Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove same groups in RSA Identity Governance & Lifecycle
4 years ago
Originally Published: 2020-09-22
Article Number
000042553
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0, 7.2.1
 
Issue

A Provisioning - Termination Rule is generating a request to remove groups from an account even though there is a pending request to Remove the Same groups from the Account.


1. For example, for a Provisioning - Termination Rule that removes Accounts
User-added image

2. Following Change Request is created by rule for a terminated user to revoke group entitlements.
User-added image
User-added image
3. If the Change Request is not completed for some reason and if same user is rehired and then terminated again the rule creates same request as above.
User-added image

User-added image

Cause
In some instances, the product was not checking for all types of Pending Change Requests. 
Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: 
  • RSA Identity Governance & Lifecycle 7.2.0 P05
  • RSA Identity Governance & Lifecycle 7.2.1 P01