[midPoint] Approval of adding resource

[Pavol Mederly]

Hello Saule and Bolat,

although it is possible to approve adding resource assignments to users, 
your situation is a bit different.

The difference is in the fact that assignments are generated 
automatically. So, if it could be hacked somehow to start an approval 
process even in this case, the problem would arise when such process 
would finish with "reject" outcome. Any future import or reconciliation 
(or even liveSync in some cases) would trigger the approval process 
again, and again, and again.

I would suggest rethinking this requirement a bit. You could also search 
this mailing list for similar discussions, there were one or two in 
recent months (as far as I know).

As for the confirmation section, it is used only with connection to 
correlation search filter - if the filter returns more values, 
confirmation can be used to definitely select one of them. At least this 
is how I remember the docs; never used that in practice.

Best regards,

Pavol


On 14.06.2016 12:31, Болат Казыбаев wrote:
>
> Hello,
>
> I want to confirm adding Active Directory(AD) resource account to user 
> by approver (ex. administrator).
>
> It works when I assign role(with <approveRef>) to user manually, but 
> in my case my role is assigned automatically in user template when 
> creating/importing users from csv. In that case AD resource account is 
> linked to user without approval of admin.
>
> How can avoid this?
>
> Also I saw Confirmation part in Synchronization of Resource 
> definition. Is it possible to add approval process in Confirmation part?
>
> If yes, what should I do?
>
> Thanks in advance,
>
> Saule and Bolat
>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160614/a784e80a/attachment.htm>