A Provisioning - Termination Rule is generating a request to remove groups from an account even though there is a pending request to Remove the Same groups from the Account.
1. For example, for a Provisioning - Termination Rule that removes Accounts Image description
2. Following Change Request is created by rule for a terminated user to revoke group entitlements. Image description Image description 3. If the Change Request is not completed for some reason and if same user is rehired and then terminated again the rule creates same request as above. Image description
In some instances, the product was not checking for all types of Pending Change Requests.
This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: