How to clear open rule violations that are not cleared even though the rule has been deleted in RSA Governance & Lifecycle
Last Modified: 2024-01-09
Article Number
Applies To
- SecurID Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0
Issue
- Open rule violations are normally cleared automatically when a rule is deleted but in some instances orphan Rule violations associated with the deleted Rule may remain.
Resolution
Please contact RSA Customer Support and quote this article number and attach the below query output in the case.
1. Run the below query & check if the deleted rule is available in the record set.
SELECT * FROM T_AV_RULES WHERE IS_DELETED='TRUE';
2. Run below query to check if open rule violation is available in the result.
SELECT * FROM T_AV_VIOLATIONS violations
left outer join T_AV_RULES rule on violations.rule_id=rule.id
WHERE (violations.STATE='OP' OR violations.STATE='OE')
and rule.IS_DELETED='TRUE';
or,
select duwv.id,duwv.account_name,duwv.user_ent_id,
duwv.exemption_id,duwv.name,duwv.resource_name,duwv.action_name,duwv.app_name,duwv.app_description,duwv.app_classification,duwv.app_sensitivity,
duwv.app_business_use,duwv.app_ownership,duwv.app_locality,rm.*
from t_av_direct_uents_with_viols duwv
join t_av_duwv_rule_map rm
on duwv.entitled_id =rm.entitled_id
and duwv.entitlement_type =rm.entitlement_type
and duwv.entitlement_id =rm.entitlement_id
and nvl(duwv.account_id,-1)=nvl(rm.account_id,-1)
join t_av_rules rule on rm.rule_id=rule.id and rule.is_deleted=upper('TRUE');
3. Get the distinct rule_id from any of the above queries where record has been found. Make sure this rule_id is the same as which was verified in step no 1.
Related Articles
Workflow import sometimes does not work even though the result is a success 10Number of Views An empty change request is created when attempting to commit a role using the "Actions" button, even though no changes or … 23Number of Views When cancelling a change request, there is no option to revert completed changes even though completed items exist in RSA … 71Number of Views RSA Identity Governance and Lifecycle - Open LDAP Collector Datasheet 21Number of Views Contract expired issue even though the liscense is valid in RSA Identity Governance and Lifecycle 59Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Manual synchronization introduced in RSA Authentication Manager 8.2 Service Pack 1 patch 6 Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to verify NTP server synchronization is not working in RSA Authentication Manager 8.x RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?