Performance improvements related to T_AV_MODEL_EXPLODEDUSERENTS table in RSA Identity Governance & Lifecycle
Originally Published: 2020-12-09
Last Modified: 2022-06-20
Article Number
Applies To
RSA Version/Condition: 7.1.1, 7.2.0
Issue
Customers may notice the following issues.
- Collectors slow in step "Indirect Relationship processing"
There may be longer run times for the following (or similar) queries:3bm571yrusp03 BEGIN Role_Management_Pkg.Explode_LocalRoles(:1 ); END;
- Longer Data Purging times in "Step 12/12: Purging Abandoned Role Data" where the following symptoms may be observed.
The "Database Logs for Run" for the Data Purging show the following linesStarting purging Abandoned Role Data Purged 10000 Abandoned ModelXUE records. Purged 10000 Abandoned ModelXUE records....
Long run times for the following query.03htv7u0zssbj DELETE FROM T_AV_MODEL_EXPLODEDUSERENTS M WHERE ((ROLE_TYPE = 'P' AND NOT EXISTS (SELECT 1 FROM T_AV_ROLEVERSIONS RV WHERE RV.ROLEVERSION_ID = M.ROLE_ID)) OR (ROLE_TYPE = 'C' AND NOT EXISTS (SELECT 1 FROM T_AV_ROLES R WHERE R.DELETION_DATE IS NULL AND R.ID = M.ROLE_ID))) AND ROWNUM <= :B1
Cause
- RSA Identity Governance & Lifecycle 7.1.1
- RSA Identity Governance & Lifecycle 7.2.0 GA
Resolution
These issues are resolved in the following versions.
- RSA Identity Governance & Lifecycle 7.2.0 P03
- RSA Identity Governance & Lifecycle 7.2.1
These versions include code changes, new indexes, and changes to hints that increase performance with queries against the T_AV_MODEL_EXPLODEDUSERENTS (model XUE) table.
This reduces execution time in the many aspects of the product that is related to Role explosion and Role management including but not limited to the following.
- Improvements in the Data Purging in step "Purging Abandoned Role Data"
- Improvements in Role explosion in Role_Management_Pkg.Explode_LocalRole
Workaround
Temporary and marginal improvement may sometimes be obtained by rebuilding the existing indexes against the T_AV_MODEL_EXPLODEDUSERENTS table. Contact RSA Customer Support and reference this KB article for information about how to rebuild the existing indexes.
Notes
Related Articles
RSA Authentication Manager 8.x services won't start when network interface adapter eth0 is not found 262Number of Views PuTTY fatal error (Couldn't agree a key exchange algorithm) after upgrading to RSA Authentiation Manager 8.4 patch 2 or pa… 116Number of Views The approval workflow isn't working as expected when grouping by business source in the request form with the provisioning… 30Number of Views Technical/Business Owner of Application/Directory Couldn't edit Groups in SecurID Governance & Lifecycle 30Number of Views How to obtain the version information for RSA Authentication Agent for PAM installed on Linux 411Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Manual synchronization introduced in RSA Authentication Manager 8.2 Service Pack 1 patch 6 Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to verify NTP server synchronization is not working in RSA Authentication Manager 8.x RSA Governance & Lifecycle 8.0.0 Installation Guide
Don't see what you're looking for?