FF ID additional authorization

[Former Member]

Hi all,

We have created a new FF ID with a specifc actions asigned.

The problem is that when FF user access as FF ID the session is not opened.

With other FF ID that have SAP_ALL assigned everything is working fine.

Question here: Do FF ID need extra authorizations in order to login in the FF ID session?

Thanks for all. Best regards,

Imanol

[Former Member · Accepted solution]

Imanol,

FF ID and Firefighter will need VFAT_Firefighter role to open FF session.

Regards,

Alpesh

[Former Member · Accepted solution]

Dear Alpesh,

We have implemented GRC AC 5.3 SP12 at one of our client. We had the same problem, that is when we try to open the session through FF id it gives a runtime error. So when i tried to find the missing authorization by SU53 it said auth for Syst " * "

Though the session opens when I click on the open new session button.

I have assigned the VFAT_firefighter role to both FF id and FF user

Edited by: celestemay17 on Oct 12, 2010 12:59 PM

[Former Member · Accepted solution]

The session opend by FF users is based on RFC call.

So the user need RFC Auth to oper a new session.

[Former Member · Accepted solution]

Are the firefighter roles generated in the system? SAP may have added more auth checks in SP12. We are still on SP11 as there were lots of issues with SP12.

Alpesh

[Former Member · Accepted solution]

Dear Alpesh,

"Are the firefighter roles generated in the system" I did not understand the question. Do you mean the role generation was through ERM or directly using PFCG in the backend system? We created roles using PFCG directly in the backend. Donot know if its a bug in SP 12. According to you which Support pack is the comparitively most stable. Our production system is still on SP8 unlike development system which is on SP 12 and we are planning for an upgrade. Which one would you recommend?

Thanks and Regards,

P Thompson

[Former Member · Accepted solution]

SP11 is stable. SP12 has lots of issues where as SP13 is the latest one.

Alpesh

[Former Member · Accepted solution]

Thanks Alpesh!