How to clear open rule violations that are not cleared even though the rule has been deleted in RSA Governance & Lifecycle
Article Number
Applies To
- SecurID Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0
Issue
- Open rule violations are normally cleared automatically when a rule is deleted but in some instances orphan Rule violations associated with the deleted Rule may remain.
Resolution
Please contact RSA Customer Support and quote this article number and attach the below query output in the case.
1. Run the below query & check if the deleted rule is available in the record set.
SELECT * FROM T_AV_RULES WHERE IS_DELETED='TRUE';
2. Run below query to check if open rule violation is available in the result.
SELECT * FROM T_AV_VIOLATIONS violations
left outer join T_AV_RULES rule on violations.rule_id=rule.id
WHERE (violations.STATE='OP' OR violations.STATE='OE')
and rule.IS_DELETED='TRUE';
or,
select duwv.id,duwv.account_name,duwv.user_ent_id,
duwv.exemption_id,duwv.name,duwv.resource_name,duwv.action_name,duwv.app_name,duwv.app_description,duwv.app_classification,duwv.app_sensitivity,
duwv.app_business_use,duwv.app_ownership,duwv.app_locality,rm.*
from t_av_direct_uents_with_viols duwv
join t_av_duwv_rule_map rm
on duwv.entitled_id =rm.entitled_id
and duwv.entitlement_type =rm.entitlement_type
and duwv.entitlement_id =rm.entitlement_id
and nvl(duwv.account_id,-1)=nvl(rm.account_id,-1)
join t_av_rules rule on rm.rule_id=rule.id and rule.is_deleted=upper('TRUE');
3. Get the distinct rule_id from any of the above queries where record has been found. Make sure this rule_id is the same as which was verified in step no 1.
Related Articles
Workflow import sometimes does not work even though the result is a success 8Number of Views Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove… 34Number of Views An empty change request is created when attempting to commit a role using the "Actions" button, even though no changes or … 19Number of Views When cancelling a change request, there is no option to revert completed changes even though completed items exist in RSA … 67Number of Views Slow INSERT statement executing from the SoD_Rule_Pkg in RSA Identity Governance & Lifecycle 88Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x
Don't see what you're looking for?