<div dir="ltr">Thank you very much for the assistance.<div><br></div><div><br></div><img width="0" height="0" class="mailtrack-img" src="https://mailtrack.io/trace/mail/41d2252b1cb50f7676d9c42ad371530e09f5d949.png"></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Dec 18, 2014 at 10:05 PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span> wrote:<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Anand,<span class=""><br>
<br>
<blockquote type="cite">Well, it would really be nice if I could
achieve automatic approvals for induced roles so that it will be
beneficial while using multilevel role inducements with
approvals also.</blockquote></span>
I agree. I've created a record for this issue (<a href="https://jira.evolveum.com/browse/MID-2130" target="_blank">MID-2130</a>).
Unfortunately, I cannot promise any specific date when it could be
implemented. Please contact Igor or Radovan regarding this.<span class=""><br>
<br>
<blockquote type="cite">I would also like to know how to add
approval information to roles. I tried going through the
documentation but failed to find anything.</blockquote></span>
All relevant information about workflows is available <a href="https://wiki.evolveum.com/display/midPoint/Workflows" target="_blank">at
this page</a>.<br>
<br>
In particular, how to configure approval information for roles is
<a href="https://wiki.evolveum.com/display/midPoint/Some+examples" target="_blank">here</a>.
For example, when adding a single approver for a role, just add
the <approverRef> reference to the role (as in Sensitive
Role 1). Multi-level structure can be added via
<approvalSchema> (as in Sensitive Role 2). Dynamically
defined approvers can be specified via expressions under
<approverExpression>/<automaticallyApproved>
properties (as in Sensitive Role 3).<br>
<br>
As for your other question,<br>
<blockquote type="cite">I want to configure Activity Workflow In
Midpoint. I gone through your documentation but I did not find
any document related to Activiti workflow Configuration.</blockquote>
I would say this:<br>
<br>
1) role-related approvals are enabled as <a href="https://wiki.evolveum.com/display/midPoint/Workflow+configuration" target="_blank">written
here</a>, namely by including the following in the system config
file:<br>
<br>
<div title="Hint: double-click to select code">
<div><code><</code><code>workflow</code><code>></code></div>
<div><code>
<</code><code>changeProcessors</code><code>></code></div>
<div><code>
<</code><code>primaryUserChangeProcessor</code><code>></code></div>
<div><code>
<</code><code>aspect</code><code>>addRoleAssignmentAspect</</code><code>aspect</code><code>></code></div>
<div><code>
</</code><code>primaryUserChangeProcessor</code><code>></code></div>
<div><code>
</</code><code>changeProcessors</code><code>></code></div>
<div><code> </code><code></</code><code>workflow</code><code>><br>
<br>
</code></div>
</div>
2) as for other uses of workflows, you first have to specify what
exactly has to be approved, and how. To do that, it is necessary
to read the following documents:<br>
<ul>
<li>architectural description of workflows in midPoint (at least
to find out what is a change processor and workflow aspect): <a href="https://wiki.evolveum.com/display/midPoint/Workflow+Management" target="_blank">https://wiki.evolveum.com/display/midPoint/Workflow+Management</a></li>
<li>how to create your own workflow aspect: <a href="https://wiki.evolveum.com/display/midPoint/How+to+develop+your+own+approval+processes+-+case+1+-+using+primary+change+processor+and+general+item+approval+process" target="_blank">https://wiki.evolveum.com/display/midPoint/How+to+develop+your+own+approval+processes+-+case+1+-+using+primary+change+processor+and+general+item+approval+process</a><br>
</li>
</ul>
If you would need any specific assistance, just ask here. We're
ready to help you.<br>
<br>
Best regards,<br>
Pavol<div><div class="h5"><br>
<br>
On 18. 12. 2014 15:12, Anand Kothekar wrote:<br>
</div></div></div><div><div class="h5">
<blockquote type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>Can anyone provide me assistance on this..<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks</div>
<div>Anand Kothekar </div>
<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" height="0" width="0"></div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Dec 15, 2014 at 7:22 PM, Anand
Kothekar <span dir="ltr"><<a href="mailto:anand.kothekar@confluxsys.com" target="_blank">anand.kothekar@confluxsys.com</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hello Pavol,
<div><br>
</div>
<div>Well, it would really be nice if I could achieve
automatic approvals for induced roles so that it will be
beneficial while using multilevel role inducements with
approvals also.</div>
<div><br>
</div>
<div>I would also like to know how to add approval
information to roles. I tried going through the
documentation but failed to find anything.</div>
<div><br>
</div>
<div>It will be great if you provide me link to any of the
documentation or inform about adding approval
information to role so that Automatic Approval for Role
Inheritance will be achieved.</div>
<div><br>
</div>
<div><br>
</div>
<div>Thanks.</div>
<img height="0" width="0"></div>
<div>
<div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Dec 15, 2014 at 5:04
PM, Pavol Mederly <span dir="ltr"><<a href="mailto:mederly@evolveum.com" target="_blank">mederly@evolveum.com</a>></span>
wrote:
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hello Anand,<br>
<br>
workflow requests are evaluated in so called
"primary phase" of operation execution. At
that time, only changes explicitly requested
by the user are considered. So, the obvious
solution to your problem is to add approval
information to each role that includes your
sensitive role as an inducement.<br>
<br>
Is it OK for you? Or, is your situation such
that you require the ability to automatically
start all approvals for induced roles? If so,
please describe it in a few words here.<br>
<br>
Best regards,<br>
Pavol<br>
<br>
PS: I've noticed you write both to midpoint
and midpoint-dev list. It is not necessary to
do so. I would suggest to send questions like
this one only to midpoint list (as it is a
user-oriented question, not a
development-related one).
<div>
<div><br>
<br>
On 13. 12. 2014 11:51, Anand Kothekar
wrote:<br>
</div>
</div>
</div>
<blockquote type="cite">
<div>
<div>
<div dir="ltr">Hi
<div><br>
</div>
<div>I was working on <b>Role
Approvals. </b>I created a role
very similar to the <b>Sensitive Role
2.</b></div>
<div><b><br>
</b></div>
<div>The Role I created is working fine
and also requesting for approvals as
expected. I created one more Role
having the previously role as its
inducement(New Role Inheriting The
Previous Role).</div>
<div><br>
</div>
<div>Here the hierarchy is working fine
and previous role's Groups are getting
added successfully but without any
approval request.</div>
<div><br>
</div>
<div>So, Will you please help me out for
forcing approvals on role Inducements
also.</div>
<div><br>
</div>
<div>Please forward me any links related
to the issue if available.</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Regards</div>
<div> Anand</div>
<span><font color="#888888">
<div><br>
</div>
</font></span><img height="0" width="0"></div>
<br>
<fieldset></fieldset>
<br>
</div>
</div>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div>
<br>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
midPoint mailing list
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</div></div></div>
<br>_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
<br></blockquote></div></div>