[midPoint] Setting approverExpression to roles

Radovan Semancik radovan.semancik at evolveum.com
Mon Oct 24 10:07:30 CEST 2016


Hi,

Metarole with focusMapping really should work. But it is not an ideal 
solution. Especially for a long-term maintenance. The focusMapping 
copies the definition to all the roles. So these copies need to be 
updated after the metarole is modifed. FocusMapping and recompute of all 
affected roles should work for this, but this is not very convenient and 
there may be problems in some corner cases. There is preliminary plan to 
improve this in midPoint 3.6.

-- 
Radovan Semancik
Software Architect
evolveum.com



On 10/22/2016 01:21 PM, Aivo Kuhlberg wrote:
>
> Hi,
> How do I set approverExpression or approvalSchema to many roles? I 
> have imported AD groups as midPoint roles and need to specify 
> approverExpression for all of them. Obviously I'd prefer not to do 
> that manually for hundreds of roles. So how to do that automatically 
> or is it possible to somehow set some kind of metarole which specifies 
> approverExpression for all of them?
> Thanks,
> Aivo Kuhlberg
>
>
> ------------------------------------------------------------------------
> Käesolev e-kiri võib sisaldada asutusesiseseks kasutamiseks 
> tunnistatud teavet.
> This e-mail may contain information which is classified for official use.
>
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20161024/84d631c8/attachment.htm>


More information about the midPoint mailing list