Fire fighter security table download

Dear Experts,
After downloading the Fire fighter Security table(/n/virsa/vfat -> Utilities -> Download) this can be opened in excel and see all the passwords. This is a potential risk in Security and authorization. Kindly suggest me is there any note or corrections to get the data downloaded as encrypted itself ?
Or any other suggestions welcome please.
Thanks and Regards,
Shiju

Hello Shiju,
Just wanted to ask you what role (s) does the user have, who is downloading and changing the passwords. Are they standard SAP provided or are they custom?
Role "/VIRSA/VFAT_ROLE_ADMINISTRATOR" has access to "Export" the list and role "/VIRSA/Z_VFAT_ADMINISTRATOR" has access to "change" the password.
Also, in case you do not want the export function to be available to any user, you may chosse not to use these SAP default roles for Firefighter but create your own roles and assign them to the users, where you can define the table maintenence for "/VIRSA/ZVIRFFPWD" table, not to be available to anyone to restrict this.
Regards,
Hersh.

Similar Messages

  • Fire Fighter Table Log

    Hi Gurus,
    I have to give the fire fighter log for the audit....When i look into the fire fighter log table
    Till the first step of firefighting Loggin in as Fire fighter is recordd on the Fire fighter id...But later all the activities has been Encrpted
    ylTCyMUOWnb     
    ylTCyMUOWnb     
    ylTCyMUOWnb     
    ylTCyMUOWnb     
    ylTCyMUOWnb     
    Firefighter                   THis is the first Step as fire fighter later the  field has been encrypted....
    Please let me know ...

    Hi Raghav,
       You can not download FF logs directly from the table as they are encrypeted. There are couple of ways to download FF logs.
    1) You can download FF logs in text format from FF. Go to
    FF -> Administration -> Archive -> Delete/Download Log.
    2) If you have implemented web functionality of FF (SPM), you can download any of the logs directly from web tool.
    Regards,
    Alpesh

  • Fire Fighter Logs details in /n/virsa/vfat

    Hi,
    When i see the Fire Fighter logs through the Tcode /n/virsa/vfat, i am just able to know what tcode was used by a particular user and at what time and date.
    Now if he has used SE38, i do not get the information of what report or program did he run in SE38. Similarly for SE16n I will not have the information of what table was used and modified.
    So is it possible to know the complete details of the activity that user has done throught the FIreFighter.
    Please help.
    Regards
    Anubhav

    In the case of SE16 you can see the generated selection-screen program for that table being submitted both in STAD if you are fast enough (i.e. before the aggregation takes place) and in the security audit log (SM20N - which is actually the correct tool to rely on). They will show reports from SA38 etc as well.
    However SE16N does not generate and submit report type programs so you cannot know which table was accessed. The only little "skidmark" it will leave behind is the memory id entries of the tabname selection parameter and SQL performance traces, but GRC does not access this data and it is unreasonable to assume that the history of these memory ids has been activated on the server side.
    If worst comes worse you will be able to find out the table though - latest with a thumb-screw or bamboo under the finder nails... 
    Cheers,
    Julius

  • Fire Fighter Mail Notification

    Hi Gurus,
    I have an issue with fire fighter....if i am not wrong...When i add a firefighter id to a user id ...it should send a mail...Fore Fighter controller and owner with a link to approve and then they approve the access...then it will send the user access to the user.The above process is not happening with the fire fighter we using..
    The fire fighter owner and controller are just getting the logs...Please let me know how to config the initial mail notification.
    Thanks in advance
    Guru

    Hello Guru,
    When a user probably a Security Administrator assigns Firefighter ID to a Firefighter User there is no such provision of automated e-mail notification in Access Controls 5.2 - Firefighter SP level 5 with Patch 1. Which is at the moment latest available on SAP service market place.
    But you can take it another way. If you have an Honour of using Access Enforcer then you can create a dedicated workflow for Firefighter ID assignment. Where you can define different stages and approvers for all scenarios. Also this way you can intimate the requestor and approver about the status.
    In role expert, you can automate the default Virsa Firefighter, Owner, Administrator and controller roles for users.
    Still there is no such automated functionality which can let you automatically add users to Virsa Firefighter configuration tables and send an e-mail.
    What you can do is, after the approval of the firefighterID assignment your security guy can manually add users to these considered tables and finish the AE workflow notifying all the approvers and requestor.
    I hope i touched the whole scenario.
    If you still have doubts, let me know.
    Thanks & Regards,
    Amol Bharti

  • Fire Fighter Report

    Hello Experts,
    I think I need some help on the Fire Fighter Reports.
    My ultimate goal is to get the list of Reason and activity used by the users during the months of January2012 and December2011.
    I was trying to execute the report "Reason/Activity Report" in SPM Tool Box in the transaction /n/virsa/vfat by giving the date range 01.01.2012 to 31.01.2012, i get the list but the column Reason Code is empty.
    I tried to view the table /virsa/ffreact in SE16.
    If i give input for FFKEY as 201112(December 2011), the result is "no table entries found for the specified key". But in the FF log report i can see users logged in during that period. Its the same case for the input *201201(January 2012).
    But if i give the input as 201202(February 2012), i get the list.
    Can anyone tell me the reason behind this.
    Best Rgds,
    Jaravuy

    Hi Jaravuy,
    Did you try to update the log?
    /n/virsa/vfat
    -->log information (F5)
    -->update (shift+F1)
    --> Choose a period where you are sure there has been activity
    Once you do this, you can try again.
    Best regards,
                   Félix

  • Fire FIghter Log Issue

    Hi Gurus,
    I have an issue with Fire fighter Log Job...I have Scheduled the Job...ZFATBAK with a period One hour....
    When i tried to look at the Log in Fire Fighter tool...It has the below message...
    BACKGROUND JOB WAS NOT SCHEDULED/LOG & FILE NOT YET GENERATED.
    Please help ...

    Hi,
    Guess I try to help you here. Can you please check the following;
    1.FATBAK job ? ( Via SM37)
    2. Go to the configuration table in the FF (Logon to FF and one of the tabs--)
    Please let meknw the what you see.
    Thanks

  • Fire fighter

    Guys,
    From my understanding the use of fire fighter is for emergency access in PRD. For that we can just create separate ID in sap system with almost sap_all authorization (not sap_all) and access PRD whenever there is a need.But why we need sap VIRSA fire fighter or SAP GRC super user privilege management?.

    Virsa Firefighter allows for tracking of who connects where, and what they do while connected. If you assign a generic SAP "super user", you loose these important tracking and auditing features... unless, of course, you create your own tracking system (for instance by activating a user exit upon login, demanding the person who logs in using the "super user" to identify him/herself and store some vital info such as time, date, ip address of the terminal used to connect and so on). Also, you'd need to turn security audit logging on.
    Firefighter gives you all of these security mechanisms in one package, one which tastes good to your auditors, too...
    Trond

  • SPM questions(Fire Fighter)

    Hello All,
    I had some questions on SPM(Fire fighter),please help me with this..
    For Critical transactions tab in /n/virsa/vfat--why we used it for,does it show header and footer log details..
    if we do not enter critical transactions will it still pull up critical history in FF logs.
    Second question-->Do we have setting of FF log history,can we pull the history of the user which is year old in FF log?
    Appreciate your responses.

    Hi,
    For Critical transactions tab in /n/virsa/vfat--why we used it for,does it show header and footer log details..
    if we do not enter critical transactions will it still pull up critical history in FF logs.
    The critical transactions that you maintain here will help you to generate a separate report that shows who and when any of the transaction codes were executed (and when they were executed). If you don't want to seperate the critical transactions, you can leave this blank.
    Do we have setting of FF log history,can we pull the history of the user which is year old in FF log?
    The logs will be available until they are archived.
    /VIRSA/ZFFUSERS - Table holds the Change logs (CLOG)
    /VIRSA/ZFFTNSLOG - Transaction Log (TLOG)
    Search in SE16, with /VIRSA/ZFF* to view the list of SPM tables.
    I recommend you to refer SAP Note 1041912 - Firefighter Best Practice Archiving Strategy that gives you the best solution to archive SPM logs.
    Hope this helps!!
    Regards,
    Raghu

  • GRC,Fire Fighter

    I'm new to GRC, fire fighter.
    Can any one please guide me with fundamentals or any docs will be helpful.
    Thanks in advance

    Hello Kobby,
    Please check following links
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/90280209-1e57-2b10-009c-d8d800f626c5
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/6050049b-5d59-2b10-e790-8db133c62931
    https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/30e3c0f1-b9b3-2b10-d688-cbc0ce59b5f5
    And you can download the installation n configuration guide from SMP.
    Hope these would give you enough idea about FF/SPM.
    Thanks
    Davinder

  • Fire Fighter Roles

    Hi Gurus,
    I am in the process of designing Fire Fighter ROles for the Production process...
    Can any one please help me with the number of roles and Transactions that we use for the design process...
    How many Fire Fighter roles that we need and What are the Transactions.....?
    Thanks in advance
    Guru

    Hi Guru,
    The roles that need to be created for Firefighter ids are based on requirement from the Business process owners of the respective business modules ( example, SD, MM, PP, FICO ).
    Firefighter tool is designed to help you handle exceptional access requests appropriately.
    This tool is used to deal with emergency access requests. For example, when a Production support person needs to investigate an Urgent issue in Production system but does not have enough access. Then you need to assign the Firefighter id and the appropriate Firefighter role(s) to complete the emergency transactions.
    Virsa Firefighter for SAP enables super-users to perform emergency activities outside the parameters of their normal role, but to do so within a controlled, fully auditable environment. The application assigns a temporary ID that grants the super-user broad yet regulated access, and tracks and logs every activity the super-user performs using that temporary ID.
    So you need to consult your BPOs, Internal Audit team, Controllers and come up with the emergency transactions, authorizaton objects, programs, reports, tables and design the roles with appropriate naming conventions.Assign the Firefighter roles to the Firefight IDs in emergency in Production system.

  • Cannot open network preferences, security, or downloads; blue screen appears

    I have recently discovered that I cannot open my network preferences, security, or downloads folder. I do not know what else I am unable to open. For these three, I click upon them and instantly a blue screen appears, quickly followed by my desktop with all programs (except Finder) shut down, as if I was just logging on. The MacBook Pro is not yet a year old. I have recently downloaded the Amazon Cloud and was wondering if this could be causing the spastic behavior. My boyfriend seems to think that it is a corrupt file. Does anyone have any ideas on how to fix this problem? Thank you.

    Linc Davis wrote:
    By the way, repairing permissions is a complete waste of time. All it does is spew bogus error messages. It never fixes anything unless you have a specific indication of a permission problem, which is rare.
    The only truths in your statement is the bolded sentence.  Everything else is false.

  • What is FIRE FIGHTER ID

    hi folks,
    can anybody tell me what is FIRE FIGHTER ID.

    Hi,
    When a user in a production system needs help from an IT
    superuser, the application assigns a temporary ID that grants
    the superuser broad yet regulated access. The superuser simply
    logs on to the application’s main console, where a new session
    is opened under the Firefighter ID. Because the Firefighter ID is
    preassigned, the superuser never needs to wait for approval
    before solving a critical problem.
    Ideally Firefighter should be used only for superuser access. The reasoning...
    1) When the firefighter role is being used, the user cannot use his normal transactions
    2) Only one user can use a firefighter role at a time
    3) Complete log of firefighter role usage is available for review.
    Many-a-times it is suggested to use firefighter role for performing the duties of the users on holiday. However I think it is not appropriate. Such users should be assigned normal roles for these duties for the limited period
    Hope I had been able to help you. Please assign points.
    Rgds
    Manish

  • Changes History Report in Fire Fighter

    Hi,
    We have assigned FF ID to end user. By using that FF ID,user did some changes.
    Ex: End user has used SU01 transaction and he has assigned SAP_ALL to his own id and some other users via FF ID.
    When we checked the Log Reports in FF 5.3, we are able to the see only transaction details which he has used. But we are unable to find the changes which he has done by using SU01.
    Please check and advice me how me can get that change history report in Fire Fighter.
    Thanks & Regards,
    KKRao.

    Hi Harleen,
    Retrieve Change Log option is already set as YES. But we are unable to get Changes History Report.
    Please advice to me.
    Thanks & Regards,
    KKRao

  • Change History in Fire Fighter Log Report.

    Hi Experts,
    Changes made by fire fighters were not recorded in the fire fighter log reports.I have gone thru a thread in the forum,there was mentioned that the issue had been reported to the SAP.Please let me know, if there is any update on the issue from SAP.
    Thanks,
    Mukesh

    FF Logs can be recorded when the changes done with FF id. Without FF id no Support / IT user should be allowed.
    If you want to change the configuration it has to be done via FireFigher only. Otherwise you get the log from SM20, if its been configured.

  • Securing table group SS / transaction SCC1 and table CCCFLOW

    Hello all,
    I'm relatively new to this forum, please be kind.
    Situation sketch:
    In an SAP landscape, in Development environment, I have 3 clients, in which 500 is the ECC golden client, 510 is for sandboxing and 520 is for testing.
    Problem:
    Developers use tcode SCC1 to transport customizations to another client to be tested again and put on transports eventually.
    For changes they make using SCC1 they require Change (02) authorization on table CCCFLOW (client-copy report logs).
    However this CCCFLOW table is classed under the SS table group, in which all my other important security tables are as well
    (AGR_* etc).
    Question:
    How have you guys secured the SS table group when you still want to provide developers the use of SCC1?
    Regards,

    How about this idea?  Your thoughts and suggestions are appreciated.
    1.  Clone SCC1 to ZSCC1 (SE93)
    2.  For ZSCC1 Remove S_TABU_DIS Auth Check on ACTVT 02(SU24)
    3.  For ZSCC1 Insert S_TABU_NAM Auth Check on CCCFLOW  ACTVT 02(SU24)
    4.  test with a role that allows S_TABU_NAM to CCCFLOW and does not allow S_TABU_DIS to auth grp SS
    This should separate out CCCFLOW from the rest of the SS Auth Group tables.
    Has anyone tried this approach?
    Optionally, Do steps 2 and 3 directly on SCC1, depending on your SAP shop's policy for modifying auth checks on SAP-delivered tcodes.
    BSnow

Maybe you are looking for

  • My ipod's app store is not downloading any apps.

    When i open the app store everything works fine but when i press to update or buy a app a circle just spins around and around! SUPER ANNOYING!

  • Problem with deleting files !!

    I want to delete file, but for some extensions it is not possible, how can I delete all files? I use myFile.delete();

  • RFC function to retrieve application log

    Hi, does anybody know a standard SAP RFC function module to read an application log? So far I haven't been able to find one... Please note that I'm not looking for any custom RFC wrappers around standard SAP functions or any solutions to read the dat

  • Oracle 10g Application Server Installation Error

    Hi Everyone! This is my first time to install Ora10g Apps Server and I encountered an error at 2 assistant configuration point. By the way, I'm installing it in a Windows Server 2003. I encountered the first road block at Oracle Database Configuratio

  • Help changing bind for Delete

    Hello friends, I want to change the key to delete from "Delete" to something easier to reach, like "z". I went into the keyboard bindings, but I couldn't find the delete action. How do I change it? Thanks!