GRC10 : EAM - Is it normal that an FFID Owner can assign users to FFIDs he does not own ?

[Former Member]

Hello everybody,

In GRC 10 (SP9), i have an issue with EAM module.

It seems that FF ID owners have the rights to assign FF ID they don't own to users.

This is my test scenario :

o  Owner 1 is owner of Firefighter ID 1 and has the role SAP_GRAC_SUPER_USER_MGMT_OWNER

o  Owner 2 is owner of Firefighter ID 2 and has the role SAP_GRAC_SUPER_USER_MGMT_OWNER

When I login with Owner 1, I notice that I can assign Firefighter ID 2 to some users with owner value Owner 2.

Is this behaviour the good one ?

From my understanding, Owner 1 should have the right to assign users only to the FF ID 1.

I implemented SAP Note 1746119, but the behaviour has not changed.

Could you tell me if this is normal and, if not, how to fix it and avoid FF ID owners to assign users to FF ID they do not own

Thank you

[Former Member]

This is not at all a normal behavior, if note 1746119 doesn't fix your issue, I would recommend to log a CSS message and have them look into the isssue