How to clear open rule violations that are not cleared even though the rule has been deleted in RSA Governance & Lifecycle
Last Modified: 2024-01-09
Article Number
Applies To
- SecurID Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0
Issue
- Open rule violations are normally cleared automatically when a rule is deleted but in some instances orphan Rule violations associated with the deleted Rule may remain.
Resolution
Please contact RSA Customer Support and quote this article number and attach the below query output in the case.
1. Run the below query & check if the deleted rule is available in the record set.
SELECT * FROM T_AV_RULES WHERE IS_DELETED='TRUE';
2. Run below query to check if open rule violation is available in the result.
SELECT * FROM T_AV_VIOLATIONS violations
left outer join T_AV_RULES rule on violations.rule_id=rule.id
WHERE (violations.STATE='OP' OR violations.STATE='OE')
and rule.IS_DELETED='TRUE';
or,
select duwv.id,duwv.account_name,duwv.user_ent_id,
duwv.exemption_id,duwv.name,duwv.resource_name,duwv.action_name,duwv.app_name,duwv.app_description,duwv.app_classification,duwv.app_sensitivity,
duwv.app_business_use,duwv.app_ownership,duwv.app_locality,rm.*
from t_av_direct_uents_with_viols duwv
join t_av_duwv_rule_map rm
on duwv.entitled_id =rm.entitled_id
and duwv.entitlement_type =rm.entitlement_type
and duwv.entitlement_id =rm.entitlement_id
and nvl(duwv.account_id,-1)=nvl(rm.account_id,-1)
join t_av_rules rule on rm.rule_id=rule.id and rule.is_deleted=upper('TRUE');
3. Get the distinct rule_id from any of the above queries where record has been found. Make sure this rule_id is the same as which was verified in step no 1.
Related Articles
An empty change request is created when attempting to commit a role using the "Actions" button, even though no changes or … 23Number of Views Workflow import sometimes does not work even though the result is a success 10Number of Views RSA Identity Governance and Lifecycle - Open LDAP Collector Datasheet 21Number of Views RSA Customer Frequently Asked Questions FAQs: Kaseya VSA Advisory 10Number of Views Attribute Synchronization sometimes updates attributes with attribute variable names instead of attribute values in RSA Id… 86Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA SecurID software token .sdtid file fails to import into RSA SecurID Software Token 5.0 for Windows RSA Authentication Manager 8.9 Setup and Configuration Guide RSA MFA Agent 2.5 for Microsoft Windows Group Policy Object Template Guide RSA Authentication Manager 8.7 SP2 Administrator's Guide
Don't see what you're looking for?