000039333 - Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove same groups in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Oct 6, 2020
Version 1Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000039333
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0, 7.2.1
 
Issue

A Provisioning - Termination Rule is generating a request to remove groups from an account even though there is a pending request to Remove the Same groups from the Account.


1. For example, for a Provisioning - Termination Rule that removes Accounts
User-added image

2. Following Change Request is created by rule for a terminated user to revoke group entitlements.
User-added image
User-added image
3. If the Change Request is not completed for some reason and if same user is rehired and then terminated again the rule creates same request as above.
User-added image



User-added image

CauseIn some instances, the product was not checking for all types of Pending Change Requests. 
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: 
  • RSA Identity Governance & Lifecycle 7.2.0 P05
  • RSA Identity Governance & Lifecycle 7.2.1 P01

Attachments

    Outcomes