[midPoint] Restricted access to MP dashboard

[Konstantin Tikhonov]

Hello Colleagues.

Actually our task is to delegate ability to manage specific users and resources (create/assign/change owner/etc. accounts) to a non-admin user. As far as we figured out it can be implemented with Authorization Configuration<https://wiki.evolveum.com/display/midPoint/Authorization+Configuration>. We managed to allow the non-admin user to see users and resources in specific organization unit but we get multiple "access denied" errors and the user isn't able to assign and create account in a resource.

Unfortunately we couldn't find in midPoint documentation how we can configure this functionality completely.

Could you please point correct way to get it done?

Many thanks in advance.

--
Best Regards,

Konstantin Tikhonov
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20200714/8ccf6f26/attachment.htm>