How to Request and Use a Firefighter ID

How to Request and Use a Firefighter ID

1. Important Note – Please Read

2. Emergency Access Management Workflow

3. Firefighter Owners and Controllers

4. How to request a Firefighter ID

5. How to use a Firefighter ID

6. Checking Firefighter Access Request status

PVH Confidential – For Authorized Use Only 2

Important Note – Please Read

Firefighter access is elevated access that should be used only during true emergency situations

It is mandatory that there is an open Service Now incident for the issue Firefighter user is trying to resolve

The Firefighter need to make sure that Service Now Incident number is updated when requesting emergency access. Also please
make sure that the incident number is updated when checking out firefighter

The Firefighter owner need to make sure that the GRC request is not approved without valid Service Now incident number in the
request

PVH Confidential – For Authorized Use Only 3

Emergency Access Management

The following diagram illustrates the process for obtaining a Firefighter id in production in case
of an emergency and also performing reviews of the logs

PVH Confidential – For Authorized Use Only 4

Firefighter Owners and Controllers

The following link provides all the list Firefighter owners and Controllers

http://teamsites.pvhcorp.com/sites/SAPGRC/Shared%20Documents/EndUserDocumentation/Firefighter%20Owners%20and%20C
ontrollers.xlsx?Web=1

PVH Confidential – For Authorized Use Only 5

 How to request a Firefighter ID

PVH Confidential – For Authorized Use Only 6

GRC Access Control portal login

 Launch the GRC Portal within the web browser using the hyperlink
https://grcna.pvhcorp.com/sap/bc/webdynpro/sap/grac_uibb_end_user_login#
 At the Login page, enter your User ID and click the Log on button to login to the GRC Portal.

PVH Confidential – For Authorized Use Only 7

Access request form

 After logging into GRC, launch the ‘Access Request’ form by clicking on the link provided under
‘Access Request Creation segment.

PVH Confidential – For Authorized Use Only 8

Access request form entry details (Firefighter ID)

 Requestor will have to complete access request form and submit for approval. All fields with blue star (*) sign are
mandatory and must be completed before submission.
 Enter the Description (reason for access request).
 Choose Request Type Superuser Access – For a user who is requesting for a firefighter ID with elevated access.
 Choose Request For as Other if requesting on behalf of someone else or else choose Self for own request.
 Select Business Process IT Security
 If requesting for other, enter the User id of the individual for whom access request is being submitted in the user field.
Search option is available to search existing ID.
 Custom Data: Its mandatory to fill Custom Data tab with the SNOW request number.
 Click Add and choose ‘Firefighter ID’ from the drop down.

PVH Confidential – For Authorized Use Only 9

Access request form entry details (Firefighter ID) contd..
 From the pop-up that appears on the screen, choose the Firefighter ID that is required. Filters available for search :
Firefighter ID name, System, description, action (Transaction code)
 From the available Firefighter IDs (FFID) that are displayed, select the FFID that is required and move to the ‘selected’
area by clicking on the arrow button.
 Once the FFID is selected, click on OK to carry the FFID selection to the access request form.

PVH Confidential – For Authorized Use Only 10

Access request form entry details (Firefighter ID) contd..

 Once the required FFID is carried over to the access request form, review to ensure that the details provided and the
FFID requested for, are appropriate.
 Ensure the provisioning action for the FFID is set to Assign.
 Validity date of the role is set to expire in 3 days by default. Requestor can update the validity date if needed. The
user access to FFID will only be valid as per the date input.
 Go to User Details tab and review end user information. The user information will get automatically populated based
on PVH network system. (Note* If end user information is missing for the required fields first name, last name, e-mail
and manager, please work with LDAP team to get the user setup in Active Directory).
 Once the review is complete, click on the ‘Submit’ button to submit the access for approval. The requestor will
receive a confirmation message.

PVH Confidential – For Authorized Use Only 11

Access request form submission
 Once the request form is ‘Submitted’ the request gets created and The requestor will receive a confirmation message.
 The request will be routed to the Firefighter ID owner and at the end of the approval process, the user will automatically be
assigned the FFID if approved and notified of the assignment.

PVH Confidential – For Authorized Use Only 12

 How to use a Firefighter ID

PVH Confidential – For Authorized Use Only 13

How to use a Firefighter ID?
 Once the access is approved and user is provisioned with the access in GRC, the user has to login to GRC to launch
the firefighter ID session.
 Search for ‘SAP logon’ on the search bar of your computer. Once the SAP logon opens up, enter ‘GP1’ in the filter
criteria after clicking on the connections folder and double click to login to DF1 system.

PVH Confidential – For Authorized Use Only 14

Using a Firefighter ID contd..
After logging into cutover system, enter /n/GRCPI/GRIA_EAM transaction in the transaction bar on the top left corner and
hit ‘Enter’ on your keyboard

PVH Confidential – For Authorized Use Only 15

Using a Firefighter ID contd..

 The execution of the transaction lands on the FFID Launchpad screen from where the user will be able to logon to
the system using the Firefighter ID that was approved.
 Click on the ‘Logon’ button

PVH Confidential – For Authorized Use Only 16

Using a Firefighter ID contd..

 In the pop-up screen, enter the reason code (from the drop down) and the text box with the reason for logging in
with the FFID. Also enter the t-codes that the user is planning to execute during the course of the login.
 Click the check mark button to login to the intended system.
 Its Mandatory to mention the Service Now Ticket number when checking out Firefighter

PVH Confidential – For Authorized Use Only 17

Using a Firefighter ID contd..

 The firefighter session opens up in the destination system once the check mark is clicked on.
 Click on ‘Start SAP Easy Access’ and carry on with the activities to be performed in the system.

PVH Confidential – For Authorized Use Only 18

Using a Firefighter ID contd..

 After performing the intended activities log off from the destination systems by clicking on ‘System’ in the header and
then choosing ‘log off’ option.
 Select ‘Yes’ when the system asks for confirmation.

PVH Confidential – For Authorized Use Only 19

Using a Firefighter ID contd..

 Once the user is back in the SAP system, Unlock the FFID session and log off from SAP System

PVH Confidential – For Authorized Use Only 20

 Checking Firefighter Access Request status

PVH Confidential – For Authorized Use Only 21

GRC Access portal login

 Launch the GRC Portal within the web browser using the hyperlink
https://grcna.pvhcorp.com/sap/bc/webdynpro/sap/grac_uibb_end_user_login#
 At the Login page, enter your User ID and click the Log on button to login to the GRC Portal.

PVH Confidential – For Authorized Use Only 22

Access request form

 After logging into GRC, launch the ‘Request Status’ form by clicking on the link provided under ‘My Profile segment.

PVH Confidential – For Authorized Use Only 23

Request status check contd..
 The Request status screen shows the status of all the requests that have been raised by the user

PVH Confidential – For Authorized Use Only 24