[midPoint] UserTemplate - Role Assignment based on Org Assignment Property

Ivan Noris ivan.noris at evolveum.com
Fri Nov 18 16:34:04 CET 2016


Hi Martin,

the STUDENT and TEACHER roles are "static" in means of assignment
parameters? They are (should be) just assigned without any parameters
whenever used has any org with STUDENT-type assignment or any role with
TEACHER-type assignment?


Ivan

On 11/16/2016 08:37 PM, Martin Marchese wrote:
> Hi All,
>
> We had our AssignmentType extended with a "metaRelation" extension
> property.
>
> Users are assigned to an OrgType
>
> Our OrgType represent schools and within this "metaRelation" property,
> we store wether the assigned user is a STUDENT or a TEACHER.
>
> Besides, we have 2 Roles (STUDENT and TEACHER roles).
>
> We would like to use our user template to assign the corresponding
> role to the user based on shich "metaRelation" it has within the Org.
>
> Users could be STUDENT and/or TEACHER on more than one Org, so while
> the user has at least one of this assignments, it needs to have the
> corresponding role assigned.
>
> We are thinking if there's a way to query the user Org assignments
> within the template and use it as source for the target role assignment.
>
> Is this the best/correct way to do it? Do you recommend any other way?
>
> Thanks in Advance
> Regards,
>
> *Ing. Martín Marchese*
> Identicum S.A.
> Jorge Newbery 3226
> Tel: +54 (11) 4552-3050
> mmarchese at identicum.com <mailto:mmarchese at identicum.com>
> www.identicum.com <http://www.identicum.com>
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint

-- 
Ivan Noris
Senior Identity Engineer
evolveum.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161118/50091899/attachment.htm>


More information about the midPoint mailing list