Performance degradation related to access requests in RSA Identity Governance & Lifecycle 7.x
Originally Published: 2019-08-30
Article Number
Applies To
RSA Version/Condition: 7.0.2 P10+, 7.1.0 P03+, 7.1.1 GA
Issue
- Poor performance when cancelling change requests from workpoint nodes.
- Poor load time when navigating back on a request form after requesting items that create pending accounts.
- Indirect relationship processing taking days to complete after making changes to a Multi-App Entitlement Data Collector.
An Automatic Workload Repository (AWR) report during these time periods may show top executing SQL queries similar to the following:
- BEGIN Access_Request_Pkg.Delete_ChangeRequest(:1 ); END;
- DELETE FROM T_AV_EXPLODEDUSERENTITLEMENTS WHERE CRI_ID = :B1
- DELETE FROM T_AV_EXPLODEDUSERENTITLEMENTS WHERE COLLECTED_STATE_CODE = :B1 AND CRI_ID IN (SELECT ID FROM T_AV_CHANGE_REQUEST_DETAILS WHERE CHANGE_REQUESTS_ID IN (SELECT ID FROM GTT_IDS))
- MERGE /*+ Leading (r) Index (xue IXN_XUE_CE_EXPLODED_PATH) */ INTO T_AV_EXPLODEDUSERENTITLEMENTS XUE USING (SELECT CE_EXPLODED_PATH FROM GTT_CE_AFFECTED_PARENTS) R ON ( XUE.CE_EXPLODED_PATH LIKE ' ' || R.CE_EXPLODED_PATH || '%' ) WHEN MATCHED THEN UPDATE SET XUE.DELETION_DATE = SYSDATE WHERE XUE.DELETION_DATE IS NULL AND XUE.ENTITLED_TYPE = :B1
Cause
Resolution
- Login to SQL as AVUSER and check for column CRI_ID:
select owner, table_name, column_name
from all_tab_columns
where table_name='T_AV_EXPLODEDUSERENTITLEMENTS' and column_name='CRI_ID'
If this query returns no results, then you do not have this issue.
- If this query returns a row, then check for an index on the column:
select *
from all_ind_columns
where index_name='IXN_XUE_CRI_ID';
If this column returns a row, then you do not have this issue.
- If this column returns no results and you are on 7.0.2 P10+, 7.1.0 P03+ or 7.1.1, then you have confirmed you have this issue.
This issue is resolved in the following RSA Identity Governance & Lifecycle patches:
- RSA Identity Governance & Lifecycle 7.0.2 P13
- RSA Identity Governance & Lifecycle 7.1.0 P07
- RSA Identity Governance & Lifecycle 7.1.1 P01
Workaround
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
Error: Error 'Socket Closed exception in RSA Federated Identity Manager (FIM) 2.5' 10Number of Views How to change the URL for downloading user certificates 8Number of Views RSA Governance & Lifecycle Recipes: CR Approvals & Activities Trending 25Number of Views ClassNotFoundException: com.aveksa.migration.db.password.ViewPasswordSettingMigrator while installing a patch in RSA Gover… 65Number of Views The Cancel Pending Requests button on the Pending Submissions page is disabled in RSA Identity Governance & Lifecycle 63Number of Views
Trending Articles
RSA Authentication Manager 8.9 Release Notes (January 2026) RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA-2026-07: RSA Authentication Manager Security Update for Third-Party Component Vulnerabilities Downloading RSA Authentication Manager license files or RSA Software token seed records RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide
Don't see what you're looking for?