Security scope does not display report names associated with Aveksa Report Result entitlements in RSA Identity Governance & Lifecycle

[#1]

Article Number

000038494

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.0.x, 7.1.x, 7.2.x
 

Issue

There are two Report Result entitlements in RSA Identity Governance & Lifecycle which control user access to specific report results. They are:

• Report Result : Run Reports 
• Report Result : View Report Results,

When viewing these Aveksa entitlements under a user's access tab (Users > Users > {Name} > Access tab) , the Security Scope for the entitlements may not show which report results the user is allowed to access. 

The same is true for reviews. When reviewing items on a User Access Review (Reviews > Results > {Review Result Name} > Review Items}, sometimes the Security Scope for the entitlements does not show which report results the user is allowed to access. 

In the example below, user Cherry Blossom has access to the All User Access report in RSA Identity Governance & Lifecycle. She does not have access to any other reports.

Report Access

 

Image description

User Access Tab - Report name(s) missing:

 

Image description

User Access Tab - Report name(s) not missing:

 

Image description

The same is true for Reviews. Sometimes the Security Scope is missing report name(s) and sometimes it is not.
 

Reviews - Report name(s) missing:

 

Image description

 

Reviews - Report name(s) not missing:

 

Image description

 

Cause

The Aveksa Report Results entitlements are related to the report results and not the report itself. These entitlements are only present when there are saved results from the reports. If there are no saved report results or the saved report results have been deleted, then these entitlements will not be displayed.
 

Resolution

This issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.
 

Workaround

For every report for which a user has access, run that report and save the results.
 

Notes

Note that the entitlement Report Result: Run Reports is not used by the system and is being considered for removal in a future version of the product.