When 'Generate Indirect Entitlements' is disabled for Roles, Technical and Global Role Entitlements are still granted to Role Members in RSA Identity Governance & Lifecycle
Originally Published: 2020-08-11
Last Modified: 2023-11-30
Article Number
000043837
Applies To
RSA Product Set: RSA Identity Governance & Lifecycle
RSA Version/Condition: 7.2.0 P02
 
Issue
Roles in RSA Identity Governance & Lifecycle may be configured so that role entitlements are not automatically given to members of the role. This is done by disabling the Generate Indirect Entitlements option under REQUEST SETTINGS in the request workflow used for Roles (Requests > Workflows > Request tab > {Workflow name}). When a technical or global role is added as an entitlement to a role and the role changes committed (Apply Changes), access to the technical or global role is still granted to the role member regardless of the Generate Indirect Entitlements setting. This is not true for other entitlement types.
 
Cause
This is a known issue reported in engineering ticket ACM-105105.
 
Resolution
This issue is being investigated by the Engineering team in order to provide a permanent resolution in a future release.
 

Related Articles

Trending Articles

Don't see what you're looking for?