Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Generating Firefighter audit report

shivmano
Regular Contributor III
Regular Contributor III

Hi Team - 

I am looking for help with generating detailed audit report for firefighter access from SAP. The documentation regarding this does not really help with understanding the process involved. Has someone already generated Level 2 - Audit Logs Report? Please can you let me know the process 

https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Generating-Firefighter-Reports.htm 

Thank you 

3 REPLIES 3

Manu269
All-Star
All-Star

Check these posts :

FireFighter sessions report - Saviynt Forums - 40513

Regards
Manish Kumar
If the response answered your query, please Accept As Solution and Kudos
.

rushikeshvartak
All-Star
All-Star

SELECT DISTINCT RA.request_accesskey       AS REQACCKEY,
                RA.startdate               AS STDATE,
                AREQ.jbpmprocessinstanceid AS REQID,
                RA.enddate                 AS EDATE,
                RA.status                  AS STTS,
                EP.endpointname            AS EPNAME,
                EP.displayname             AS EPDISPNAME,
                U.username                 AS USERNAME,
                A.NAME                     AS NAME,
                arstasks.status            AS TASKSTATUS
FROM   request_access RA
       JOIN arstasks
         ON RA.request_accesskey = arstasks.requestaccesskey
       JOIN ars_requests AREQ
         ON RA.requestkey = AREQ.requestkey
       JOIN users U
         ON RA.userkey = U.userkey
       JOIN accounts A
         ON RA.accesskey = A.accountkey
       JOIN endpoints EP
         ON A.endpointkey = EP.endpointkey
WHERE  RA.accesstype = 8
       AND RA.requesttype = 24
       AND EP.status = 1
       AND RA.status NOT IN ( 4, 7, 6 )
ORDER  BY RA.request_accesskey DESC; 


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

shivmano
Regular Contributor III
Regular Contributor III

Thanks @rushikeshvartak @Manu269 . I am looking for a more detailed audit report that contains the details of transactions user performed in SAP with the FFID access as mentioned in this documentation - https://docs.saviyntcloud.com/bundle/SAP-v24x/page/Content/Generating-Firefighter-Reports.htm 

I have configured the Level 1 firefighter transaction report but it does not contain more information regarding all the actions user performed in SAP during the FFD session. Not sure if Level 2 audit report would help with this.