Policy Status with Deviation: Unset

Products

• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

We recently deployed a policy on one of our host and upon checking the status on dms server I saw that Deviation value is 'unset'
We wanted to know what does this  mean and what causes this? Also, is there any fix for this?


Policy Status     : 

    Policy_USESU_Dev_Hadoop_hadoroot#02 : Deployed               Updated by: ac_entm_pers  On: 06-Aug-2020 06:10
    Deviation     : Unset                  Updated on: N/A
    Policy_Base_AllUnix_rootaccess#06 : Deployed               Updated by: capim  On: 24-Apr-2020 11:59
    Deviation     : Yes                    Updated on: 24-Apr-2020 11:59
    Policy_Base_Filewatch_LINUX-LOGS#03 : Deployed               Updated by: capim  On: 17-Apr-2020 11:30
    Deviation     : No                     Updated on: 17-Apr-2020 11:30

Environment

Release : 14.1

Component : PAM SERVER CONTROL ENDPOINT WINDOWS

Cause

The value Unset simply refers to the fact that the deviation has not been calculated. This can be because deviation calculation was not set or in the case above you can see the entry  "Updated on: N/A" would indicate that the deviation calculation has not yet run and so it was not updated,

Resolution

In most cases, simply allow some time to pass so the devcal process in policyfetcher runs in it normal fashion and updates the status