000033849 - Some entitlements appear duplicated in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Aug 31, 2016Last modified by RSA Customer Support on Apr 15, 2020
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000033849
Applies ToRSA Product Set: RSA Identity Governance & Lifecycle 
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.x
IssueThere appears to be more than one copy of an entitlement for a user. When the multiple entitlements are examined closely, the resource name has a different combination of upper and lower case characters in each entitlement instance.
CauseResource names in entitlements are case sensitive. Therefore the same combination of upper and lower case characters must be in the resource name every time the entitlement is collected.

For existing entitlements

Every time there is a collection that has a different upper/lower case spelling for the resource, it will be viewed by RSA Identity Governance & Lifecycle as a different resource and so a new entitlement will be created, effectively creating a duplicate.

If an entitlement is meant to be deleted  

If the resource name's case does not match what it was when the resource was added, it will not be deleted. For example, the following fully qualified resource names were found in a sequence of entitlement collections for a particular user, and entitlements were created or deleted as shown.

28-Apr-16 created RESOURCE_NAME 
29-Apr-16 created Resource_Name 
4-May-16  deleted RESOURCE_NAME 
4-May-16  deleted Resource_Name 
4-May-16  created Resource_Name 
11-May-16 created resource_name   
27-Jun-16 deleted resource_name

If you look carefully at the above sequence of upper/lower case entitlements, you can see that after 27-June-16 there should be one entitlement left for this resource for the user, which is the one that was created on 4-May-16 for Resource_Name.
ResolutionConfigure all entitlement data collection sources to ensure that every time an entitlement is collected, the upper/lower case spelling of the entire fully qualified resource name is always the same.