IDM work-list may contain many hundreds of work items.
This means that the OOTB setting of 100 is far too little since the approvers will then not be able to see the complete work-list.
Increase of this setting is described in: How can I see more than 100 work items in the work list screen?
However, the config user doesn't have write access to file /opt/CA/wildfly-idm/standalone/deployments/iam_im.ear/workflow.rar/META-INF/ra.xml when running on the Virtual Appliance.
This is isolated as a defect in Virtual Appliance. The root user has been given access through a hotfix.
Defect: DE299038
Hotfix: HF-DE299038-20170612-0002.tgz.gpg
Contact support if you need this hotfix.