<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Salim,<br>
<br>
see my answers inline:<br>
<br>
<div class="moz-cite-prefix">On 07/18/2013 01:38 PM, Salim Boulkour
wrote:<br>
</div>
<blockquote
cite="mid:6A4871F676BC4A4D881CA53C32575A280310815C@exbe07.ad.hosteam.fr"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<meta name="Generator" content="Microsoft Word 12 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Tahoma","sans-serif";
color:#1F497D;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"Pr\00E9format\00E9 HTML Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:#1F497D;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0cm;
margin-right:0cm;
margin-bottom:0cm;
margin-left:36.0pt;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Tahoma","sans-serif";
color:#1F497D;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Tahoma","sans-serif";
color:#1F497D;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";
color:#1F497D;}
span.PrformatHTMLCar
{mso-style-name:"Pr\00E9format\00E9 HTML Car";
mso-style-priority:99;
mso-style-link:"Pr\00E9format\00E9 HTML";
font-family:"Courier New";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:28382959;
mso-list-type:hybrid;
mso-list-template-ids:-269607804 -596084110 67895299 67895301 67895297 67895299 67895301 67895297 67895299 67895301;}
@list l0:level1
{mso-level-start-at:2013;
mso-level-number-format:bullet;
mso-level-text:-;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-18.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-font-family:Calibri;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hey everyone,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I began playing with
roles in midpoint and am trying to understand the contents
of <a moz-do-not-send="true"
href="https://svn.evolveum.com/midpoint/tags/midpoint-2.1.2/samples/roles/role-sailor.xml">https://svn.evolveum.com/midpoint/tags/midpoint-2.1.2/samples/roles/role-sailor.xml</a>.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Role description says :<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier
New";color:windowtext" lang="EN-US">A basic role, that
specifies <b><u>account on OpenDJ resource</u></b><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier
New";color:windowtext" lang="EN-US">and also sets
"employeeType" attribute to a fixed value and it sets
"destinationIndicator"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier
New";color:windowtext" lang="EN-US">as a copy of a user
property.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">What interests me here,
is the ability to do modifications to the account. So my
questions are :<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
lang="EN-US"><span style="mso-list:Ignore">-<span
style="font:7.0pt "Times New Roman""> </span></span></span><!--[endif]--><span
lang="EN-US">Does the account has to be created before
assigning that role to a user ? Or account would be created
as soon as role is given to the user ?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
</div>
</blockquote>
<br>
The account will be created as soon you assign this role to user.<br>
The attributes will be set as specified by mappings in the role
(employeeNumber, destinationIndicator).<br>
<br>
<blockquote
cite="mid:6A4871F676BC4A4D881CA53C32575A280310815C@exbe07.ad.hosteam.fr"
type="cite">
<div class="WordSection1">
<p class="MsoListParagraph"
style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
lang="EN-US"><span style="mso-list:Ignore">-<span
style="font:7.0pt "Times New Roman""> </span></span></span><!--[endif]--><span
lang="EN-US">I understand the OID in ‘resourceRef’ being the
way to specify the targeted resource. Is this the only way
to specify it ? (As the doc on the data model stated I
wouldn’t have to play with OIDs much ;) )</span></p>
</div>
</blockquote>
<br>
Yes this is the only reference type - by oid. In the next releases,
more parts of administrative GUI will be enhanced by wizards so that
you can select the resource instead of typing its oid. But so far
you have to create the role(s) and refer to resource oid to make a
reference. IF you need to prepare a set of configuration (XML)
files, e.g. resources and roles, and wish to import them and make
some tests, you may use your own oids, just be sure to make them
unique.<br>
<br>
<blockquote
cite="mid:6A4871F676BC4A4D881CA53C32575A280310815C@exbe07.ad.hosteam.fr"
type="cite">
<div class="WordSection1">
<p class="MsoListParagraph"
style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><span
lang="EN-US"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoListParagraph"
style="text-indent:-18.0pt;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
lang="EN-US"><span style="mso-list:Ignore">-<span
style="font:7.0pt "Times New Roman""> </span></span></span><!--[endif]--><span
lang="EN-US">If I specify in the role a resource attribute
that is already handled by the resource/connector conf’,
what would happen ? Has the value given by the role
assignment a higher priority than the default one ?</span></p>
</div>
</blockquote>
<br>
Very good question. Please see
<a class="moz-txt-link-freetext" href="https://wiki.evolveum.com/display/midPoint/Mapping">https://wiki.evolveum.com/display/midPoint/Mapping</a> especially
"Mapping Order":<br>
"When defining multiple mappings for single-valued attribute, every
next applied mapping in order rewrites the value of attribute. Be
sure to check, if this is what you want. In case of multiple-value
attributes, mappings simply add next values to the attribute values
list. "<br>
<p>So it depends mainly on the single/multi value attribute. For
multi-value it would do what you perhaps expect - merge.<br>
</p>
<p>Regards,<br>
Ivan<br>
</p>
<pre class="moz-signature" cols="72">--
Ing. Ivan Noris
Consultant
Evolveum, s.r.o
___________________________________________________
"Semper cautus - semper paratus - semper idem Vix."
</pre>
</body>
</html>