|Applies To||RSA Product Set: Identity Management and Governance|
RSA Product/Service Type: Enterprise Software
RSA Version/Condition: 6.9.1, 7.0.x
|Issue||When a review is run either directly or through a rule, the review runs but does not generate review results on users that do not have a last name. This happens even if the user has entitlements that should be picked up by the review execution.|
When run from the review definition directly (instead of a rule), the user filter popup does not retain the users without a last name when going back into view or edit it.
Users with no last name picked up in a user attribute change rule will execute the review specified in the rule but no results will be generated for these users.
Below is an example of a review definition that had a user with a first name of TestWoLName and no last name. The review was run but no results generated for him. Going back to edit the review definition and looking in the User Selection tab we see his name still under include users with the following attributes but when we select that link, the popup does not retain that user. Users with last names are retained when coming back to edit the filter.
|Cause||This is normally just an issue in test environments where test data is created that does not contain a last name.|
|Resolution||A permanent resolution will be available in a future release.|
|Workaround||For the users with the issue, just add a last name to the identity collector source and rerun the collection and unification, then rerun the review. You may need to reset the user in user selection criteria filter, if they were previously explicitly selected in the review definition or in a rule that runs the review.|
|Notes||If you legitimately have production user(s) without a last name, please contact customer support.|