Change Request generated by Role Review shows as Rejected in RSA Identity Governance & Lifecycle

[#1]

Article Number

000039356

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.1.x, 7.2.x
 

Issue

A Change Request generated by a Role Review shows with the State Rejected.

All the individual change request items on the Change Request show with the State Rejected.

The following text is created automatically in the Notes section of the change request details.

Change Request rejected since [{Role Name]] have been deleted

Image description

Cause

This issue may occur if the Role that appears on a Role Review is deleted, either from Role management or from a Role collection after a Role Review has been generated and a Role Reviewer subsequently makes changes in the Role Review that include the Deleted Role. Since the Role Review is a snapshot of the Entitlements at the time the Role Review has created the Change Requests that are generated from the Role Review may contain references to the deleted Role(s).  
 

When a Change Request that contains references to Deleted Roles is processed the system automatically rejects the entire Change Request and all items on the Change Request even if the other items are not related to the deleted Role.

Resolution

This issue is resolved in the following versions.  When a Deleted Role appears in a Change Request only the items that are directly related to the Deleted Role will be marked as Rejected.  

• RSA Identity Governance & Lifecycle 7.1.1 P09
• RSA Identity Governance & Lifecycle 7.2.0 P02
• RSA Identity Governance & Lifecycle 7.2.1

Future versions of the product will have additional enhancements to prevent the Role Review from generating change request items that are related to Deleted Roles.