Embed Size (px)
Citation preview
8/13/2019 0001545511
http://slidepdf.com/reader/full/0001545511 1/2
SAP Note
Header Data
Symptom
Need to implement SAP User Logon Exit for restricting login of Firefighter Ids through SAP GUI
Other Terms
ZXUSRU01, Firefighter, AC10.0, GRCAC, Superuser Privilege Management.
Reason and Prerequisites
Create Logon User Exit for Firefigher
Solution
Firefighter Ids need to be restricted from Logging in into SAP System, directly via SAP GUI. For this purpose either we need to create andmodify the SAP User Login Exit.
Please follow the steps mentioned below:
F rst c ec t e user ex t s a rea y mp emente or not y go ng to transact on SE38 an try to sp ay t e program ZXUSRU01. I you can seethe program, that means the above mentioned user exit is already implemented and you need to follow the process under modifying the user exitelse you have to follow the process mentioend under Implementing the user exit
Steps to be followed for Implementing the Logon User Exit for the first time in the SAP System
1) Go to transaction CMOD and give a project name and click on create button.
2) In the following screen, provide a short description for this project and click on save. At this point you need to assign this object to adevelopment class.
3) Next click on the Enhancement Assignments and provide "SUSR0001" as the Enhancement name.in the following screen and click Save.
4) Next click on Components button which will show you the function exit screen where a function module "EXIT_SAPLSUSF_001" is present.
5) Double click on the name of the exit mentioned above which will take you to the exit implementation screen which will show an includeZXUSRU01.
6) Double click on the ZXUSRU01 (if it will give any warning, then press the Enter) which will ask to create the inlcude ZXUSRU01 as it doesnot exit. click yes which will take you to a new screen for implementing the inlcude.
7) Add the statement "include /GRCPI/GRIA_USEREXIT." in the include ZXUSRU01 implementation screen and click on save and then activate.
8) If you have "include /VIRSA/ZVIRSA_USEREXIT." in the include ZXUSRU01 then comment this line.
9) Go back, save and then activate the function module EXIT_SAPLSUSF_001
10) Go back and activate the project.
Steps to be followed for Modifying the already implmented User Exit.
a) Go to transaction SE38 and give the report name as "ZXUSRU01" and click on display. If you get a message saying report does not exist thenyou have to follow the steps mentioned above under Implementing the Logon User Exit.
b) If the implementation screen for the include is shown, then go to change mode and then add the statment "include /GRCPI/GRIA_USEREXIT". atthe end of your existing implementation. and then Save and activate the include.
c) Following the Step 1, 2, and 3. In 3rd step if you will get any error "SAP enhancement SUSR0001 already belongs to project...(projectname)". Kindly activate the project(Project Name) using CMOD transaction code. If you will not get any error then follow the step 10.
Validity
1545511 - Firefighter User Exit
Version 4 Validity: 12.05.2011 - active Language English
Released On 12.05.2011 23:59:43
Release Status Released for Customer
Component GRC-SAC SAP GRC Access Control - Please use sub-components
Priority Recommendations / Additional InfoCategory Installation information
Software Component From Rel. To Rel. And Subsequent
GRCPIERP V1000_46C V1000_46C V1000_620 V1000_620 V1000_640 V1000_640 V1000_700 V1000_700
GRCPINW V1000_46C V1000_46C V1000_620 V1000_620 V1000_640 V1000_640 V1000_700 V1000_700
8/13/2019 0001545511
http://slidepdf.com/reader/full/0001545511 2/2
References
This document refers to:
SAP Notes
This document is referenced by:
SAP Notes (3)
V1000_710 V1000_710 V1000_731 V1000_731
1562759 AC10.0 - ABAP dump while login from launchpad as FFID
1562760 AC10.0 - Intergration Scenarios to Connector link
1550288 Master Note for SAP Access Control 10.0 - Support Pack 3
1550288 Master Note for SAP Access Control 10.0 - Support Pack 3
1562759 AC10.0 - ABAP dump while login from launchpad as FFID
1562760 AC10.0 - Intergration Scenarios to Connector link
