Performance issues seen when processing Role modifications in RSA Identity Governance & Lifecycle
3 years ago
Originally Published: 2020-08-17
Article Number
000043820
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 6.9.1, 7.0.x, 7.1.x, 7.2.0
 
Issue
Performance issues are seen when committing Role modifications. (Roles > Roles > {Role name} > Apply Changes).
 
Cause
This is a known issue reported in engineering ticket ACM-98267.

To verify if you have this issue, run the following two queries as AVUSER: 
select count(*) from t_av_roleversions rv
 where state in ('TN', 'T', 'R', 'CR', 'CC', 'UD') -- All other States are for Pending RoleVersions
   -- If there is no corresponding Role:
   and not exists (select 1 from t_av_roles r
                    where r.deletion_date is null and r.id = rv.role_id)
   -- If there is no CRI that uses it as VALUE or OPERATOR:
   and not exists (select 1 from t_av_change_request_details cri
                    where cri.value_type = 'PR'
                      and cri.value_id = rv.roleversion_id)
   and not exists (select 1 from t_av_change_request_details cri
                    where cri.operand_type = 'PR'
                      and cri.operand_id = rv.roleversion_id);
and 
 
select count(*) from t_av_model_explodeduserents m
 where (role_type = 'P' and
        not exists (select 1 from t_av_roleversions rv where rv.roleversion_id = m.role_id))
    or (role_type = 'C' and
        not exists (select 1 from t_av_roles r where r.deletion_date is null and r.id = m.role_id));

If either query returns positive values, you have this issue.
 
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels: 
  • RSA Identity Governance & Lifecycle 7.1.1 P07
  • RSA Identity Governance & Lifecycle 7.2.0 P02

 

Related Articles

Trending Articles

Don't see what you're looking for?