Assigning Controllers to Firefighter IDs 
Administrators and Owners can assign a controller to a firefighter ID. A controller is a person who monitors firefighter ID usage. You can use the functions on the Controller screen to assign, add, or remove a controller for a firefighter ID.
Note
Only one administrator or owner can edit the controller assignments for a firefighter ID at a time.
Choose .
The Controller screen appears and displays existing controllers, firefighter IDs, and associated systems.
Choose Assign.
The Controller Assignment: New screen appears.
In the Controller ID field, enter the user ID for the person you want to assign as controller.
Choose OK.
Choose Add, select the firefighter ID from the list, and then choose OK.
The System field value is automatically generated after you choose the firefighter ID.
Note
Verify that users have a firefighter role assigned for access to the superuser management functions.
You can use one of the following default roles:
SAP_GRAC_SUPER_USER_MGMT_ADMIN
SAP_GRAC_SUPER_USER_MGMT_OWNER
SAP_GRAC_SUPER_USER_MGMT_CNTLR
SAP_GRAC_SUPER_USER_MGMT_USER
Recommendation
We recommend you assign the Controller the SAP_GRAC_SUPER_USER_MGMT_CNTLR role.
In the Notification By column, select from the following options:
To send a log report to an external e-mail inbox, such as Microsoft Outlook, or to an SAP inbox each time the GRAC_SPM_LOG_SYNC_UPDATE background job runs.
You can select from the following options for notification by e-mail:
To send logon notifications, set the Send Firefighter Id Login Notification parameter to YES. Logon notification is sent by e-mail only, independent of the Notification By option.
To send notification immediately once a firefighter ID logs on to the system, set the Send Firefighter Login Notification Immediately parameter to YES.
To send log report notifications, set the Log Report Execution Notification parameter to YES. Log report notification depends on the Notification By field.
To receive log report notifications as the logs are updated, set the Send Log Report Execution Notification Immediately parameter to YES.
Workflow
To send log report notifications in the form of an SAP Workflow item.
Note
Users must have Portal authorization to access to the workflow items.
Log Display
To view firefighter ID logon events from the Superuser Management Administrator screen. The controller manually generates the log report and views the report in the Superuser Management Administrator screen. The system does not send automated e-mail notifications.
Choose .
On the Controller screen, select a row and choose Open.
The Controller Assignment screen appears and displays the particular assignment.
To add a firefighter assignment, choose Add.
A new row appears in the table.
Enter the relevant information in the required fields and select a notification method from the dropdown menu in the Notification By column.
To remove a firefighter assignment, choose Remove.
The selected assignment is deleted.
Choose .