Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove same groups in RSA Identity Governance & Lifecycle

[#1]

Article Number

000039333

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0, 7.2.1
 

Issue

A Provisioning - Termination Rule is generating a request to remove groups from an account even though there is a pending request to Remove the Same groups from the Account.


1. For example, for a Provisioning - Termination Rule that removes Accounts
Image description

2. Following Change Request is created by rule for a terminated user to revoke group entitlements.
Image description
Image description
3. If the Change Request is not completed for some reason and if same user is rehired and then terminated again the rule creates same request as above.
Image description

Image description

Cause

In some instances, the product was not checking for all types of Pending Change Requests. 

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: 

• RSA Identity Governance & Lifecycle 7.2.0 P05
• RSA Identity Governance & Lifecycle 7.2.1 P01