000039217 - Number of missing Members and Entitlements in Role Definitions is doubled for Local Entitlements on 7.2.0 P01 of RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Aug 10, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000039217
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0 P01
IssueIn RSA Identity Governance & Lifecycle 7.2.0 P01, when adding a Local Entitlement to a Role and committing the Role changes (Roles > Roles > {Role name} > General tab > Apply Changes) the number of missing members and entitlements show as doubled.

This is best illustrated with an example.
  1. Make sure the workflow used when creating roles generates indirect entitlements. (Requests > Workflows > Request tab > {Name of workflow used by Requests created through roles} > Check Generate Indirect Entitlements under REQUEST SETTINGS.
  2. Create a Role with one Member and one Local Entitlement. (Roles > Roles > Create/Discover > Create Role)

Until the Role is committed, the following is true (and expected):

  1. Under the Role Members tab, the column entitled Missing Direct Entitlements (Active) shows as one.
  2. Under the Role Entitlements tab, the column entitled Direct Active Members Missing is one.
  3. Under the Role Analytics tab, the column entitled Number of Missing Required Entitlements is one.

User-added image


User-added image

User-added image


  1. Apply Changes to commit the Role changes.
  2. The expected behavior is that the three columns now show as zero.
  3. The issue being reported here is that the three columns now show as two. The number has been doubled.

CauseThis is a known issue reported in engineering ticket ACM-103524.
ResolutionThis issue is resolved in RSA Identity Governance & Lifecycle 7.2.0 P02.