[midPoint] Role assignment dependent on another role/account

[Nicolas Rossi]

Hi Alcides, Have you tried the <order> sentence on the inducement
definition ?

https://wiki.evolveum.com/display/midPoint/Roles,+Metaroles+and+Generic+Synchronization

Hope it helps, regards



Ing Nicolás Rossi
Identicum S.A.
Jorge Newbery 3226
Tel: +54 (11) 4552-3050
www.identicum.com

On Thu, Jul 6, 2017 at 4:13 PM, Alcides Carlos de Moraes Neto <
alcides.neto at gmail.com> wrote:

> Hello list,
>
> We have this scenario, where we would like to manually give some user an
> assignment to Role Y, based on him having Role X, that is assigned
> automatically from Resource + Template.
> Once user loses Role X, he should also lose Role Y.
>
> We cannot just induce Role Y from X, Role Y is a case by case thing, and
> should be given manually. We just want it removed automatically once Role X
> is gone.
>
> Right now we're considering creating multiple Role Xs for each user, but
> that will generate one role for each user (hence Role Explosion).
>
> I'm new to midpoint, but have been studying the docs extensively and
> experimenting. I have not yet  figured if there is a way to do this. Anyone?
>
> Thanks.
>
> _______________________________________________
> midPoint mailing list
> midPoint at lists.evolveum.com
> http://lists.evolveum.com/mailman/listinfo/midpoint
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20170706/e4bbe777/attachment.htm>