How to suppress the warning message that Change Requests have not been generated when completing a Review in RSA Identity Governance & Lifecycle
Originally Published: 2019-06-19
Article Number
Applies To
RSA Version/Condition: 7.1.0, 7.1.1
Issue
This message means there has been an item revoked in the Review for which there is no Change Request. This warning message occurs under two circumstances:
- The review definition has Generate Change Request set to Explicitly by Owner and there is a revoked item in the review for which the owner has not yet generated a Change Request, or
- The review definition has Generate Change Request set to Explicitly by Owner and there is a revoked item in the review for which the owner has generated a Change Request but that Change Request item was cancelled.
NOTE: In both cases this message may be ignored and the review completed.
This is a configurable behavior. This article explains how to configure a Review definition so that this warning message will be suppressed if the revocation of a review item has been rejected in a Change Request.
Resolution
- Configure the Review definition to automatically Generate Change Requests. In the RSA Identity Governance & Lifecycle User Interface. Navigate to Reviews > Definitions > [Name of Review] > Edit Definition > General tab and under Generate Change Request check Automatically as in the example below:
- Configure the Review definition to revert revoked items if the Change Request is rejected. In the RSA Identity Governance & Lifecycle User Interface, go to Reviews > Definitions > [Name of Review] > Edit Definition > States tab and check Revert revoked items if change request is rejected, as in the example below:
When this setting is not enabled and a change item is rejected, it appears to RSA Identity Governance & Lifecycle that no Change Request has been created for that item. Enabling this setting, "un-revokes" the item in the review so it appears as though no Change Request for that item is needed. However, the history of that revocation remains in the review as seen below:
Related Articles
Certificate renewal to hardware storage device such as a USB token 27Number of Views Review generation fails in RSA Via Lifecycle and Governance when double byte characters are in any of the display names de… 89Number of Views Warning message "WARN Unable to find an Attribute length for : business_unit_id or supervisor" logging after installation… 24Number of Views In RSA Identity Governance & Lifecycle the warning 'No CSRF guard token was found in the submitted request' is encountered… 133Number of Views Performance issue with Change Request generation from a Review to Revoke a large volume of access in RSA Identity Governan… 10Number of Views
Trending Articles
Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory Authentication Manager Security Console and Operations Console Inaccessible After Certificate Update
Don't see what you're looking for?