Partial reject for approvals still provision indirect entitlements for accounts in RSA Governance & Lifecycle
Article Number
Applies To
RSA Version/Condition:
- SecurID Governance & Lifecycle 7.5.2
Issue
If the rejected role contains one or more entitlements, these entitlements get provisioned to the user anyway under the Account Changes. The role itself does not get granted to the user, only the underlying entitlement.
Cause
This is a known issue in the following versions:
- RSA Governance & Lifecycle 7.5.2 P03
Resolution
- RSA Governance & Lifecycle 7.5.2 P06
- RSA Governance & Lifecycle 7.6
Related Articles
How to provision changes to the Netsuite sandbox instance using Access Fulfillment Express (AFX) on RSA Identity Governanc… 4Number of Views Manually unmapped accounts are not rejected in the collection and remain as an Orphan accounts in RSA Governance & Lifecycle 73Number of Views When 'Generate Indirect Entitlements' is disabled for Roles, Technical and Global Role Entitlements are still granted to R… 58Number of Views Performance issue with Change Request generation from a Review to Revoke a large volume of access in RSA Identity Governan… 6Number of Views Approval items that are rejected by email and have multiple concurrent approvers may potentially be provisioned in RSA Ide… 68Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory RSA Authentication Manager 8.9 Release Notes (January 2026) Artifacts to gather in RSA Identity Governance & Lifecycle RSA Governance & Lifecycle 8.0.0 Administrators Guide RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?