<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hello Aivo,</p>
<p><br>
</p>
<p>first of all, I apologize for late answer. The situation in
workflow module regarding starting workflows on so called
secondary changes (i.e. induced by some reason other than explicit
user action) is still the same: midPoint does not support that.</p>
<p><br>
</p>
<p>However, there's an emerging feature that perfectly matches your
use case: <a
href="https://wiki.evolveum.com/display/midPoint/Manual+Resource+and+ITSM+Integration">https://wiki.evolveum.com/display/midPoint/Manual+Resource+and+ITSM+Integration</a>.
If you'd need more information on it, Radovan is the best person
to ask.</p>
<p><br>
</p>
<p>Best regards,<br>
</p>
<pre class="moz-signature" cols="72">Pavol Mederly
Software developer
evolveum.com
</pre>
<div class="moz-cite-prefix">On 05.05.2017 15:37, Aivo Kuhlberg
wrote:<br>
</div>
<blockquote cite="mid:1493991449432.4564@rmit.ee" type="cite">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} --></style>
<p>Hi,<br>
</p>
<p>My problem is that when role is assigned automatically then the
approval workflow is not started. It is explained here why it
does not work:
<a moz-do-not-send="true"
href="http://lists.evolveum.com/pipermail/midpoint/2016-May/001838.html">http://lists.evolveum.com/pipermail/midpoint/2016-May/001838.html</a>.<br>
</p>
<p>My need comes from using "resourceless" roles which are
represented as usual midPoint roles but without any connection
to real resource. These resourceless roles needs human operator
who creates access to the user in actual resource. I want to
model it with role request workflow where approver or in this
case operator clicking "agree" to role request means that access
was granted to requested resource.<br>
This works fine when the role is requested by user but I want to
add this role automatically and start the workflow when user is
created in organization by synchronization from HR. How should I
proceed in this case? Maybe there is some better way how to
manage "resourceless" roles?<br>
</p>
<p><br>
</p>
<p>Thanks,<br>
Aivo Kuhlberg<br>
</p>
<br>
<hr>
<font face="Arial" color="Gray" size="2">Käesolev e-kiri võib
sisaldada asutusesiseseks kasutamiseks tunnistatud teavet.<br>
This e-mail may contain information which is classified for
official use.</font>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
midPoint mailing list
<a class="moz-txt-link-abbreviated" href="mailto:midPoint@lists.evolveum.com">midPoint@lists.evolveum.com</a>
<a class="moz-txt-link-freetext" href="http://lists.evolveum.com/mailman/listinfo/midpoint">http://lists.evolveum.com/mailman/listinfo/midpoint</a>
</pre>
</blockquote>
<br>
</body>
</html>