<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Great!</p>
<p>Ivan<br>
</p>
<br>
<div class="moz-cite-prefix">On 12/01/2016 08:07 PM, Nicolas Rossi
wrote:<br>
</div>
<blockquote
cite="mid:CAAxX8cg3vKx7WgZ4XO833jMKncdz1T4VmeNbizFWAmpaZDA0gw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_default"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">You
are right Ivan, I should see the association from the
projection not the user's assignments. We can go on with the
first example which is already working !</div>
<div class="gmail_default"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br>
</div>
<div class="gmail_default"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">Thanks
for your help !</div>
<div class="gmail_default"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br>
</div>
</div>
<div class="gmail_extra"><br clear="all">
<div>
<div class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr"><font
face="arial, helvetica,
sans-serif"><br>
<br>
<font color="#444444">Ing
Nicolás Rossi</font><br>
<font color="#999999">Identicum
S.A.</font><br>
<font color="#999999">Jorge
Newbery 3226</font><br>
<font color="#999999">Tel:
+54 (11) 4552-3050</font><br>
<font color="#999999"><a
moz-do-not-send="true"
href="http://www.identicum.com"
target="_blank"><a class="moz-txt-link-abbreviated" href="http://www.identicum.com">www.identicum.com</a></a></font></font><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<div class="gmail_quote">On Wed, Nov 30, 2016 at 4:49 AM, Ivan
Noris <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com" target="_blank">ivan.noris@evolveum.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hi Nicholas,</p>
<p>Show all assignments is computing just assignments,
both direct and indirect. It will show you all assigned:</p>
<p>a) roles (assigned directly or indirectly)</p>
<p>b) organizations</p>
<p>c) projections from inducements - name of resource,
kind and intent</p>
<p>It will not show associations there.</p>
<p>If you want to see the "groups" of any account managed
by midPoint, open that user in midPoint, then
Projections, expand the account and see section
"associations".</p>
<p>I have just checked my user with assigned organization,
which as assigned metarole and I can see the indirectly
referenced resource account which is provided by the
metarole order=2 inducement.</p>
<p>Regards,</p>
<p>Ivan<br>
</p>
<div>
<div class="h5"> <br>
<div class="m_-6956709188883453413moz-cite-prefix">On
11/29/2016 11:30 PM, Nicolas Rossi wrote:<br>
</div>
<blockquote type="cite">
<div style="white-space:pre-wrap">Hi Ivan. With the alternative #1 I can see the entitlement provisioned on the resource but I cannot see it under the midpoint GUI on the user panel -> assignments -> cog icon -> show all assignment.
Regards</div>
<br>
<div class="gmail_quote">
<div dir="ltr">El El mar, 29 de nov. de 2016 a las
18:26, Ivan Noris <<a moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com"
target="_blank">ivan.noris@evolveum.com</a>>
escribió:<br>
</div>
<blockquote class="gmail_quote" style="margin:0 0
0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"
class="m_-6956709188883453413gmail_msg">
<p class="m_-6956709188883453413gmail_msg">Hi
Nicolas,</p>
<p class="m_-6956709188883453413gmail_msg">I
have tried to find some time at the
evenings, to look for a problem.</p>
<p class="m_-6956709188883453413gmail_msg">The
first alternative - ScriptedSQL-Grupo1.xml
looks pretty much same as my roles in one of
my projects. If I understand correctly,
you've stated that "It works fine
(entitlement is provisioned) but we cannot
see this assignment on the GUI." What do you
mean by "seeing" it? You should see that
user has this association (Grupo 1) in
Projections/the scriptedsql
account/associations part. And of course in
Assignments you should see the
"ScriptedSQL-Grupo 1" role assigned.</p>
<p class="m_-6956709188883453413gmail_msg">If
you cannot see the "associations" part in
GUI with "Grupo 1" value, can you ensure
that the value is really there manually in
the target system and read that user again
using midPoint? But as you stated that this
alternative "works (entitlement is
provisioned)", I'm confused.<br
class="m_-6956709188883453413gmail_msg">
</p>
<p class="m_-6956709188883453413gmail_msg">What
surprised me is the name of the association
attribute
"<ref>ri:GroupObjectClass</<wbr>ref>"
used in inducements. Do you have the same
name configured in the resource object in:</p>
<p class="m_-6956709188883453413gmail_msg">
<association></p>
<p class="m_-6956709188883453413gmail_msg">
<ref>ri:GroupObjectClass</ref></p>
<p class="m_-6956709188883453413gmail_msg">...</p>
<p class="m_-6956709188883453413gmail_msg"></association>
? If yes, it's just the name which confuses
me.</p>
<p class="m_-6956709188883453413gmail_msg">The
alternative ScriptedSQL-Grupo 3 using
ScriptedSQL-MetaRole looks also OK to me.
I'm trying to find similar example, but so
far I don't remember any usage of
association using associationFromLink with
another association in my projects.<br
class="m_-6956709188883453413gmail_msg">
</p>
Also ScriptedSQL-Metarole-3.xml looks fine.<br
class="m_-6956709188883453413gmail_msg">
Are you testing the setup on new users and
assigning roles, or you already have the
(former) roles assigned and after that you
change the role definitions? (In the latter
case I assume you did also recompute of that
user to apply the changed role definitions.)<br
class="m_-6956709188883453413gmail_msg">
<br class="m_-6956709188883453413gmail_msg">
Anyway, the assignment of ScriptedSQL-Grupo 1
(no metarole) should work and be displayed in
Assignments (as role) and in Projections as
association (Grupo 1).<br
class="m_-6956709188883453413gmail_msg">
<br class="m_-6956709188883453413gmail_msg">
I hope some of my coleagues will also have a
good hint, for now I'm out of ideas but I will
try to find some new.<br
class="m_-6956709188883453413gmail_msg">
<br class="m_-6956709188883453413gmail_msg">
Best regards,<br
class="m_-6956709188883453413gmail_msg">
Ivan</div>
<div bgcolor="#FFFFFF" text="#000000"
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
<br class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830moz-cite-prefix
m_-6956709188883453413gmail_msg">On
11/29/2016 01:06 PM, Nicolas Rossi wrote:<br
class="m_-6956709188883453413gmail_msg">
</div>
<blockquote type="cite"
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">HI
Ivan, have you seen something wrong with
these configurations ?</div>
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444">Best
regards </div>
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:#444444"><br
class="m_-6956709188883453413gmail_msg">
</div>
</div>
<div class="gmail_extra
m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg"
clear="all">
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830gmail_signature
m_-6956709188883453413gmail_msg"
data-smartmail="gmail_signature">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
face="arial,
helvetica,
sans-serif"><br
class="m_-6956709188883453413gmail_msg">
<br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#444444">Ing Nicolás Rossi</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Identicum S.A.</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Jorge Newbery 3226</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Tel: +54 (11) 4552-3050</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999"><a moz-do-not-send="true"
href="http://www.identicum.com"
class="m_-6956709188883453413gmail_msg" target="_blank">www.identicum.com</a></font></font><br
class="m_-6956709188883453413gmail_msg">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br
class="m_-6956709188883453413gmail_msg">
<div class="gmail_quote
m_-6956709188883453413gmail_msg">On Fri,
Nov 25, 2016 at 12:56 PM, Nicolas Rossi
<span dir="ltr"
class="m_-6956709188883453413gmail_msg"><<a
moz-do-not-send="true"
href="mailto:nrossi@identicum.com"
class="m_-6956709188883453413gmail_msg"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:nrossi@identicum.com">nrossi@identicum.com</a></a>></span>
wrote:<br
class="m_-6956709188883453413gmail_msg">
<blockquote class="gmail_quote
m_-6956709188883453413gmail_msg"
style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">Hi
Ivan, here are the XMLs:</div>
<div class="gmail_default
m_-6956709188883453413gmail_msg">
<ul
class="m_-6956709188883453413gmail_msg">
<li
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">ScriptedSQL-Grupo1.xml:
A role with an association
to an entitlement</font></li>
<li
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">ScriptedSQL-Grupo3.xml:
A role with an assignment to
a MetaRole</font></li>
<li
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">ScriptedSQL-MetaRole-1.xml:
First alternative with
another assignment</font></li>
<li
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">ScriptedSQL-MetaRole-2.xml:
Second alternative with an
inducement to Group 3</font></li>
<li
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">ScriptedSQL-MetaRole-3.xml:
Second alternative with an
inducement to Group 1</font></li>
</ul>
<div
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">Thanks
in advance ! </font></div>
<div
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif"><br
class="m_-6956709188883453413gmail_msg">
</font></div>
<div
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica, sans-serif">Best
regards</font></div>
</div>
</div>
<div class="gmail_extra
m_-6956709188883453413gmail_msg"><span
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg"
clear="all">
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444gmail_signature
m_-6956709188883453413gmail_msg" data-smartmail="gmail_signature">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
face="arial,
helvetica,
sans-serif"><br
class="m_-6956709188883453413gmail_msg">
<br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#444444">Ing Nicolás Rossi</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Identicum S.A.</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Jorge Newbery 3226</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Tel: +54 (11) 4552-3050</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999"><a moz-do-not-send="true"
href="http://www.identicum.com"
class="m_-6956709188883453413gmail_msg" target="_blank">www.identicum.com</a></font></font><br
class="m_-6956709188883453413gmail_msg">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br
class="m_-6956709188883453413gmail_msg">
</span>
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830h5
m_-6956709188883453413gmail_msg">
<div class="gmail_quote
m_-6956709188883453413gmail_msg">On
Thu, Nov 24, 2016 at 6:20 PM,
Ivan Noris <span dir="ltr"
class="m_-6956709188883453413gmail_msg"><<a
moz-do-not-send="true"
href="mailto:ivan.noris@evolveum.com"
class="m_-6956709188883453413gmail_msg" target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:ivan.noris@evolveum.com">ivan.noris@evolveum.com</a></a>></span>
wrote:<br
class="m_-6956709188883453413gmail_msg">
<blockquote class="gmail_quote
m_-6956709188883453413gmail_msg" style="margin:0 0 0
.8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div bgcolor="#FFFFFF"
text="#000000"
class="m_-6956709188883453413gmail_msg">
<p
class="m_-6956709188883453413gmail_msg">Hi
Nicolas,</p>
<p
class="m_-6956709188883453413gmail_msg">can
you paste the (three)
attempts how the
MetaRole looks,
anonymized if necessary?
Maybe I will have an
idea by looking at it.</p>
<p
class="m_-6956709188883453413gmail_msg">Regards,</p>
<p
class="m_-6956709188883453413gmail_msg">Ivan<br
class="m_-6956709188883453413gmail_msg">
</p>
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444h5
m_-6956709188883453413gmail_msg"> <br
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190moz-cite-prefix
m_-6956709188883453413gmail_msg">On 11/24/2016 09:52 PM, Nicolas Rossi
wrote:<br
class="m_-6956709188883453413gmail_msg">
</div>
<blockquote
type="cite"
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68)">Hi
guys. We are
still working on
this issue. We
have tried 3
alternatives to
achieve it. All
of them working
on the resource
MetaRole:</div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</span></div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg">1) Add a new association on the
existing
inducement
constructor
directly to
the
entitlement on
the resource.
It works fine
(entitlement
is
provisioned)
but we cannot
see this
assignment on
the GUI.</span></div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#444444" face="arial,
helvetica,
sans-serif"><br
class="m_-6956709188883453413gmail_msg">
</font></div>
<span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg">2) Add an inducement to an
existing role
which has an
assignment to
the resource
MetaRole. I
can see the
assignment on
the GUI but
the
entitlement is
not
provisioned to
the resource.</span><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</span></div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg">3) Add an inducement to an
existing role
which has an
inducement
with
association to
the
entitlement on
the resource.</span><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg"> </span><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg">I
can see the
assignment on
the GUI but
the
entitlement is
not
provisioned to
the resource.</span></div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</span></div>
<div
class="gmail_default
m_-6956709188883453413gmail_msg"><span
style="color:rgb(68,68,68);font-family:arial,helvetica,sans-serif"
class="m_-6956709188883453413gmail_msg">Is there any other possible
configuration
?</span></div>
<div
class="gmail_extra
m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg"
clear="all">
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190gmail_signature
m_-6956709188883453413gmail_msg" data-smartmail="gmail_signature">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
face="arial,
helvetica,
sans-serif">
<div
class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68);display:inline">Best
regards,</div>
</font></div>
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
face="arial,
helvetica,
sans-serif">
<div
class="gmail_default
m_-6956709188883453413gmail_msg"
style="font-family:arial,helvetica,sans-serif;font-size:small;color:rgb(68,68,68);display:inline"></div>
<br
class="m_-6956709188883453413gmail_msg">
<br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#444444">Ing Nicolás Rossi</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Identicum S.A.</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Jorge Newbery 3226</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999">Tel: +54 (11) 4552-3050</font><br
class="m_-6956709188883453413gmail_msg">
<font
class="m_-6956709188883453413gmail_msg"
color="#999999"><a moz-do-not-send="true"
href="http://www.identicum.com"
class="m_-6956709188883453413gmail_msg" target="_blank">www.identicum.com</a></font></font><br
class="m_-6956709188883453413gmail_msg">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br
class="m_-6956709188883453413gmail_msg">
<div
class="gmail_quote
m_-6956709188883453413gmail_msg">On Mon, Nov 21, 2016 at 5:56 PM, Ana
Pereyra <span
dir="ltr"
class="m_-6956709188883453413gmail_msg"><<a
moz-do-not-send="true" href="mailto:apereyra@identicum.com"
class="m_-6956709188883453413gmail_msg"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:apereyra@identicum.com">apereyra@identicum.com</a></a>></span> wrote:<br
class="m_-6956709188883453413gmail_msg">
<blockquote
class="gmail_quote
m_-6956709188883453413gmail_msg" style="margin:0 0 0
.8ex;border-left:1px
#ccc
solid;padding-left:1ex">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">Hi everyone,
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="m_-6956709188883453413gmail_msg">We
are having the
following
issue:</div>
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="m_-6956709188883453413gmail_msg">We
need to assign
the role B to
users after
being created
in resource A,
automatically. </div>
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="m_-6956709188883453413gmail_msg">We
are using a
scripted sql
driver, and a
meta role for
creating users
and groups in
the database;
and role B is
a group in
resource A.</div>
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="m_-6956709188883453413gmail_msg">We
have been
trying to
assign
indirectly
role B to
users using
the meta role,
with no luck.
Any ideas on
how to
approach this?</div>
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
<div
class="m_-6956709188883453413gmail_msg">Thanks
in advance.</div>
<div
class="m_-6956709188883453413gmail_msg">Regards</div>
<span
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190HOEnZb
m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
color="#888888">
<div
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg"><br
class="m_-6956709188883453413gmail_msg">
</div>
-- <br
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190m_5555873668252606585gmail_signature
m_-6956709188883453413gmail_msg" data-smartmail="gmail_signature">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg">
<div
class="m_-6956709188883453413gmail_msg">
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><b style="font-size:12.8px"
class="m_-6956709188883453413gmail_msg">Ana
Pereyra</b><br
class="m_-6956709188883453413gmail_msg">
</div>
<div dir="ltr"
class="m_-6956709188883453413gmail_msg"><font style="font-size:12.8px"
class="m_-6956709188883453413gmail_msg"
face="verdana,
sans-serif"><img
moz-do-not-send="true" src="http://www.identicum.com/img/favicon.ico"
class="m_-6956709188883453413gmail_msg"> Identicum
S.A.<br
class="m_-6956709188883453413gmail_msg">
<i
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg" color="#666666">Jorge Newbery
3226,
Argentina<br
class="m_-6956709188883453413gmail_msg">
Tel: +54 (11) </font></i></font><font
style="font-size:12.8px" class="m_-6956709188883453413gmail_msg"
color="#666666"
face="verdana,
sans-serif"><i
class="m_-6956709188883453413gmail_msg">4552.3050</i></font>
<div
style="font-size:12.8px"
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
face="verdana,
sans-serif"><i
class="m_-6956709188883453413gmail_msg"><font
class="m_-6956709188883453413gmail_msg"
size="1"><a
moz-do-not-send="true"
href="mailto:apereyra@identicum.com" style="color:rgb(17,85,204)"
class="m_-6956709188883453413gmail_msg"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:apereyra@identicum.com">apereyra@identicum.com</a></a></font></i><br
class="m_-6956709188883453413gmail_msg">
<a
moz-do-not-send="true"
href="http://www.identicum.com/" style="color:rgb(17,85,204)"
class="m_-6956709188883453413gmail_msg"
target="_blank"><font class="m_-6956709188883453413gmail_msg"
color="#000000"><a class="moz-txt-link-abbreviated" href="http://www.identicum.com">www.identicum.com</a></font></a></font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</font></span></div>
<br
class="m_-6956709188883453413gmail_msg">
______________________________<wbr>_________________<br
class="m_-6956709188883453413gmail_msg">
midPoint
mailing list<br
class="m_-6956709188883453413gmail_msg">
<a
moz-do-not-send="true"
href="mailto:midPoint@lists.evolveum.com"
class="m_-6956709188883453413gmail_msg"
target="_blank"><a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a></a><br
class="m_-6956709188883453413gmail_msg">
<a
moz-do-not-send="true"
href="http://lists.evolveum.com/mailman/listinfo/midpoint"
rel="noreferrer"
class="m_-6956709188883453413gmail_msg" target="_blank"><a class="moz-txt-link-freetext" href="http://lists.evolveum.com/">http://lists.evolveum.com/</a><wbr>mailman/listinfo/midpoint</a><br
class="m_-6956709188883453413gmail_msg">
<br
class="m_-6956709188883453413gmail_msg">
</blockquote>
</div>
<br
class="m_-6956709188883453413gmail_msg">
</div>
</div>
<br
class="m_-6956709188883453413gmail_msg">
<fieldset
class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190mimeAttachmentHeader
m_-6956709188883453413gmail_msg"></fieldset>
<br
class="m_-6956709188883453413gmail_msg">
<pre class="m_-6956709188883453413gmail_msg">______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190moz-txt-link-abbreviated m_-6956709188883453413gmail_msg" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190moz-txt-link-freetext m_-6956709188883453413gmail_msg" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
</div>
</div>
<span class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444HOEnZb m_-6956709188883453413gmail_msg"><font class="m_-6956709188883453413gmail_msg" color="#888888">
<pre class="m_-6956709188883453413m_8910750752243167830m_-2734819479403348444m_1133232737013364190moz-signature m_-6956709188883453413gmail_msg" cols="72">--
Ivan Noris
Senior Identity Engineer
<a moz-do-not-send="true" href="http://evolveum.com" class="m_-6956709188883453413gmail_msg" target="_blank">evolveum.com</a>
</pre>
</font></span></div>
______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" class="m_-6956709188883453413gmail_msg" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" class="m_-6956709188883453413gmail_msg" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</blockquote>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
<fieldset class="m_-6956709188883453413m_8910750752243167830mimeAttachmentHeader m_-6956709188883453413gmail_msg"></fieldset>
<pre class="m_-6956709188883453413gmail_msg">______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-6956709188883453413m_8910750752243167830moz-txt-link-abbreviated m_-6956709188883453413gmail_msg" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-6956709188883453413m_8910750752243167830moz-txt-link-freetext m_-6956709188883453413gmail_msg" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="m_-6956709188883453413m_8910750752243167830moz-signature m_-6956709188883453413gmail_msg" cols="72">--
Ivan Noris
Senior Identity Engineer
<a moz-do-not-send="true" href="http://evolveum.com" class="m_-6956709188883453413gmail_msg" target="_blank">evolveum.com</a>
</pre>
</div>
______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com" class="m_-6956709188883453413gmail_msg" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" class="m_-6956709188883453413gmail_msg" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</blockquote>
</div>
<fieldset class="m_-6956709188883453413mimeAttachmentHeader"></fieldset>
<pre>______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" class="m_-6956709188883453413moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" class="m_-6956709188883453413moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="m_-6956709188883453413moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
<a moz-do-not-send="true" href="http://evolveum.com" target="_blank">evolveum.com</a>
</pre>
</div></div></div>
______________________________<wbr>_________________
midPoint mailing list
<a moz-do-not-send="true" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a moz-do-not-send="true" href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/<wbr>mailman/listinfo/midpoint</a>
</blockquote></div>
</div>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Ivan Noris
Senior Identity Engineer
evolveum.com
</pre></body></html>