000039354 - Web Service command updateReviewItems does not allow only comments for review items to be changed in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Oct 1, 2020
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000039354
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.x,7.1.x

IssueThe RSA IdentityGovernance & Lifecycle Web Service command 'updateReviewItems' fails when attempting to update only the comments in a review item.

Review item comments may be updated in the Review through the console without error.

For example, the following Web Service command to add only a comment.

<ReviewItemChange comments="Adding Only Comment for this Entitlement">
<Entitlement resource="Group" action = "Add" business-source="Perforce"/>

Generates the following error response.

412 Precondition Failed
Status=Failure.  None of the 1 review components could be updated.
Status for Review Item (TestUser-Group)=Failure (State specified should be one of [Maintain, revoke, none]

CauseThe feature to add comments only is currently not available in web service commands (updateReviewItems) in RSA Identity Governance & Lifecycle. Engineering defect has been opened (ACM-107647) and this feature in a future version of the product.
ResolutionA new parameter 'UpdateCommentsOnly' (exact parameter name may change slightly) will be added to the webservice command 'updateReviewItems' as below.
When this option is set to true, only the comments will be updated for the review items, the state will not get affected (Just like adding comments from UI).
Also, comments will be updated only when the comments being added are not found already as part of the existing review comments.

<ReviewItemChange state="revoke" comments="value">
<Entitlement resource="value" action = "value" business-source="value"/>

NotesPlease also view related KB article:
Web Services updateReviewItems 'Entitlement XXX already in the same state' message does not display account name in RSA Identity Governance & Lifecycle