Dear Colleen,
thank you for your reply.
yes all roles are generated properly.
I checked the main role SAP_GRAC_SUPER_USER_MGMT_USER
it doesn't contain auth GRAC_*
I assume this may be the problem. Can you suggest any other role for this.
Also I might be too naive to ask this, but how to use STAUTHTRACE, as the FF user (end user) is not performing any activity, I am trying to search user in nwbc for FFID mapping.