"CheckAccess" webservice API call not working correctly for accounts
Originally Published: 2021-03-26
Article Number
Applies To
| RSA Product Set: RSA Identity Governance & Lifecycle RSA Version/Condition: 7.2.1 P02 |
Issue
There is a user HM99541 with multiple AD accounts - HM99541 and TS99541.
The user has access to AD group "CMHUB -R" through the HM# account.
However, the "CheckAccess" API call returns "result=true" when checking for the group access to the TS# account but the "TS#" account does not have that group access
Also when an account is locally mapped to one user only
the API for checking the group should return false it returns an error instead
<html> <head> <title>Error</title> </head> <body>could not resolve multiple users account for checking group memebership Query String=cmd=checkAccess&accountBS=Active%20Directory&accountName=Abse1943&entitlementBS=Active%20Directory&token=ws31586405e9d7afd6f6:-3ce0f892:17791a7cc3d:-36f00.4189250509477934&group=grp1 </body> </html>
Cause
- RSA Identity Governance & Lifecycle 7.2.1 P02
Resolution
This issue is resolved in the following versions.
|
Related Articles
CreateChangeRequest webservice call with <AccountChange> does not fail on SoD Violations for RSA Via Lifecycle & Governance 71Number of Views How to call a stored procedure from the Generic Database AFX Connector in RSA Identity Governance & Lifecycle 46Number of Views Creating change request using parameter <scope> via webservice call in RSA Identity Governance & Lifecycle 31Number of Views createChangeRequest Delete Account web serivce call not working in RSA Identity Management and Governance 6.9.1 43Number of Views IDC unification runs into an error called by by webservice call in RSA Identity Governance & Lifecycle 26Number of Views
Don't see what you're looking for?