Is there any way to approve FF Logs in Bulk in SAP GRC?

[Former Member]

Hi,

We have Pre-Prod synced with Production and hence all the FF logs are also duplicated in Pre-Prod. We have reviewed the logs in Production system the usual way but we would like to clear off the same duplicate logs from Pre-Production also.

Is there any way where I can approve all the logs at one go?

[alessandr0]

Hello,

there is no such functionality available. You can only cancel the requests either with stale request program or manual instance cancel.

Regards,

Alessandro

[Former Member]

That is too bad, During cutover periods it would be a nice feature to approve multiple FF logs.

As a result organizations tend to assign (too) wide authorizations which are not traced and logged to users during hypercare

[alessandr0]

Yes and no - from compliance point of view it's better that such a feature is not available. Imagine if such a tool would be used in a productive system.. that's definitely a no go.

Instead of approve the requests you can cancel them in bulk in your pre-prod system and reference to your prod system for further reviews (audits, etc.).

Regards,

Alessandro

[Former Member]

Good suggestion. You can also choose not to assign a controller to a firefighter that is used during the hypercare period (new parameter is available) in order to avoid logs being generated for review (FF log review workflow).

However from the perspective to close the audit loop in GRC I would definitely like a multiple FF usage log review for the consildated log after the hypercare period is finished.