Home > SAP Security > SAP FireFighter

SAP FireFighter

November 17th, 2011 Leave a comment Go to comments

SAP Firefighter is the old name of Super Privilege Management which is a component of SAP GRC Access Control. It provides user the capability to take responsibility for tasks outside their normal job function. A temporary ID is assigned that grants the user privileged, yet regulated, access. This transfer of privileges from one person or role to another is called firefighting. Such a firefighting event might occur, for example, if an employee is injured and another employee has to perform the injured employee’s duties.

Transaction code for this tool is /VIRSA/VFAT.

Technically, this tool will create/update the RFC destination by program and logon to the Firefighter ID using function module ‘SYSTEM_REMOTE_LOGIN’ by RFC.

  call function 'SYSTEM_REMOTE_LOGIN'
       exporting
*          SYSTEM        = ISYSID
*          HOST          = IHOST
*          SERVICE       = ISERVICE
            destination   = idest
       importing
            error_message = emsg
       exceptions
            cannot_start  = 1
            others        = 2.

firefighter

Reference

Superuser Privilege Management

  1. No comments yet.
  1. No trackbacks yet.