RSA Product Set: RSA Governance & Lifecycle
RSA Version/Condition: 8.0 P06
Upon creating an entitlement fulfillment request with the revocation dates included, two distinct requests are created: one for the initial fulfillment of the entitlement and a separate one for its removal. If the fulfillment request is rejected, the associated revocation request remains active and unlinked.
When a Change Request is created with a revocation date, 2 requests get automatically created: one for Access, another for the revocation. The revocation request is an independent request which follows the Workflow associated with it.
Actions performed on Access granting Change Request will not impact the revocation Change Request as they are independent and will function as per their separate Workflows are configured. Change Requests' Workflow paths can neither be modified nor stopped by other Change Requests as both are independently created.
This is functioning as designed.
One of the approach is not to create the revocation Change Request immediately when Add access request is generated, but instead to create the revocation Change Request only when the revocation date arrives. By doing so, if the Add Access Change Request is Rejected before the revocation date the revocation request itself will not be created.
Related Articles
RSA Identity Governance & Lifecycle does not save values correctly in the WorkFlow Activity Node Properties Settings if th… 28Number of Views Form used in manual fulfillment node does not reflect the changes done in the CR created in RSA Identity Governance & Life… 18Number of Views Auto generated revocation requests Stuck in Fulfillment Phase with AFX errors in connector logs If any Change Item rejecte… 161Number of Views Account Template for Role Causes Invalid Account Name in CR for RSA Identity Governance & Lifecycle 34Number of Views Why automatically generated revocation requests do not add back revoked requests on a revocation date in RSA Identity Gove… 33Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.1 Quick Setup Fails with "Failed to Attach Replica Instance" User Application Portal The RSA Identity Governance & Lifecycle AD Collector and AD ADC authentication source fail to establish a TLS 1.2 SSL conn… How to manually sync a replica in an RSA Authentication Manager 8.x deployment with one or more replicas