How to create a "Firefighter" type role when we do not have GRC
I am just looking for advice or input on this situation.
Currently my company does not have GRC or any other type of software that will allow for automated Firefighter type access and apparently there are no plans in the near future to purchase anything.
Our current process of creating a very powerful role to sign out to users on a case by case basis for a 24 hour period is not working and is getting out of hand.
I have been tasked with coming up with a better solution and they want me to build multiple roles for emergency access based on business area. Since there are thousands of transaction codes in SAP I find this to be a rather daunting task. My question is this...would it be a really bad idea to build say a Finance emergency role with F* in s_tcode and full access? I realize that there are more Finance codes that do not start with F but I am really just looking for input.
Has anyone else faced this situation and how did you approach it?
If someone out there has done this and could provide me with sample roles, that would be great.
Any help or advice is greatly appreciated.
Thanks
Bobbi
Hi Bobbi
There are couple of ways I did it in my previous customers. I am guessing you need these roles during Go-Live and Production Support
1. Create FF roles by business Process ( OTC, RTR etc) or Module wise. Get hold of the respective Functional people and ask them the nodes in SPRO Tcode what they think should be there for those FF roles. Then create those roles accordingly. Remove the Basis / Security admin tcodes and make 03 where-ever necessary.
2. Another way of doing it is you might already have global roles for different modules / business processes. So identify the roles that are best suited for the FF roles and during Go-Live/ Prod Support. Group them and may be create composite roles for those Global single roles
You might need FF roles for Transactional access and Configuration Access.
Transactional FFID: FFID with change access to business transactions of the stream/function. (Can use the create/change access roles built for end users)
Configuration FFID: FFID for any manual configu2019s to be performed directly in production and cannot/may not be transported (ex: number ranges)
There should be process for giving the FF roles and proper approval. Appropriate role owners should be identified for these roles who will give approval
Hope this helps
Similar Messages
-
I previously had an iPhone 4 which has since been put away in a drawer now that I have an iPhone 5. I would like to give my iphone 4 to someone else to use but could not remember my passcode - have tried a few times (I believe I have one more try before it gets disabled - so I have stopped trying). Read somewhere that you can just restore your phone which works for me as I wanted to clear it anyway. When I connect my phone to itunes and clicked on restore it said update and restore which I clicked on and left it to do its work. However, a while later an error code popped up saying that it could not update or back up the phone as the phone was locked . Now my phone just has the itunes logo on it but when I connect the phone to the computer and I manually open itunes, my phone is not recognised.
What can I do? Please help!!!Hi Shelley1284,
If you are having issues restoring your iPhone, you may find the following article helpful:
Apple Support: If you can't update or restore your iOS device
http://support.apple.com/kb/ht1808
Regards,
- Brenden -
How do I reset my security questions when I do not have a rescue email
Hi guys
I have forgotten my answers to the security questions further more I did not provide the rescue email. I have looked all over the stupid support site in order to send them an email since they said that they will have to do it. Please someone let me know what or how can I solve this problemTry this discussion...
https://discussions.apple.com/message/21889182 -
How do i open a pages document when I do not have it
I have a mac but do not have pages and a person in my class sent me a document of her notes from pages. is there anyway I could open the document another way without having to install pages?
https://www.apple.com/iwork-for-icloud/
https://www.icloud.com/
You will need an Apple I.D. to login
Peter -
HT5312 How do I reset my security questions when I do not have a rescue email address?
I want to buy something for the first time on my iPad but I have to answer security questions. I don't remember the answers nor do I have a rescue email address. Is there some other way besides calling apple?
If you don't have a rescue email address then see if the instructions on this user tip helps : https://discussions.apple.com/docs/DOC-4551
-
How do I change an old iCloud I'd when I do not have access to that email anymore?
How do I change an iCloud ID when I do not have the email account anymore and i do not remember the password?
If your device is signed into an old ID of yours that is an earlier version of the ID you want to sign in with, do the following:
If you are using iMessage and FaceTime, make sure you are signed into these services with your current ID. If they are signed into the old ID, go to Settings>Messages>Send & Receive and Settings>FaceTime, tap the ID, sign out, then sign back in with your current ID.
Then temporarily recreate the old ID by going to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. (You should not have to verify the old email account so it doesn’t matter if you no longer have access to it.) Now go to Settings>iCloud, turn off Find My iDevice and enter your current password when prompted (even though it prompts you for the password for your old ID). Then save any photo stream photos that you wish to keep to your camera roll (unless you are using iCloud Photo Library). When finished go to Settings>iCloud, tap Sign Out (or Delete Account if you are not running iOS 8) and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address back to the way it was. Now you can go to Settings>iCloud and sign back in with your current iCloud ID and password (your data will download back to your device). -
How to create a line type in data dictionary
How to create a line type in data dictionary?Please explain step by step?
Thanks & Regads,
SairamHi,
the details abbout the line type.
The line type of a table type can be defined by:
o Specification of a type that already exists (data element,
structure, table type, table, view) whose properties are then copie
as properties of the defined table line.
o Direct type input, where data type, number of positions, and, if
required, decimal places, are entered directly.
o Specification of a reference type.
and SE11 and click on datatype and click on table type and enter the line type.
Thanks
Shiva -
HI, I need your help. How can I delete all data, when I do not have the special security code, which I didn´t remember ? I also think, that I never create this code before. But I cannot put my settings back.
You must remember the code, if you can't then take the phone and proof of purchase to an Apple Store.
-
How to create the sub type field in hr abap infotype
hi ,
how to create the sub type field in hr abap infotype.
regards,
venkat.Try like this also
creating of infotype please follow these steps ...
Step 1: Create Infotypes
i. Goto Transaction PM01 To create Infotypes:
ii. Enter the Infotype Number and say create all.
iii. The following message would display:
i. PSnnnn Does not exist. How do you want to proceed?
iv. Click
v. A maintain Structure screen appears.
Fill in the short text description and the PS structure of the Infotype.
Since the fields Personnel No, Employee Begin Date, End Date, Sequential Number,Date of Last Change, Name of user who changed the object are available in the PAKEY and PSHD1 structure, define the PSnnnn structure with only the fields you required.
vi. Once the PS Structure is created, save and activate the structure.
vii. In the initial screen of PM01, now click on .
Create a new entry for the infotype.
Fill in the values as mentioned below and save.
Infotype Characteristics:
Infotype Name of the infotype_ Short Text: __Short Description________
*General Attributes :
Time constraint = 1
Check Subtype Obligatory
Display and Selection:
Select w/ start = 3 Valid record for entered data
Select w/ end = 5 Records with valid dates within the period entered
Select w/o date = 6 Read all records
Screen header = 02 Header ID
Create w/o end = 1 Default value is 31.12.9999
Technical Data:
Single screen = 2000
List screen = 3000; List Entry Checked.
viii. In the initial screen of PM01, now click on .
Choose the infotype entry in the list.
Fill in the values as mentioned below and save.
Technical Attributes:
In tab section,
The following attribute values are given:
Applicant DB Tab = PAnnnn Infotype Name
Subtype field = SUBTY
Subtype table = T591A
Subty.text tab. = T591S
Time cnstr.tab. = T591A
Prim. /Sec. = I Infotype
Period/key date = I Interval
and .
ix. Infotype Screen Modification:
Edit Screen 2000 from PM01 for the Infotype.
ABAP Editor for the Infotype Program MPnnnn00 will be displayed.
Click . Flow Logic will be displayed. There string coding of your own logic.
Regards
Pavan -
How to create multiple Tree Type Region In Tabular Form ?
Dear Friends,
i have to design tabular form to Distribute User Rioght to emp to access application
eg if i have Three module in application
1.Administration
2.Attendance
3.Accounts
Module
1 Administration have 5 Pages A,B,C,D,E.
Module
2 Attendance HAVE 4 Pages F,G,H,I
Module
3 Accounts HAVE 7 Pages J,K,L,M,N,O,P
I need these three module divided into three section in tabular form as a tree Type like
Module 1 Tree Open in Tabular Form like
- (Tree Mark Open )
=======================================================
PAGE_ID-------------SUBPAGE_ID-------VIEW-------------------MODIFY-------------------CREATE----------------------------TABLE COLUMN NAME
========================================================
Administration-----------A------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Administration-----------B------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Administration-----------C------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Administration-----------D------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Administration-----------E------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
- (Tree Mark Open )
Module 2 Tree Open in Tabular Form like
Attendance-----------F------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Attendance-----------G------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Attendance-----------H------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Attendance-----------I------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
- (Tree Mark Open )
Module 3 Tree Open in Tabular Form like
Accounts-------------J------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------K------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------L------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------M------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------N------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------O------------------CHECK bOX------------CHECK BOX-------------CHECK BOX
Accounts-------------P------------------CHECK bOX------------CHECK BOX-------------CHECK BOXi need divided these three Module in Tabular form in three region as tree.
Table APPLICATION_PAGE_DETAILS
ID NUMBER
PAGE_ID NUMBER
SUB_PAGE_ID NUMBER
========================
TABLE USER_RIGHT
======================
ID NUMBER
EMP_ID NUMBER
PAGE_ID NUMBER
SUB_PAGE_ID NUMBER
VIEW VARCHAR2(1)
MODIFY VARCHAR2(1)
CREATE VARCHAR2(1)How to create multiple Tree Type Region In Tabular Form ?
How can i do this ?
Thanks
Edited by: Vedant on Oct 4, 2011 3:21 AM
Edited by: Vedant on Oct 4, 2011 9:09 PM
Edited by: Vedant on Oct 13, 2011 8:57 PMWell think of it I believe the scenario is too bird viewed hence the solution can't be exact.
But thinking of a possible solution every time a child operation fails have a catch block where you you go back to system if the parent needs to be deleted if yes, call Delete Method on the parent.
Note: Make sure that the decision on whether or not the parent record needs to be deleted will depends on the question "Does Parent Record already has several other children associated to it or not"
Hope this clarifies.
Regards,
Messer -
How to create a day type in Infotype 0041 (Want to maintain EE Retirement date)
Dear Consultants,
Can any buddy tell how to create a day type (Retirement date) in Infotype 41,
My client want to maintain employees retirement date in Infotype 0041, please share your Ideas.
Thanks & Regards,
NaveshHi Sridevi,
Thanks for quick reply.
Regards,
Navesh -
How to create external content type in sharepoint for salesforce account
Can anybody help me on How to create external content type in sharepoint for salesforce account.
I wanto upload documents to a document library which should sync with accounts in saleforce.
thanks in advanceHi,
The following materials would be helpful:
Tutorial: Access Salesforce Leads in SharePoint through an External List
http://geekswithblogs.net/dataintegration/archive/2014/02/03/tutorial-access-salesforce-leads-in-sharepoint-through-an-external-list.aspx
Salesforce SharePoint Integration – Best Practices
http://rainforce.walkme.com/salesforce-sharepoint-integration-best-practices/#.VFxra3mKAeE
If you want to upload documents to SharePoint document library from the Saleforce, we can also customize your own web service using SharePont .Net Client Object Model or REST to achieve it.
Best Regards
Dennis Guo
TechNet Community Support -
How to create Technical Wage types
Hi to All,
How to Create Technical Wage types, what are the pre-requisite information required for creating and how it works
BhaskarHai..
Pls come up with ur requirement......In order to copy tech wage types... u need to know the func of each series of tech wage types..
0** valuation
/1** cumulation
/2** averages
/3** country-specific, usually for social insurance
/4** country-specific, usually for tax
/5** legal net
/700 wage/salary plus ER shares
/8** period factoring
/84* cost accounting
/A** outgoing wage types in retroactive accounting period
/Z** incoming wage types from the previous period
Now based on ur requirement u need to select a std tec wage type, and copy it in the customer range series -
How to create Reference Condition Types
Hi ,
Please tell me how to create Ref.Condition Types?
I have a requirement.."I should create a Zdiscount(13%) which should be copied to the sales order automatically based on PR00"
How to do that?
Points for sure
RamChandraHi,
You can use condition supplement functionality.
Check the link [Condition Supplements|http://help.sap.com/saphelp_47x200/helpdata/en/93/7432de546011d1a7020000e829fd11/frameset.htm]
You can also check the field RefConType for the discount condition type in SPRO -> Sales and distribution -> Basic functions ->Pricing -> Pricing control ->Define condition type.
Regards, -
How to create a curved-type cylinder
We can create the basic geometries easily with J3DAPI , but how to create a curved-type geometry such as cylinder ?
Searching for help ....
Thanks a lot for giving any tips or information about it !With the idea of "Divide & Conquer" , I has a rough solution.
Edited by: DragonWarrior_CHN on Mar 19, 2010 2:22 AM
Maybe you are looking for
-
Tired of apps freezing and banging on the screen like a gorilla trying to get a response
When will there be an update that actually improves the ios so that you can actually hit a link in safari without zooming in and so that the email quits freezing and has to be swiped away and restarted to work or when that won't even work and the dev
-
Why doesn't the repair box in Aperture show up? and if it does, once you choose repair does it give you an indication it is working?
-
Hi Forum I have query how a REPORT of P & L COSTING BY PROFIT CENTER fetching values like Revenue Sales Deductions Net Sales Direct Material Cost Labor External Processing Material Overhead Labor Overhead Other Overhead Cost of Sale Interco COGS at s
-
Quit LabVIEW function generates crash report in executable
Hello, I am using the Quit labVIEW to close down an application when the VI is built into executable. If stop LabVIEW is used the application just stops and leaves the window open. When the Quit LabVIEW function is used in an executable the applicati
-
I have mac book OS X 10.4.11 model No.A1181 (processor 2 GHZ Intel Core 2 Duo and memory 2 GB 667 MHz DDR2 SDRAM). To which newer version can I update and how?