Post Installation to First Emergency Access

8/3/2019 Post Installation to First Emergency Access

1/19

AC 10.0 Pre-ImplementationFrom Post-Installation to First Emergency Access

Customer Solution AdoptionApril 11th 2011

Version 1.0


2/19

Purpose of this document

This document allows implementation consultants and administrators tosetup the required functionality for running an emergency access(firefighter) session after the post-installation has been finished. This is byno means a comprehensive guide for setting up the Emergency Access

Management component, rather it allows testing the application is workingproperly by setting up a basic test case.


3/19

2011 SAP AG. All rights reserved. 3

Disclaimer

This presentation outlines our general product direction and should not be relied onin making a purchase decision. This presentation is not subject to your licenseagreement or any other agreement with SAP. SAP has no obligation to pursue anycourse of business outlined in this presentation or to develop or release anyfunctionality mentioned in this presentation. This presentation and SAP's strategyand possible future developments are subject to change and may be changed bySAP at any time for any reason without notice. This document is provided without awarranty of any kind, either express or implied, including but not limited to, theimplied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no responsibility for errors or omissions in thisdocument, except if such damages were caused by SAP intentionally or grossly

negligent.


4/19


Agenda

Requirementso Adding connector to SUPMG scenario

o Creating users and assigning roles

o Verifying time zones

Configurationo Maintaining AC ownerso Assigning owners to firefighter IDs

o Assigning firefighter IDs and controllers to firefighters

o Creating reasons codes

Starting an emergency access session

Managing Logso Running log collection

o Viewing the firefighter reports


5/19

Requirements Adding connector to SUPGM scenario

Creating users and assigning roles


6/19


7/19 2011 SAP AG. All rights reserved. 7

Creating users and assigning roles

Please create users and roles as needed. Remember to synchronize again therepository (program GRAC_REPOSITORY_OBJECT_SYNC ). These roles areprovided as examples and customer roles need to be created based on theirauthorizations.

In the AC system Role

Firefighter user SAP_GRAC_SUPER_USER_MGMT_USER

Firefighter controller SAP_GRAC_SUPER_USER_MGMT_CNTLR

Firefighter owner SAP_GRAC_SUPER_USER_MGMT_OWNER

In the target system Role

Firefighter ID SAP_GRAC_SPM_FFID

In the AC system the Firefighter ID role is configured in Param ID 4010 (Firefighter IDrole name)

Reminder: end users will require also the roles based on SAP_GRC_FN_BASE andSAP_GRC_FN_BUSINESS_USER


8/19


9/19

Configuration Maintaining AC owners

Assigning owners to firefighter IDs

Assigning firefighter IDs and controllers to firefighters

Creating reasons codes



Maintaining AC owners

Go to NWBC Access Management GRC Role Assignments Access ControlOwners and maintain the controllers and owners as shown below:

After this is done it is possible to assign those to FireFighter IDs.



Assigning owners to firefighter IDs

In Access Management go to Superuser Assignment and click on Owners. Hereowners are assigned to firefighter IDs.



Assigning firefighter IDs and controllers to firefighters

Now you need to assign firefighter IDs and controllers to users. This is done by goingto Superuser Assignment Firefighter IDs

Note: Multiple firefighter users and controllers can be assigned to a multiplefirefighter ID.



Creating reasons codes

The reason codes available for firefighter users are maintained under SuperuserMaintenance Reason Codes


14/19

Starting Emergency Access



Starting a firefighter session

Login to the AC system using the firefighter user and launch transactionGRAC_SPM

You will be able to connect to the target system using the firefighter IDs previouslyassigned


16/19

Managing Logs Running Log Collection

Viewing the firefighter reports



Running log collectionForeground mode

The foreground job for log collection can be executed from the Update Firefighter

Log Button which can be found in the following path:

Reports And Analytics Super User Management Reports Consolidated LogReport


18/19


Running log collectionBackground mode

The Background Job for Log Collection can be scheduled periodically from SM36using program GRAC_SPM_LOG_SYNC_UPDATE.

Documents

Post Installation to First Emergency Access