Account and Group Resolutions fail when running a Data Entitlement Aggregate (DEA) Data Access Collector in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2020-06-10
Article Number
000041874
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: All
Issue
Running the Data Entitlement Aggregator (DEA) Data Access Collector (Collectors > Data Access Collectors > Create Data Access Collector > Data Source Type: Data Entitlement Aggregator) may result in rejected entitlements as seen in the Admin > Monitoring Run ID > Collected Data: Raw Data for {Collector name} in Run {Run ID} > Entitlement Relationships tab.

NOTE: Data Access Collectors are also known as Data Access Governance (DAG) collectors.
Cause
The incorrect Account and Group attributes are being collected in the associated Active Directory Account Collector.
Resolution
Ensure that the associated Active Directory target Account Data Collector is collecting the sAMAccountName for Account ID and Group ID/Name before running the DEA Collector.