Entitlement(app-role/group/ent) revocation request with multiple accounts in an application fails with error:"Expected 1 account associated with the ChangeRequestItem. There were 2" in RSA Identity Governance & Lifecycle
Originally Published: 2018-08-31
Last Modified: 2023-11-30
Article Number
000041280
Applies To
RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0
 
Issue
The following error is encountered for an automatically triggered revocation request when submitting a change request to add an entitlement which includes a revocation date, to a user that has two associated accounts, one of which is disabled.
 
Exception while processing the automated request for item 77339, the exception is: Expected 1 account associated with the ChangeRequestItem. There were 2.

User-added image

AFX will process the add request successfully.
User-added image

But for the revocation task, AFX fails to remove the account with the following error.
 
User-added image

User-added image
Cause
This is a known issue with the product and a fix is provided in 7.0.2 P09 and 7.1.0 P03.
Resolution
Applying patch 7.0.2 P09 or higher, or 7.1.0 P03 and higher will prevent future occurrences of this condition. 

Related Articles

Trending Articles

Don't see what you're looking for?