Role Reviews that contain parent roles that contain child roles may show an incorrect entitlement count in reviews. The child role will include the parent role in its entitlement count. The incorrect entitlement count prevents the role review from being completed.
In the following example, MyChildRole is a child role of MyParentRole.MyChildRole has one direct entitlement and MyParentRole has no direct entitlements.
After running a role review, note that MyChildRole shows two entitlements instead of one.
This prevents the reviewer from being able to complete the review as the review status will always show less than 100% complete. The review is expecting a second entitlement to be reviewed and there is no second entitlement.
This is a known issue reported in engineering tickets ACM-93656 and ACM-101051.
This issue is resolved in the following RSA Identity Governance & Lifecycle versions and patch levels: