FireFighter Controller Email Notification Not Working

[Former Member]

My Access control 10 (GRCFND_A V1000 0007) application is on SAP EHP 2 for SAP NetWeaver 7.0 (SAP_BASIS-702 0009).

Requirement: Controller should get the email notification on Firefighter Logon. Send FF log as well.

Have created controller and mentioned correct email ID in SU01. Communication method is set to Email.

Configuration Parameters:

4000    1                      Application type

4002    YES                Send Email Immediately

4003    YES                Retrieve Change Log

4004    YES                Retrieve System log

4005    YES                Retrieve Audit log

4007    YES                Send Log Report Execution Notification Immediately

4008    YES                Send FirefightId Login Notification

4010    Z_C.GRC_SPM_FFIDFirefighter ID role name

Firefighter is working as anticipated.Firefighter can logon to remote system through GRC_SPM transactions and can complete the activities in remote system.

FireFighter Log Synch job also fills the required tables GRACFFLOG etc.

FireFighter Workflow Synch is executed on regular intervals.

Basis suggests that they have configured SCOT email properly.

But controller is not getting any emails on Firefighter.

Have I missed anything in configuration. kindly assist if you have faced similar issue.

Thanks

ARD

[Former Member · Accepted solution]

Solution to this issue.

We need to maintain Paramater 4009 - Log Report Execution Notification to YES

Thanks

ARD

[Former Member]

Is the controller receiving notification of the FF Session being used? We had an issue where the log on notification is received, but the log review would not get sent to the controller on a regular basis (regardless of all the necessary set up). Try Executing the Workflow sync job every few minutes for a particular system and see if it works, as it seemed this resolved our issue.

[Former Member]

Thanks Kaushal,

Now I have configured Parameter 1113 and Logon notification is working.

Next issues is similar to yours, FF Log is not being sent to controllers even if SPM workflog sync and SPM Log sync programs are executed immediately after FF session.

Am I missing anything in configuration again.

Thanks

ARD

[anand_ogirala]

Are the controllers assigned the necessary GRC roles?

[Former Member]

Yes. Below roles are assigned.

GRAC END USER

GRAC NWBC

GRAC BASE

GRAC SUPER USER MGT CNTRL

[anand_ogirala]

ARD,

Can you try populating email address for user ID setup for 1113 in  SU01?

Thanks

[Former Member]

Anand - I have already confirmed that my controller is getting FFLOGON notification.

I am facing issue with FF log now.

Thanks

ARD

[anand_ogirala]

ARD,

Here are few checkpoints

1> How the "Notification by" column in controllers are setup?if you want to recive log report by email it should be email. If you want to receive Workflow notification for log review, it should be Workflow

2> Make sure WF-BATCH has the email address populated, we noted that this is needed for WF notifications

Hope this helps

[Former Member]

Hi Anand,

Two points mentioned above are already in place.

Thanks

ARD

[Former Member]

Hi,

Have you checked if there is time difference b/w the GRC server and the Backend system.

Regards,

Ajesh.

[Former Member]

Hi Ajesh,

Both are set to same Timezone.

Thanks

ARD

[Former Member]

Hi Ajesh,

GRC AC system and Plug- in system (Back end ) are set on same timezone

Thanks

ARD

[Former Member]

Hi,

When you add controller in the NWBC, make sure it will pull and show e-mail ID also. If it doesnt there is a problem picking the mail-id.

Also make sure controller is assigned to the respective firefighter.

Regards,

Ajesh.

[Former Member]

Hi Ajesh,

In NWBC while assigning the controller to FF ID, I am selecting notification by - Email.

In all assignment in NWBC , I am doing it after searching the users using F4. I am not coming across any screen which will show me Email ID with the user.

We are not using Acccess Request Management.fyi...

Can you show me screen shot if possible.

thanks

ARD

[Former Member]

Hi,

Please check if the e-mail ID is maintained in the user data source, maintaining only in GRC system is not going to help.

Try sending a test mail from GRC system to confirm that the SCOT config is good.

Regards,

Ajesh.

[Former Member]

Hi Ajesh,

Thanks. But we do not have any source system configured.

We need to configure parameter - 1113.

After setting config parameter 1113, Logon notification seem to be working.

thanks

ARD