I am in the process of designing Fire Fighter ROles for the Production process...
Can any one please help me with the number of roles and Transactions that we use for the design process...
How many Fire Fighter roles that we need and What are the Transactions.....?
Thanks in advance
Typically what I would suggest is to have one or two FF ID's per module, as per the number of persons working for the same.
One of these should have role (s) with almost full access of that particular module and the other with a limited one. Thus, depending on the criticality and nature of the need of FF ID you can provision one of these two FF's as and when required.
The roles that need to be created for Firefighter ids are based on requirement from the Business process owners of the respective business modules ( example, SD, MM, PP, FICO ).
Firefighter tool is designed to help you handle exceptional access requests appropriately.
This tool is used to deal with emergency access requests. For example, when a Production support person needs to investigate an Urgent issue in Production system but does not have enough access. Then you need to assign the Firefighter id and the appropriate Firefighter role(s) to complete the emergency transactions.
Virsa Firefighter for SAP enables super-users to perform emergency activities outside the parameters of their normal role, but to do so within a controlled, fully auditable environment. The application assigns a temporary ID that grants the super-user broad yet regulated access, and tracks and logs every activity the super-user performs using that temporary ID.
So you need to consult your BPOs, Internal Audit team, Controllers and come up with the emergency transactions, authorizaton objects, programs, reports, tables and design the roles with appropriate naming conventions.Assign the Firefighter roles to the Firefight IDs in emergency in Production system.