Data Access Collector (DAC) rejects Account Relationships when collecting Account Permissions in RSA Identity Governance & Lifecycle
Originally Published: 2016-06-10
Article Number
Applies To
RSA Version/Condition: All
Issue
EC[170] Context[RunID=###,EDC(Name=<name of DAC Collector>,ID=XXX,APP=XXX)]Message[Entitlement
Data Validation: User Entitlement Data is invalid
(caused by prior validation error.Invalid user/group/account or invalid/duplicate resource/application role]
The DAC is defined to collect Account Permissions (Collectors > Data Access Collectors > Create Data Access Collector > Data Source Type: Database) as follows:
Cause
The account resolution for the DAC has not been defined:
Resolution
Define the Target Account Collector (ADC) used to collect the accounts that have access to the entitlements collected by the DAC and define an Account Attribute to be used to correlate the accounts collected by the ADC with the account entitlements collected by the DAC. For example,
