Fully reviewed Groups in Group Reviews can be set to a None state in RSA Identity Governance & Lifecycle

[#1]

Article Number

000038361

Applies To

RSA Product Set: RSA Identity Governance & Lifecycle 
RSA Version/Condition: 7.1.1
 

Issue

There is an option in RSA Identity Governance & Lifecycle group reviews to undo the review of a group and set it back to None which means not reviewed yet. For example, in the group review below, the members and access of AD Group1 have been fully reviewed and the Review button is set to green. To access a group review go to Reviews > Results > {Review Result Name}.
 

Image description

A bulk action to set all the review items to None (not reviewed yet) can be performed and set the group review to None, however, the status of the reviewed members and access still shows as 100% fully reviewed.
 

Image description
 

Image description

This is also true for a review that has been signed off.
 

Image description

If a bulk action to set the review state of the group to None takes place, the group review is set to None, however, the status of the reviewed members and access still shows as 100% fully reviewed.
 

Image description

 

Cause

This is a known issue reported in engineering ticket ACM-100064.
 

Resolution

This issue is resolved in the following RSA Identity Governance & Lifecycle versions and/or patch levels:

• RSA Identity Governance & Lifecycle 7.1.1 P03
• RSA Identity Governance & Lifecycle 7.2

This fix is to disallow the application of the None state to a 100% fully reviewed group review item. Given the below scenario, a bulk action to set the below groups to None will have no effect on AD Group1.
 

Image description

 

Notes

There is no option to cascade the None state to the reviewed members and access. Only the group itself can be set to None (not reviewed yet) and only if it has not been 100% reviewed (after the patch is applied.)