Role based Firefighter approach in AC 10

[Former Member]

I am in the process of implementing "role based" FF (ID based approach not implemented as users are not comfortable to login to GRC system to execute the tcodes). I have a query about it.

If we maintain the role based FF logins, and we run risk report, still all the conflicts are found associated with that FF ids as they have the conflicting role assigned to them in SU01. So is it ok, to live with these conflict found related to FF ids. what will be the case during audit, will they accept these risks occuring for the FF can be ignored.

[Former Member · Accepted solution]

Hello,

I think the best approach is to mitigate the risk as Alexander describes here:

Cheers,

Diego.