Skip to Content
0
Former Member
Nov 13, 2009 at 04:35 AM

GRC:AC:SPM: How to ensure SAP_ALL in not deleting FF log files?

185 Views

Hi Guys,

Due to some critical business requirements occuring occasionally, I wanted to set up a FF ID having SAP_ALL. This would be besides the other FF IDs, which I have already created for each of the modules. I.e basically this SAP_ALL FFID would be to handle emengency and cross module tasks.

Now, I have a limitation here that this FFID having SAP_ALL profile may do anything and then even clear all the logs for what all it did (as it would have unlimited access to even delete the logs for FFID usage). Any workaround solution for this?

Regards.

Hersh.

http://www.linkedin.com/in/hersh13