email removed by moderator></b>as well. Thanks in advance.

    regards.

    Ruchit.

    Message was edited by: Ruchit Khushu

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 09, 2006 at 06:21 AM

    Hi Mike,

    Many thanks for the documents.

    With regards.

    Ruchit.

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 09, 2006 at 09:10 PM

    Mike,

    Can you please email me the documents related to Firefigher to <b><email removed by moderator></b> ?

    Thanks in advance

    Pritesh..

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Sep 10, 2006 at 05:22 PM

    Dear all,

    Please do not distribute copyright material. All material that is publicly available can be downloaded from:

    www.sap.com

    help.sap.com

    service.sap.com

    www.virsa.com

    Please add the link to the resource so that everyone using the forum can access it. Therefore we do not need to create these long lists of email addresses in a thread.

    Additionally, I would suggest that you consider removing your email address from the thread. As you may know, bots are crawling the net to find email addresses they can spam.

    Best regards,

    Christian

    Add comment
    10|10000 characters needed characters exceeded