Entitlement(app-role/group/ent) revocation request with multiple accounts in an application fails with error:"Expected 1 account associated with the ChangeRequestItem. There were 2" in RSA Identity Governance & Lifecycle
The following error is encountered for an automatically triggered revocation request when submitting a change request to add an entitlement which includes a revocation date, to a user that has two associated accounts, one of which is disabled.
Exception while processing the automated request for item 77339, the exception is: Expected 1 account associated with the ChangeRequestItem. There were 2.
AFX will process the add request successfully.
But for the revocation task, AFX fails to remove the account with the following error.
This is a known issue with the product and a fix is provided in 7.0.2 P09 and 7.1.0 P03.
Applying patch 7.0.2 P09 or higher, or 7.1.0 P03 and higher will prevent future occurrences of this condition.