000039244 - Workflow Variables under the Resource section of Workflow Nodes cannot resolve Roles and Groups after being imported in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Aug 18, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000039244
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.x
IssueWhen importing Workflows from one RSA Identity Governance & Lifecycle system to another (Admin > Import/Export > Workflow tab), workflow variables that reference Roles and Groups in the RESOURCES section of the workflow node, are unable to resolve to a Role or Group.

For example, when navigating to Requests > Workflows > {Workflow tab} > {Workflow name} > {Node name}, there is a RESOURCES section under Activity Node Properties on the right-hand side. In this section under Include, Workflow Variables may be included as a Resource. If the Workflow Variable references a Role or Group name from the other system, it may not resolve correctly on the system to which it was just imported.
CauseThis is a known issue reported in engineering ticket ACM-100385.

This problem is caused by the underlying internal reference ID. The internal reference ID for a Role or Group on one system may not be same as on another system. User do not have this issue because they can be based on other options besides the internal ID such as the User ID or email address as noted in the example below. 
User-added image

ResolutionThis issue is resolved in RSA Identity Governance & Lifecycle 7.2.0.

The product has been enhanced to allow the user to define the values used for Roles and Groups in workflows. Note below the additional Resource options available in 7.2.0
User-added image

WorkaroundWorkflow variables that do not resolve after an import, can be manually modified to point to the Role or Group on the current system.