<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Ubuntu;
panose-1:2 11 5 4 3 6 2 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.DefaultFontHxMailStyle
{mso-style-name:"Default Font HxMail Style";
font-family:"Ubuntu",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style></head><body lang=EN-US link=blue vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span class=DefaultFontHxMailStyle>Within the role definition, this will update the user attribute with the value defined, when roles I removed the value is also removed. Its not related to any resource attribute<o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><br> <inducement><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <focusMappings><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <mapping><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <strength>strong</strength><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <expression><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <value>FACULTY</value><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </expression><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <target><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <c:path xmlns:bshp="http://midpoint.bshp.edu/xml/ns/bshp">$focus/extension/bshp:bshpPersonAffiliation</c:path><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </target><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </mapping><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </focusMappings><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <activation><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <administrativeStatus>enabled</administrativeStatus><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </activation><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> <focusType>c:UserType</focusType><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle> </inducement><o:p></o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><div style='mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='border:none;padding:0in'><b>From: </b><a href="mailto:bhotrock@gmail.com">Brad Firestone</a><br><b>Sent: </b>Friday, December 6, 2019 12:50 PM<br><b>To: </b><a href="mailto:midpoint@lists.evolveum.com">midPoint General Discussion</a><br><b>Subject: </b>[midPoint] Set midPoint User attribute when Role assigned</p></div><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p><p class=MsoNormal>Hi All,</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I would like to set an attribute value for a midPoint User when they </p><p class=MsoNormal>have been assigned a given role. This attribute value will not be </p><p class=MsoNormal>synced to any resource. I just want to be able to display it in the </p><p class=MsoNormal>midPoint GUI. I am using the organizationalUnit attribute since it's </p><p class=MsoNormal>multi-valued.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My reason for doing this is that I've created "Departmental User </p><p class=MsoNormal>Managers". These people can create new Users, edit existing Users and </p><p class=MsoNormal>(un)assign Roles that "belong" to their department. (I'm using subtype </p><p class=MsoNormal>to define role ownership.) They can only see their department's Roles </p><p class=MsoNormal>in the GUI, which serves two purposes: It restricts which Roles they </p><p class=MsoNormal>can (un)assign, and it hides a large number of Roles which makes things </p><p class=MsoNormal>quicker and less confusing. Since all Roles are not visible in the </p><p class=MsoNormal>Roles section, I would like to use the organizationalUnit attribute </p><p class=MsoNormal>(renamed) to display ALL roles that a User has. This is helpful to let </p><p class=MsoNormal>a departmental User Manager see what other Roles (from other </p><p class=MsoNormal>departments) a certain User has been assigned.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ideally, this attribute value assignment would be part of the Role </p><p class=MsoNormal>definition. But I can't find a way to do that. It seems to me all </p><p class=MsoNormal>mapping in Roles is limited to Resource construction mapping. Is there </p><p class=MsoNormal>a way to map or construct a midPoint attribute value directly from the Role?</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I could do it from the User Template, but that means I would have to </p><p class=MsoNormal>edit the User Template every time I add a new Role. I also need to </p><p class=MsoNormal>figure out the conditional structure to evaluate whether a User has a </p><p class=MsoNormal>given Role assigned.</p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I may be going about this the wrong way and I'm open to any suggestions </p><p class=MsoNormal>about the best way to do this. Thanks for any ideas!</p><p class=MsoNormal>Brad</p><p class=MsoNormal>_______________________________________________</p><p class=MsoNormal>midPoint mailing list</p><p class=MsoNormal>midPoint@lists.evolveum.com</p><p class=MsoNormal>http://lists.evolveum.com/mailman/listinfo/midpoint</p><p class=MsoNormal><span class=DefaultFontHxMailStyle><o:p> </o:p></span></p></div></body></html>