<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hello Saule and Bolat,</p>
<p>although it is possible to approve adding resource assignments to
users, your situation is a bit different.</p>
<p>The difference is in the fact that assignments are generated
automatically. So, if it could be hacked somehow to start an
approval process even in this case, the problem would arise when
such process would finish with "reject" outcome. Any future import
or reconciliation (or even liveSync in some cases) would trigger
the approval process again, and again, and again.</p>
<p>I would suggest rethinking this requirement a bit. You could also
search this mailing list for similar discussions, there were one
or two in recent months (as far as I know).</p>
<p>As for the confirmation section, it is used only with connection
to correlation search filter - if the filter returns more values,
confirmation can be used to definitely select one of them. At
least this is how I remember the docs; never used that in
practice.<br>
</p>
<p>Best regards,</p>
<p>Pavol<br>
</p>
<br>
<div class="moz-cite-prefix">On 14.06.2016 12:31, Болат Казыбаев
wrote:<br>
</div>
<blockquote
cite="mid:40453c4b21bd40ac884ae399663295b6@exch-02.ktg.kz"
type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:2.0cm 42.5pt 2.0cm 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">I want to confirm adding
Active Directory(AD) resource account to user by approver
(ex. administrator).
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">It works when I assign
role(with <approveRef>) to user manually, but in my
case my role is assigned automatically in user template when
creating/importing users from csv. In that case AD resource
account is linked to user without approval of admin. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">How can avoid this?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Also I saw Confirmation
part in Synchronization of Resource definition. Is it
possible to add approval process in Confirmation part?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">If yes, what should I
do?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks in advance,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Saule and Bolat<o:p></o:p></span></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>