cancel
Showing results for 
Search instead for 
Did you mean: 

controller and firefighter cannot be the same person

0 Kudos
211

getting error "controller and firefighter cannot be the same person" when FF user trying to return the request to FF Controller by providing additional information as requested by controller

The error is invalid. FF user is not tagged as controller for any id

Both controller and FF user type is maintained as dialog only

Given all authorization as per previous error screen shots and even tried with SAP_ALL but, same issue.

View Entire Topic
olgavlachova
Explorer
0 Kudos

Hello Srinivasa, I guess it would be fine to get familiar with the four eyes principle because this is the approach and the purpose of SAP GRC (as the tool for Segregation of Duties). For SAP Security related SAP Role Management and User Management it's obviously clear that Role Administrator can create and change roles but can not be allowed to assign roles to users, and that User Administrator can create users but can not be allowed to give access rights to users, it's analogy of SOX but for IT.

SAP GRC is able to help to cover critical points of business related processes and also IT related processes. Even if usewd mainly, Emergency Access Management is only a part of SAP GRC complexity.

Have a nice day.