Partial reject for approvals still provision indirect entitlements for accounts in RSA Governance & Lifecycle
2 years ago
Article Number
000068070
Applies To
RSA Product Set: RSA Governance & Lifecycle
RSA Version/Condition
  • SecurID Governance & Lifecycle 7.5.2 
Issue
The issue occurs with partially rejected roles. It occurs when the approver has to approve multiple roles in one approval and rejects one of the roles (a partial reject).

image-2022-11-18-17-21--838.png

If the rejected role contains one or more entitlements, these entitlements get provisioned to the user anyway under the Account Changes. The role itself does not get granted to the user, only the underlying entitlement.

image-2022-11-18-17-21-12-838.png
Cause

This is a known issue in the following versions:

  • RSA Governance & Lifecycle 7.5.2 P03
Resolution
This issue is resolved in the following versions with a code change. 
  • RSA Governance & Lifecycle 7.5.2 P06
  • RSA Governance & Lifecycle 7.6