000035353 - RSA Identity Governance and Lifecycle Provisioning -Termination rule is not generating change requests to revoke entitlements

Document created by RSA Customer Support Employee on Aug 1, 2017
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000035353
Applies ToRSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.1
 
IssueThe Provisioning - Termination rule is not generating change requests to revoke entitlements when both Is Deleted and Is Terminated are set to true in RSA Identity Governance and Lifecycle.
For example, 
  1. Create a Provisioning Termination rule to revoke entitlements.
User-added image

  1. Pick any user who has entitlements under the User > Access tab.
User-added image

  1. Delete the user from the system.
User-added image

  1. Process the Provisioning Termination rule and we can see there are no change requests created for that user.
User-added image

  1. Check the access of the user under the User - Access tab and we can see the entitlements are removed from the user.
User-added image
 
CauseThis is a known issue reported in ACM-70087 where Identity Data Collectors mark all entitlements belonging to the deleted user as deleted.
ResolutionUpgrading to V7.0.1 P04 or V7.0.2 P02 will fix this issue.
 

Attachments

    Outcomes