Entitlement(app-role/group/ent) revocation request with multiple accounts in an application fails with error:"Expected 1 account associated with the ChangeRequestItem. There were 2" in RSA Identity Governance & Lifecycle

[#1]

Article Number

000036679

Applies To

RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0
 

Issue

The following error is encountered for an automatically triggered revocation request when submitting a change request to add an entitlement which includes a revocation date, to a user that has two associated accounts, one of which is disabled.
 

Exception while processing the automated request for item 77339, the exception is: Expected 1 account associated with the ChangeRequestItem. There were 2.

Image description

AFX will process the add request successfully.

Image description

But for the revocation task, AFX fails to remove the account with the following error.
 

Image description

Image description

Cause

This is a known issue with the product and a fix is provided in 7.0.2 P09 and 7.1.0 P03.

Resolution

Applying patch 7.0.2 P09 or higher, or 7.1.0 P03 and higher will prevent future occurrences of this condition.