A Business Role Request with an existing unsuccessful Pending Submission Request that creates a Pending Account can still be submitted in RSA Identity Governance & Lifecycle

[#1]

Article Number

000039084

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.1.1, 7.2.0
 

Issue

When a change request to add access is created that has a Pending Submission request with a Pending Account create, a subsequent request for the same access results in the following warning message:
 

The changes for the account <account name> depends on the request <Pending submission request name> which was not successfully submitted. Please cancel the request before taking further actions by navigating to Pending Submissions tab.

When this warning occurs, the expected behavior is that the FINISH button is disabled and you cannot complete the request. This is true for most entitlement types. The problem is that if the request is for a business role, the FINISH button is enabled.

EXAMPLE

In the below example, access is requested for an Entitlement Type: Business Role. (Requests > Requests > Create Request > Add Access).

Image description

Note that the FINISH button is enabled and the request can be submitted.

 

Image description

If the request is for an Entitlement Type: Entitlement, the change request cannot be completed because the FINISH button is disabled. This is the proper behavior.
 

Image description

Image description

 

Cause

This is a known issue reported in engineering ticket ACM-103544.
 

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle patches:

• RSA Identity Governance & Lifecycle 7.1.1 P06
• RSA Identity Governance & Lifecycle 7.2.0 P01