How to close Open Violations for inactive Segregation of Duties (SoD) and User Access Rules in RSA Identity Governance & Lifecycle
3 years ago
Originally Published: 2020-04-14
Article Number
000064004
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.x
 
Issue
When the status of a Segregation of Duties (SoD) Rule or a User Access Rule is set to Inactive, no new violations are detected but the status of existing violations remains as follows:
  • Open violations remain open after the rule has been inactivated.
  • Exceptional access remains in effect and on the exceptional access expiration date, the violations become open violations and emails are sent to the remediators to take action.
This is intentional product behavior. The existing violations need to be handled whether or not the rule is active.
 
Tasks


 

Resolution
There are two options for removing open violations that are part of Inactive rules:
  1. Delete the rule
  2. Change the rule:
  1. Edit the SoD or User Access rule.
  2. Set the status to Active
  3. Change the Selected users filter to something that is always false (for example, go to Advanced and enter 1=0 in the Where Clause).
  4. Save the rule changes.
  5. Run the rule once. This should close all violations.
  6. Edit the rule again
  7. Set the status to Inactive
  8. Remove the false filter.
  9. Save the rule changes.

Related Articles

Trending Articles

Don't see what you're looking for?