Upload
deepa-saha
View
221
Download
0
Embed Size (px)
Citation preview
8/3/2019 Post Installation to First Emergency Access
1/19
AC 10.0 Pre-ImplementationFrom Post-Installation to First Emergency Access
Customer Solution AdoptionApril 11th 2011
Version 1.0
8/3/2019 Post Installation to First Emergency Access
2/19
Purpose of this document
This document allows implementation consultants and administrators tosetup the required functionality for running an emergency access(firefighter) session after the post-installation has been finished. This is byno means a comprehensive guide for setting up the Emergency Access
Management component, rather it allows testing the application is workingproperly by setting up a basic test case.
8/3/2019 Post Installation to First Emergency Access
3/19
2011 SAP AG. All rights reserved. 3
Disclaimer
This presentation outlines our general product direction and should not be relied onin making a purchase decision. This presentation is not subject to your licenseagreement or any other agreement with SAP. SAP has no obligation to pursue anycourse of business outlined in this presentation or to develop or release anyfunctionality mentioned in this presentation. This presentation and SAP's strategyand possible future developments are subject to change and may be changed bySAP at any time for any reason without notice. This document is provided without awarranty of any kind, either express or implied, including but not limited to, theimplied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no responsibility for errors or omissions in thisdocument, except if such damages were caused by SAP intentionally or grossly
negligent.
8/3/2019 Post Installation to First Emergency Access
4/19
2011 SAP AG. All rights reserved. 4
Agenda
Requirementso Adding connector to SUPMG scenario
o Creating users and assigning roles
o Verifying time zones
Configurationo Maintaining AC ownerso Assigning owners to firefighter IDs
o Assigning firefighter IDs and controllers to firefighters
o Creating reasons codes
Starting an emergency access session
Managing Logso Running log collection
o Viewing the firefighter reports
8/3/2019 Post Installation to First Emergency Access
5/19
Requirements Adding connector to SUPGM scenario
Creating users and assigning roles
8/3/2019 Post Installation to First Emergency Access
6/19
8/3/2019 Post Installation to First Emergency Access
7/19 2011 SAP AG. All rights reserved. 7
Creating users and assigning roles
Please create users and roles as needed. Remember to synchronize again therepository (program GRAC_REPOSITORY_OBJECT_SYNC ). These roles areprovided as examples and customer roles need to be created based on theirauthorizations.
In the AC system Role
Firefighter user SAP_GRAC_SUPER_USER_MGMT_USER
Firefighter controller SAP_GRAC_SUPER_USER_MGMT_CNTLR
Firefighter owner SAP_GRAC_SUPER_USER_MGMT_OWNER
In the target system Role
Firefighter ID SAP_GRAC_SPM_FFID
In the AC system the Firefighter ID role is configured in Param ID 4010 (Firefighter IDrole name)
Reminder: end users will require also the roles based on SAP_GRC_FN_BASE andSAP_GRC_FN_BUSINESS_USER
8/3/2019 Post Installation to First Emergency Access
8/19
8/3/2019 Post Installation to First Emergency Access
9/19
Configuration Maintaining AC owners
Assigning owners to firefighter IDs
Assigning firefighter IDs and controllers to firefighters
Creating reasons codes
8/3/2019 Post Installation to First Emergency Access
10/19 2011 SAP AG. All rights reserved. 10
Maintaining AC owners
Go to NWBC Access Management GRC Role Assignments Access ControlOwners and maintain the controllers and owners as shown below:
After this is done it is possible to assign those to FireFighter IDs.
8/3/2019 Post Installation to First Emergency Access
11/19 2011 SAP AG. All rights reserved. 11
Assigning owners to firefighter IDs
In Access Management go to Superuser Assignment and click on Owners. Hereowners are assigned to firefighter IDs.
8/3/2019 Post Installation to First Emergency Access
12/19 2011 SAP AG. All rights reserved. 12
Assigning firefighter IDs and controllers to firefighters
Now you need to assign firefighter IDs and controllers to users. This is done by goingto Superuser Assignment Firefighter IDs
Note: Multiple firefighter users and controllers can be assigned to a multiplefirefighter ID.
8/3/2019 Post Installation to First Emergency Access
13/19 2011 SAP AG. All rights reserved. 13
Creating reasons codes
The reason codes available for firefighter users are maintained under SuperuserMaintenance Reason Codes
8/3/2019 Post Installation to First Emergency Access
14/19
Starting Emergency Access
8/3/2019 Post Installation to First Emergency Access
15/19 2011 SAP AG. All rights reserved. 15
Starting a firefighter session
Login to the AC system using the firefighter user and launch transactionGRAC_SPM
You will be able to connect to the target system using the firefighter IDs previouslyassigned
8/3/2019 Post Installation to First Emergency Access
16/19
Managing Logs Running Log Collection
Viewing the firefighter reports
8/3/2019 Post Installation to First Emergency Access
17/19 2011 SAP AG. All rights reserved. 17
Running log collectionForeground mode
The foreground job for log collection can be executed from the Update Firefighter
Log Button which can be found in the following path:
Reports And Analytics Super User Management Reports Consolidated LogReport
8/3/2019 Post Installation to First Emergency Access
18/19
2011 SAP AG. All rights reserved. 18
Running log collectionBackground mode
The Background Job for Log Collection can be scheduled periodically from SM36using program GRAC_SPM_LOG_SYNC_UPDATE.
8/3/2019 Post Installation to First Emergency Access
19/19
2011 SAP AG All rights reserved 19
Viewing the firefighter reports
The reports can be filtered by using different criteria as shown below.