Entitlement(app-role/group/ent) revocation request with multiple accounts in an application fails with error:"Expected 1 account associated with the ChangeRequestItem. There were 2" in RSA Identity Governance & Lifecycle

3 years ago

Originally Published: 2018-08-31

Article Number

000041280

Applies To

RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0.2, 7.1.0

Issue

The following error is encountered for an automatically triggered revocation request when submitting a change request to add an entitlement which includes a revocation date, to a user that has two associated accounts, one of which is disabled.

Exception while processing the automated request for item 77339, the exception is: Expected 1 account associated with the ChangeRequestItem. There were 2.

AFX will process the add request successfully.

But for the revocation task, AFX fails to remove the account with the following error.

Cause

This is a known issue with the product and a fix is provided in 7.0.2 P09 and 7.1.0 P03.

Resolution

Applying patch 7.0.2 P09 or higher, or 7.1.0 P03 and higher will prevent future occurrences of this condition.

Don't see what you're looking for?

Related Articles

Trending Articles