Performance degradation related to access requests in RSA Identity Governance & Lifecycle 7.x
Originally Published: 2019-08-30
Article Number
Applies To
RSA Version/Condition: 7.0.2 P10+, 7.1.0 P03+, 7.1.1 GA
Issue
- Poor performance when cancelling change requests from workpoint nodes.
- Poor load time when navigating back on a request form after requesting items that create pending accounts.
- Indirect relationship processing taking days to complete after making changes to a Multi-App Entitlement Data Collector.
An Automatic Workload Repository (AWR) report during these time periods may show top executing SQL queries similar to the following:
- BEGIN Access_Request_Pkg.Delete_ChangeRequest(:1 ); END;
- DELETE FROM T_AV_EXPLODEDUSERENTITLEMENTS WHERE CRI_ID = :B1
- DELETE FROM T_AV_EXPLODEDUSERENTITLEMENTS WHERE COLLECTED_STATE_CODE = :B1 AND CRI_ID IN (SELECT ID FROM T_AV_CHANGE_REQUEST_DETAILS WHERE CHANGE_REQUESTS_ID IN (SELECT ID FROM GTT_IDS))
- MERGE /*+ Leading (r) Index (xue IXN_XUE_CE_EXPLODED_PATH) */ INTO T_AV_EXPLODEDUSERENTITLEMENTS XUE USING (SELECT CE_EXPLODED_PATH FROM GTT_CE_AFFECTED_PARENTS) R ON ( XUE.CE_EXPLODED_PATH LIKE ' ' || R.CE_EXPLODED_PATH || '%' ) WHEN MATCHED THEN UPDATE SET XUE.DELETION_DATE = SYSDATE WHERE XUE.DELETION_DATE IS NULL AND XUE.ENTITLED_TYPE = :B1
Cause
Resolution
- Login to SQL as AVUSER and check for column CRI_ID:
select owner, table_name, column_name
from all_tab_columns
where table_name='T_AV_EXPLODEDUSERENTITLEMENTS' and column_name='CRI_ID'
If this query returns no results, then you do not have this issue.
- If this query returns a row, then check for an index on the column:
select *
from all_ind_columns
where index_name='IXN_XUE_CRI_ID';
If this column returns a row, then you do not have this issue.
- If this column returns no results and you are on 7.0.2 P10+, 7.1.0 P03+ or 7.1.1, then you have confirmed you have this issue.
This issue is resolved in the following RSA Identity Governance & Lifecycle patches:
- RSA Identity Governance & Lifecycle 7.0.2 P13
- RSA Identity Governance & Lifecycle 7.1.0 P07
- RSA Identity Governance & Lifecycle 7.1.1 P01
Workaround
Attachments
If the attachment does not open when clicked, please refresh the page and try again. You must be logged into view the file(s).
Related Articles
RSA Governance & Lifecycle Recipes: Workflow Form Types 30Number of Views RSA Governance & Lifecycle Recipes: CR Approvals & Activities Trending 24Number of Views RSA Governance & Lifecycle Recipes: JML recommended practice methodology 58Number of Views ClassNotFoundException: com.aveksa.migration.db.password.ViewPasswordSettingMigrator while installing a patch in RSA Gover… 61Number of Views RSA Authenticator 4.6 for iOS and Android Quick Start Guide (Arabic) 3Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.9 Release Notes (January 2026) How to install the jTDS JDBC driver on WildFly for use with Data Collections in RSA Identity Governance & Lifecycle RSA Authentication Manager 8.8 Setup and Configuration Guide Artifacts to gather in RSA Identity Governance & Lifecycle
Don't see what you're looking for?