When 'Generate Indirect Entitlements' is disabled for Roles, Technical and Global Role Entitlements are still granted to Role Members in RSA Identity Governance & Lifecycle

3 years ago

Originally Published: 2020-08-11

Article Number

000043837

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0 P02

Issue

Roles in RSA Identity Governance & Lifecycle may be configured so that role entitlements are not automatically given to members of the role. This is done by disabling the Generate Indirect Entitlements option under REQUEST SETTINGS in the request workflow used for Roles (Requests > Workflows > Request tab > {Workflow name}). When a technical or global role is added as an entitlement to a role and the role changes committed (Apply Changes), access to the technical or global role is still granted to the role member regardless of the Generate Indirect Entitlements setting. This is not true for other entitlement types.

Cause

This is a known issue reported in engineering ticket ACM-105105.

Resolution

This issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.

Don't see what you're looking for?

Related Articles

Trending Articles