Article Number
000039678
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0, 7.2.1, 7.5.0
Issue
RSA Identity Governance & Lifecycle collector slow in Indirect Relationship Processing.
The following query may be identified in AWR reports as running long.
f8sj8nc35b82w UPDATE T_AV_EXPLODEDUSERENTITLEMENTS old_ SET DELETION_DATE = SYSDATE WHERE DELETION_DATE IS NULL AND RUN_ID = -:"SYS_B_00
The Database Logs for Run may show slower processing in the step "9/12: Process New Role Relationships", specifically in 4 sub steps in Explode_LocalRoles related to T_AV_EXPLODEDUSERENTITLEMENTS.
Cause
This issue is caused by poor execution plans for some SQL queries related to Roles.
This is a known issue in the following versions which have additional steps in Indirect Relationship Processing:
- RSA Identity Governance & Lifecycle 7.2.0
- RSA Identity Governance & Lifecycle 7.2.1
- RSA Identity Governance & Lifecycle 7.5.0
Resolution
This issue has been resolved in the following versions/patches which introduce code changes and new indexes which increase performance:
- RSA Identity Governance & Lifecycle 7.5.0 P02
- RSA Identity Governance & Lifecycle 7.2.1 P05
Workaround
There is no workaround for this issue. There are numerous improvements in the fixed versions that are listed above that provide increased performance for Indirect Relationship Processing.
Rebuilding indexes on T_AV_EXPLODEDUSERENTITLEMENTS can improve general performance on queries against this table but customers should apply the patch in order to fully resolve this issue.
