Performance issues seen when processing Role modifications in RSA Identity Governance & Lifecycle

2 years ago

Originally Published: 2020-08-17

Article Number

000043820

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 6.9.1, 7.0.x, 7.1.x, 7.2.0

Issue

Performance issues are seen when committing Role modifications. (Roles > Roles > {Role name} > Apply Changes).

Cause

This is a known issue reported in engineering ticket ACM-98267.

To verify if you have this issue, run the following two queries as AVUSER:

select count(*) from t_av_roleversions rv
 where state in ('TN', 'T', 'R', 'CR', 'CC', 'UD') -- All other States are for Pending RoleVersions
   -- If there is no corresponding Role:
   and not exists (select 1 from t_av_roles r
                    where r.deletion_date is null and r.id = rv.role_id)
   -- If there is no CRI that uses it as VALUE or OPERATOR:
   and not exists (select 1 from t_av_change_request_details cri
                    where cri.value_type = 'PR'
                      and cri.value_id = rv.roleversion_id)
   and not exists (select 1 from t_av_change_request_details cri
                    where cri.operand_type = 'PR'
                      and cri.operand_id = rv.roleversion_id);

and

 
select count(*) from t_av_model_explodeduserents m
 where (role_type = 'P' and
        not exists (select 1 from t_av_roleversions rv where rv.roleversion_id = m.role_id))
    or (role_type = 'C' and
        not exists (select 1 from t_av_roles r where r.deletion_date is null and r.id = m.role_id));

If either query returns positive values, you have this issue.

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels:

RSA Identity Governance & Lifecycle 7.1.1 P07
RSA Identity Governance & Lifecycle 7.2.0 P02

Don't see what you're looking for?

Related Articles

Trending Articles