000034810 - If the RSA Identity Governance  and Lifecycle Rule Status is invalid, a Segregation of Duties (SOD) rule definition takes a long time to open

Document created by RSA Customer Support Employee on Mar 7, 2017Last modified by RSA Customer Support on Jan 18, 2018
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000034810
Applies ToRSA Product Set: RSA Identity Governance  and Lifecycle
RSA Version/Condition: 7.0.1
IssueIf the rule type status is listed as Invalid, a Segregation of Duties (SOD) Rule Definition takes a long time to open in RSA Identity Governance and Lifecycle.
User-added image
When an SOD Rule Definition page is displayed, it calculates common entitlements that exist between the two entitlement sets. This calculation takes a long time.
ResolutionOn version 7.0.1,
  1. Log in as the administrator and navigate to Rules > Configuration.
  2. Under Options, enable the setting to Allow execution of segregation of duties rules with common entitlements.  This will skip the check for common entitlements between two sets of entitlement coverage of a segregation of duties rule and thus creation of the rule. 
User-added image

User-added image

If you have a rule that is in an Invalid state, then edit the rule and set the status as Active or Inactive. 


Consequences of enabling the option

When you enable this option we no longer detect common entitlements between the two entitlement sets.

Purpose of this option

We provided this option to make it easier for customers to manage the Segregation of Duties (SoD) rules and entitlements that are part of entitlement coverage. Customers do not have to go through the tedious process of cleaning up the entitlements to use the rule.

When this option is enabled, we skip the display of common entitlements and hence this common entitlements calculation is no longer performed.
If you see this issue, you can use this option to resolve the issue. We have other customers who are using this option.