FIREFIGHTER will be used only in GRC? can't we use in ECC? if yes how do we create in ECC.

[Former Member]

Hi All,

i am a fresher in sap security. so i am asking above subject question. kindly answer this question pls.

[alessandr0]

Dear Sushma,

you can use decentralized firefighting in SAP Access Control (GRC) which allows you to use Firefighter in each connected (and configured) system you want. If configured properly, you can either start a firefighting session from GRC or directly from your ECC.

See the following blog for more information: https://blogs.sap.com/2014/09/06/eam-for-the-new-kid-on-the-block/

Cheers, Alessandro

[Former Member]

Thank you Alessandro Banzer.

with out enabling GRC component in ECC, can't we use FF in ECC?

[alessandr0]

Nope - you cannot. You have to install the GRCPINW plug-in order to make the configuration for the Firefighter. The Firefighter requires certain programs and configuration to start, perform and review FF sessions. E.g. which GRC system it has to target, programs to capture change log, sys log, audit log, etc., as well as the transaction to start the session. However, if you have GRC running, enabling Firefighter for your ECC should not take longer than 1 day, probably even less. It's a straight forward configuration.

Hope it's clear now.

Regards, Alessandro

[Former Member]

Thanks aless, it is much appreciated.

[Former Member]

Aless, do you have any configuration document on this pls? If you have pls share to the following id [moderator: removed private information]

[alessandr0]

Dear Sushma,

the following blog will be helpful: https://blogs.sap.com/2014/09/06/eam-for-the-new-kid-on-the-block/

Please also mark the question as answered if you are satisfied.

Thanks, Alssandro

[harsha_artani]

hello Sushma,

In my client environment , it is like that we have created some FIREFIGHTER ids such as one for finance , other for MM change etc. and whenever in any fiscal period any user need access to critical reports or transactions we assign them that Firefighter id for particular time and then also enable log for them , so that we should have logs for the users.

Also Virsa component is there if you want to deploy and get firefighter.I believe Security weaver also does same.

Thanks

Harsha Artani