RSA Identity Governance and Lifecycle Provisioning -Termination rule is not generating change requests to revoke entitlements

[#1]

Article Number

000035353

Applies To

RSA Product Set: RSA Identity Governance and Lifecycle
RSA Version/Condition: 7.0.1
 

Issue

The Provisioning - Termination rule is not generating change requests to revoke entitlements when both Is Deleted and Is Terminated are set to true in RSA Identity Governance and Lifecycle.

For example, 

1. Create a Provisioning Termination rule to revoke entitlements.

Image description

2. Pick any user who has entitlements under the User > Access tab.

Image description

3. Delete the user from the system.

Image description

4. Process the Provisioning Termination rule and we can see there are no change requests created for that user.

Image description

5. Check the access of the user under the User - Access tab and we can see the entitlements are removed from the user.

Image description

 

Cause

This is a known issue reported in ACM-70087 where Identity Data Collectors mark all entitlements belonging to the deleted user as deleted.

Resolution

Upgrading to V7.0.1 P04 or V7.0.2 P02 will fix this issue.