000036679 - Entitlement(app-role/group/ent) revocation request with multiple accounts in an application fails with error:"Expected 1 account associated with the ChangeRequestItem. There were 2" in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Dec 27, 2018
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000036679
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0
 
IssueThe following error is encountered for an automatically triggered revocation request when submitting a change request to add an entitlement which includes a revocation date, to a user that has two associated accounts, one of which is disabled.
 
Exception while processing the automated request for item 77339, the exception is: Expected 1 account associated with the ChangeRequestItem. There were 2.



User-added image


AFX will process the add request successfully.
User-added image


But for the revocation task, AFX fails to remove the account with the following error.
 
User-added image

User-added image
CauseThis is a known issue with the product and a fix is provided in 7.0.2 P09 and 7.1.0 P03.
ResolutionApplying patch 7.0.2 P09 or higher, or 7.1.0 P03 and higher will prevent future occurrences of this condition. 

Attachments

    Outcomes