When building out a membership rule in the Role Manager User Interface of RSA Identity Governance & Lifecycle, if the user does not select any of the check boxes, no rule is created. The User string is maintained on the role page, but that is all that happens. This can lead to the mistaken belief that a rule has been configured that will automatically add/remove users from the role, but instead does nothing.
Image description
After committing the role changes, note that no Role Membership Rule Difference rule was created for role of Tester.
Image description
Product enhancement request ACM-97805 has been submitted to handle this scenario differently. Product enhancement requests are evaluated by Product Management to determine when/if they will be added in a future release.
Please go to
RSA Link RSA Ideas for RSA Identity Governance & Lifecycle to submit and/or vote on an enhancement request. For more information, please see
How to log a request for enhancement (RFE) for RSA Identity Governance & Lifecycle.