<html>Hey,<br /><br />good solution ! With this action it's ok<br /><br /><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign</a><br /><br />It's strange to allow admin panel for get button in user profile but it work :)<br /><br />Thank you.<br /><br />Br<br /><br />--<p>Cordialement.</p><table class="MsoNormalTable" style="width:100.0%;border:none;border-top:solid #00BBDF 3.0pt" width="100%" cellspacing="0" cellpadding="0" border="1"><tbody><tr><td style="border: medium none; padding: 0cm; width: 301px;" valign="top"><table class="MsoNormalTable" style="margin-left: 7.5pt;" height="332" width="274" cellspacing="0" cellpadding="0" border="0"><tbody><tr><td style="padding:0cm 0cm 0cm 0cm" valign="top"><p class="MsoNormal" style="margin-top:7.5pt;mso-margin-bottom-alt:auto"><b><span style="font-size:11.5pt;color:#1F497D;mso-fareast-language:FR">Sylvaire-Kevin TIPA</span></b><br /><i><span style="font-size:10.0pt;color:gray;mso-fareast-language:FR">Infrastructure</span></i></p></td></tr><tr><td style="padding:3.75pt 0cm 3.75pt 0cm" valign="top"><b><span style="font-size:10.0pt;color:gray;mso-fareast-language:FR">THALES SERVICES SAS</span></b><br /><span style="font-size:10.0pt;color:gray;mso-fareast-language:FR">44 Quai Charles de Gaulle<br />CS 20100<br />69463 Lyon Cedex 06</span></td></tr><tr><td style="border:none;border-top:dotted #BFBFBF 1.0pt;padding:3.75pt 0cm 0cm 0cm" valign="top"><p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;color:gray;mso-fareast-language:FR"><a href="http://www.thalesgroup.com/"><span style="color:gray">www.thalesgroup.com</span></a></span></p></td></tr></tbody></table></td><td style="border: medium none; padding: 0cm; width: 481px;" valign="top"><p class="MsoNormal" style="text-align:right" align="right"><img style="width: 174px; height: 22px;" class="decoded" alt="Thales group" src="https://www.thalesgroup.com/sites/all/themes/thales_front/images/logo.png" /></p></td></tr></tbody></table><br />-------- Message original --------<br />Sujet: Re: [midPoint] Authorization for self unassing<br />Date: Lundi 2 Avril 2018 14:03 CEST<br />De: Kate Honchar <kate.honchar@evolveum.com><br />Répondre à: midPoint General Discussion <midpoint@lists.evolveum.com><br />Pour: midPoint General Discussion <midpoint@lists.evolveum.com><br />Références: <7273-5ac17800-f-1fff7320@60606420> <hk2pr06mb160425c056a3399b84fa4cace9a60@hk2pr06mb1604.apcprd06.prod.outlook.com><br /><br /><br /><br /><br /> <blockquote type="cite" cite="464808189.1315169.1522670626562.JavaMail.zimbra@evolveum.com"> </blockquote><div style="font-family: times new roman, new york, times, serif; font-size: 12pt; color: #000000"><div>Hi Sylvaire-Kevin, </div><div>Also, please, try this authorization</div><div><pre style="background-color: #ffffff; font-family: 'DejaVu Sans Mono'; font-size: 11.3pt;" data-mce-style="background-color: #ffffff; font-family: 'DejaVu Sans Mono'; font-size: 11.3pt;"><a href="http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign">http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#adminUnassign
</a>Best regards,
Kate</pre></div><div> </div><hr id="zwchr" /><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;" data-mce-style="color: #000; font-weight: normal; font-style: normal; text-decoration: none; font-family: Helvetica,Arial,sans-serif; font-size: 12pt;"><b>From: </b>"Brad Fardig" <brad.fardig@cogitogroup.net><br /><b>To: </b>"midPoint General Discussion" <midpoint@lists.evolveum.com><br /><b>Sent: </b>Monday, April 2, 2018 12:32:36 PM<br /><b>Subject: </b>Re: [midPoint] Authorization for self unassing<div> </div><style type="text/css"><!--
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><div class="WordSection1"><p class="MsoNormal"><a class="mceItemAnchor" name="_MailEndCompose"></a><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;">Hi </span><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;">Sylvaire-Kevin</span><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;">,</span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;">Did you include the “self” object?</span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="font-size:10.0pt;font-family:"Courier New"" data-mce-style="font-size: 10.0pt; font-family: 'Courier New';"><object></span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="font-size:10.0pt;font-family:"Courier New"" data-mce-style="font-size: 10.0pt; font-family: 'Courier New';"> <special>self</special></span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="font-size:10.0pt;font-family:"Courier New"" data-mce-style="font-size: 10.0pt; font-family: 'Courier New';"></object></span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;">https://wiki.evolveum.com/display/midPoint/Authorization+Configuration</span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><div><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="color:#1F497D" data-mce-style="color: #1f497d;">Kind regards, </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="color:#1F497D" data-mce-style="color: #1f497d;"> </span></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><b><span style="color:#1F497D" data-mce-style="color: #1f497d;">Brad Fardig</span></b></span></p><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"> </span></p></div><p class="MsoNormal"><span style="mso-bookmark:_MailEndCompose" data-mce-style="mso-bookmark: _MailEndCompose;"><span style="mso-fareast-language:EN-US" data-mce-style="mso-fareast-language: EN-US;"> </span></span></p><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm" data-mce-style="border: none; border-top: solid #E1E1E1 1.0pt; padding: 3.0pt 0cm 0cm 0cm;"><p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> midPoint [mailto:midpoint-bounces@lists.evolveum.com] <b>On Behalf Of </b>TIPA Sylvaire-Kevin<br /><b>Sent:</b> Monday, 2 April 2018 10:23 AM<br /><b>To:</b> midpoint@lists.evolveum.com<br /><b>Subject:</b> [midPoint] Authorization for self unassing</span></p></div></div><p class="MsoNormal"> </p><p class="MsoNormal">Hello,</p><div> </div><p class="MsoNormal">what authorization I need for allow end-user to unassign her role ? aka, make visible the gear "unassign" un panel Profile > assignment</p><div> </div><p class="MsoNormal">I have try many case, allow "modify" on item "assignment" didn"t work ..</p><div> </div><p class="MsoNormal">Thanks in advance</p><div> </div><p class="MsoNormal">Nota : MP 3.6</p><div> </div><p class="MsoNormal">--</p><p>Cordialement.</p><p class="MsoNormal"><br />Sylvaire-Kevin Tipa</p><div> </div><p class="MsoNormal"><i>This email, and any attachment, is confidential and also privileged. If you have received it in error, please notify me immediately and delete it from your system along with any attachments. You should not copy or use it for any purpose, nor disclose its contents to any other person. </i></p></div><br />_______________________________________________<br />midPoint mailing list<br />midPoint@lists.evolveum.com<br />http://lists.evolveum.com/mailman/listinfo/midpoint</div><div> </div></div></hk2pr06mb160425c056a3399b84fa4cace9a60@hk2pr06mb1604.apcprd06.prod.outlook.com><br /> </html>