GRc 10, SP12: EAM Invalid User Error.

[#1]

Dear Gurus,

While logging as a Fire-fighter, I am getting the below error message – Invalid SAP User:

I have checked the following already:

1.       Assignment of FFIDs to Firefighters, controllers and monitors with valid dates and all are valid.

2.       User validity of the Firefighter account in the GRC system – it’s indefinite and hence OK.

3.       User validity of the FFID in the backend system and it’s also indefinite – hence OK

4.       Role assignment to Firefighter and Firefighter IDs – checked these to be correct as well.

5.       Test connection for RFC – Tested to be correct, with a good response time.

Would appreciate if you could please advise and help in resolving the same?

Thanks & Regards,

Ronnie.

[Former Member]

centralized firefighting, all the firefighters must exist in the GRC box. To resolve the issue, create the firefighter user ID in the GRC box.,ensure all the firefighters exists in bth the system

[Former Member]

Hi Prasant,

The firefighters do exist in the GRC box and hence I am able to log in there.

Not sure why firefighters need to exist in both the systems for a centralised approach, as that is what the purpose of using the Firefighter is, that you do not log into the backend as your ID but as a FFID, which exists in the backend.

Thanks and Regards,

Ronnie.

[kevin_tucholke1]

In the Centralized EAM Scenario, the Firefight IDs must exist on the target system and the Firefighters must exist on GRC.  Neither have to be in BOTH systems.  If you were doing the De-Centralized firefight scenario, then the FF User and FFID would exist on the target system only and the FF User would execute the transaction to access the Firefighting Logon Screen to enter a Firefight session.  In either case, the result is the same with the logging and the FF Log Review.

From an Administration standpoint, both scenarios are administered centrally in the SAP Access Control application.  The difference is that you need to sync the EAM Master Data to your targets in the De-Centralized scenario.

Thanks,

Kevin Tucholke

[Former Member]

Agree with you Kevin. However, haven't found a solution to my initial problem of getting the invalid user error. Any ideas?

Regards,

Ronnie

[Former Member]

This message was moderated.