Answer / nipun mohendroo

This question needs some more details while answering.
For creating/assigning a Firefighter ID to a user, we first
create a FF ID using transaction SU01. The user Type needs
to be a "Service" user, and NOT a Dialog user (which we
otherwise create).
Then we go to transaction /n/VIRSA/VFAT to assign the
previously created FF ID to the (Dialog) user who'll be
using this ID. [PLEASE NOTE: The user who'll be using this
FF ID needs to have role VIRSA/Z_VFAT_Firefighter assigned
to his/her role menu to be able to use the FF ID.]
Now in the Firefighter Cockpit (/n/virsa/vfat), we first
assign the FF ID created to the user by clicking the
Tab "Firefighters" (Next to the "Owners" tab). In the next
screen we create New Entry of the FF ID and the User
mapping, and then save it with the validity etc.
Then we goto the Security tab and maintain the password for
the FF ID. Passwords are stored in a encrypted format here.
We need to create a new entry for the FF ID and the
password which we had put while creating the Service FF
user through SU01.
As soon as we enter the password in the Table, it gets
converted to special characters for security reasons.
Now the user may be asked to check whether he/she is able
to see the newly assigned FF ID in the /n/virsa/vfat
transaction.
I might have missed some trivial points keeping in mind
that readers have understanding of basic concepts of
security, let me know if you face any issues :-)

Answer / jeevansukka

sorry Praveen, a small correction here, the tcode is
/n/virsa/vFat.

Answer / praveen

first create service user and mapp this user
in /n/virsa/vrat

a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.

4 Answers   iGate,

---

Explain internet-level security?

0 Answers  

---

How to codify for an Item in SAP? How many digits are required for an item?

0 Answers  

---

what do you mean by profile and obeject

3 Answers  

---

Security admin kept trace on a user.But while analyzing it is showing that "zero records" found.Then what to do?

4 Answers   Cognizant,

---

How do I change the name of master / parent role keeping the name of derived/child role same? I would like to keep the name of derived /child role same and also the profile associated with the child roles.

0 Answers  

---

I want to lock all the users except sap* and DDIC of a particular client ?

4 Answers   IBM,

---

How can we find out the roles that got directly generated into Production & not imported from Quality System? Please note, you don't have any Quality user id.

3 Answers  

---

What is the difference between VIRSA Tool and GRC, and does VIRSA tool support to ECC6.0?

5 Answers   Cap Gemini,

---

1.why we use derived role in sap security?2.what is the technical difference between master and derived role?

1 Answers   KPMG,

---

how u add a roleowner in a role

2 Answers  

---

What is the use of RSECADMIN ?

1 Answers  

---