How to clear open rule violations that are not cleared even though the rule has been deleted in RSA Governance & Lifecycle
Article Number
Applies To
- SecurID Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0
Issue
- Open rule violations are normally cleared automatically when a rule is deleted but in some instances orphan Rule violations associated with the deleted Rule may remain.
Resolution
Please contact RSA Customer Support and quote this article number and attach the below query output in the case.
1. Run the below query & check if the deleted rule is available in the record set.
SELECT * FROM T_AV_RULES WHERE IS_DELETED='TRUE';
2. Run below query to check if open rule violation is available in the result.
SELECT * FROM T_AV_VIOLATIONS violations
left outer join T_AV_RULES rule on violations.rule_id=rule.id
WHERE (violations.STATE='OP' OR violations.STATE='OE')
and rule.IS_DELETED='TRUE';
or,
select duwv.id,duwv.account_name,duwv.user_ent_id,
duwv.exemption_id,duwv.name,duwv.resource_name,duwv.action_name,duwv.app_name,duwv.app_description,duwv.app_classification,duwv.app_sensitivity,
duwv.app_business_use,duwv.app_ownership,duwv.app_locality,rm.*
from t_av_direct_uents_with_viols duwv
join t_av_duwv_rule_map rm
on duwv.entitled_id =rm.entitled_id
and duwv.entitlement_type =rm.entitlement_type
and duwv.entitlement_id =rm.entitlement_id
and nvl(duwv.account_id,-1)=nvl(rm.account_id,-1)
join t_av_rules rule on rm.rule_id=rule.id and rule.is_deleted=upper('TRUE');
3. Get the distinct rule_id from any of the above queries where record has been found. Make sure this rule_id is the same as which was verified in step no 1.
Related Articles
Workflow import sometimes does not work even though the result is a success 10Number of Views Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove… 35Number of Views When cancelling a change request, there is no option to revert completed changes even though completed items exist in RSA … 70Number of Views Contract expired issue even though the liscense is valid in RSA Identity Governance and Lifecycle 58Number of Views An empty change request is created when attempting to commit a role using the "Actions" button, even though no changes or … 22Number of Views
Trending Articles
RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager Patch Updates How to verify that RSA Authentication Agent for Windows can perform challenge user lookups across different Active Directo… Troubleshooting RSA MFA Agent for Microsoft Windows Replication Showing Internal Replication Error During Upgrade to RSA Authentication Manager 8.2
Don't see what you're looking for?