Provisioning Termination Rule creating request to revoke groups even though there is already a request from rule to remove same groups in RSA Identity Governance & Lifecycle
Originally Published: 2020-09-22
Last Modified: 2022-06-20
Article Number
Applies To
RSA Version/Condition: 7.2.0, 7.2.1
Issue
A Provisioning - Termination Rule is generating a request to remove groups from an account even though there is a pending request to Remove the Same groups from the Account.
1. For example, for a Provisioning - Termination Rule that removes Accounts
2. Following Change Request is created by rule for a terminated user to revoke group entitlements.
3. If the Change Request is not completed for some reason and if same user is rehired and then terminated again the rule creates same request as above.
Cause
Resolution
This issue is resolved in the following RSA Identity Governance & Lifecycle patch levels:
- RSA Identity Governance & Lifecycle 7.2.0 P05
- RSA Identity Governance & Lifecycle 7.2.1 P01
Related Articles
Workflow import sometimes does not work even though the result is a success 10Number of Views Approval items that are rejected by email and have multiple concurrent approvers may potentially be provisioned in RSA Ide… 68Number of Views Error: 'Cannot activate this token. There is no outstanding request that matches the userID and activation code' 152Number of Views Attribute Change Rule not generating Change Requests in SecurID Governance & Lifecycle 87Number of Views How to clear open rule violations that are not cleared even though the rule has been deleted in RSA Governance & Lifecycle 74Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device RSA Authentication Manager Patch Updates Limiting users to one token per user ID in RSA Authentication Manager 8.x Configure Session and Authentication Method Settings Artifacts to gather in RSA Identity Governance & Lifecycle
Don't see what you're looking for?