Importing roles from one environment to another is not importing the role entitlements custom attribute values in RSA Identity Governance & Lifecycle
2 years ago
Originally Published: 2020-09-22
Article Number
000042576
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: All
 
Issue
When we export a role along with its customized application entitlement attributes and then import it in other environments, it does not import the entitlement attributes.

For example,

The following role has custom attributes 'Duty' and 'Location' for its entitlements.
User-added image

Now if we export the role via Roles > Selecting the role > Actions > Export Roles, selecting the customized exported attributes for application entitlements, and then import it to another environment, we see the import of role, role members, role entitlements works fine but the custom entitlement attributes are not imported.


User-added image
 
Cause
This is a known issue reported in engineering ticket ACM-106458.

Option to export member and entitlement attributes while exporting roles was available, however, these attributes were for informational use and not for import. As a part of this fix, engineering has removed the ability by default and created a new setting to enable the functionality in the roles Configuration with a warning that they are information and not imported.
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: 
  • RSA Identity Governance & Lifecycle 7.1.1 P10
  • RSA Identity Governance & Lifecycle 7.2.0 P05
  • RSA Identity Governance & Lifecycle 7.2.1 P01