Request from Account Access and Ownership Review stuck in Fulfillment Phase when "Create a job per group, grouping by " used in RSA Governance & Lifecycle
2 years ago
Article Number
000067956
Applies To
RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.5.0, 7.5.2
Issue

RSA Identity Governance & Lifecycle fails to remove an account from a group if the request is generated through a review when grouping  "Create a job per group, grouping by " is used.

image-2022-07-18-20-21-32-765.png

When Creating  Account Access and Ownership review and then revoking any account from a group change request is generated and after the approval phase, it is stuck in Pending Action, and no activities are generated to perform the manual action

screenshot-1.png

  • The request works correctly with the same workflow if it is requested manually through explicit CR (i.e., not through a review).
Cause
In the case of RemoveAccountFromGroup (denoted as C8) the method calculateApplicationGrouping which is used to determine what groups (number of splits) should be created is returning zero as 'C8' is not considered which results in 0 activity generation. To fix this we included C8 in the calculation.
Resolution

This issue is resolved in the following patches.
 

  • RSA Identity Governance & Lifecycle 7.5.0 P09
  • RSA Identity Governance & Lifecycle 7.5.2 P05
  • RSA Identity Governance & Lifecycle 7.5.3
Workaround
  • The request works correctly if the fulfillment workflow is configured to Create one job to process all changes or Create an individual job for each change. 
  • The request works correctly if it is requested manually (i.e., not through a review).

Related Articles

Trending Articles

Don't see what you're looking for?