Role Reviews that contain parent roles that contain child roles may show an incorrect entitlement count in reviews. The child role will include the parent role in its entitlement count. The incorrect entitlement count prevents the role review from being completed.
In the following example,
MyChildRole is a child role of
MyParentRole. MyChildRole has one direct entitlement and
MyParentRole has no direct entitlements.
Image description
After running a role review, note that
MyChildRole shows two entitlements instead of one.
Image description
This prevents the reviewer from being able to complete the review as the review status will always show less than 100% complete. The review is expecting a second entitlement to be reviewed and there is no second entitlement.
Image description
This is a known issue reported in engineering tickets ACM-93656 and ACM-101051.
This issue is resolved in the following RSA Identity Governance & Lifecycle versions and patch levels:
- RSA Identity Governance & Lifecycle 7.1.1 P06
- RSA Identity Governance & Lifecycle 7.2.0
Please contact
RSA Identity Governance & Lifecycle Support for guidance on versions where this issue is not resolved and mention this RSA Knowledge Base Article ID 000038499 for reference