GRC 10.0 EAM - USER EXIT ISSUE

[Former Member]

Hi,

Please help me...

We have implemented GRC 10.0 an year back..

We have an issue with User Exit..

We have set the FF as FF Id based and have set the parameter in 4001 as 1.

Earlier User Exit was working fine that when we tried to login into plug in system direclty it had shown a pop up as

User cant login directly..

But now when we have created new Id's and tried to login into plug in system we are able to login without any pop up..

We have kept the parameter 4015 as No for Enable Decentralized Firefighting ..

Please also give some light how system is stopping the Firefighter id to login into plugin system (is it any parameter or role or any thing else)..

Please suggest..

Thanks & Regards,

Sowjanya.

[former_member193066]

Hello,

please follow the note.

1545511 - Firefighter User Exit

this will solve your issue.

Regarsd,

Prasant

[Former Member]

Hi Prasant,

Thanks for your quick response..

I have verified the Note and have cross checked..

I have need some clarification to estimate my issue..

Earlier we were using GRC 5.3 and we have migrated to GRC 10.0..

Now the issue is that old id's which were from 5.3 - while trying to login into SAP GUI directly throwing a pop up that User cant login directly

But the id's created after migration were able to login into SAP GUI..

Q1.How system is recognising the id as FF id ?

Q2.How Old Id is being stopped to login into GUI ?

Q3.How New id's created are able to login ?

Q4.How system is differentiating Id of 5.3 and 10.0..

Quick response is appreciated..

Thanks & Regards.

Sowjanya.

[former_member193066]

Hello,

i think earlier user exit was /VIRSA/ZVIRSA_USEREXIT and new one is /GRCPI/GRIA_USEREXIT

hope it clarifies.

Regards,

Prasant

[Former Member]

hi,

- check if user exit is applied on all plug-in systems.

- FF ids are identified by the assignment of role defined in parameter 4010. So, every FF id should be assigned with this role. only then it appears for assignment to FF user, in NWBC

    But if you have Emergency Access Management under Access Control(in SPRO), where you have diff. roles defined for diff. systems, then respective role, need to be maintained in Maintain Plug-in Configuration settings, in each plug-in. parameter is 1090

-Could you also check this note 1735971 - User exit to prevent direct firefighter login

Regards

plaban