<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Roboto;
panose-1:2 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="FR-CH" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hi everyone ,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-GB">I am currently experiencing a strange behaviour that I struggle to explain.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">I have a globalPolicyRule that will change the approval policy for all assignments in order to have the “first decides” behaviour:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><approvalSchema><o:p></o:p></span></p>
<p class="MsoNormal" style="text-indent:35.4pt"><span lang="EN-GB"><stage><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <name>Role's approvers</name><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <approverRelation>approver</approverRelation><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <evaluationStrategy>firstDecides</evaluationStrategy><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <outcomeIfNoApprovers>approve</outcomeIfNoApprovers><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </stage><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"></approvalSchema><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">In order to apply this on assignment approval I also specified the following constraint:<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><policyConstraints><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <assignment id="82"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> <operation>add</operation><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"> </assignment><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"></policyConstraints><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">My globalPolicyRule works as expected with direct assignment of a role (i.e. only one approval is required)!<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">However, when we request the same role through the role shopping, the approval process is still the default process. (i.e. all approvers must approve)<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">I think it may be a problem coming from the policyConstraints but I still struggle to understand what to set (Even with this documentation
<a href="https://docs.evolveum.com/midpoint/devel/design/policy-constraints/">https://docs.evolveum.com/midpoint/devel/design/policy-constraints/</a>).<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">May you explain me what is expected here, I think that going through the role request is not the same as adding the assignment, but then what should be the constraint?<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Thanks a lot for your help,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Best Regards.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td width="188" style="width:141.0pt;border:none;border-right:solid #FF0044 2.25pt;padding:0cm 7.5pt 0cm 0cm">
<p class="MsoNormal" align="right" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right">
<a href="https://www.positivethinking.tech/"><span style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="170" height="79" style="width:1.7708in;height:.8229in" id="_x0000_i1030" src="cid:image001.png@01D73C19.569F04F0" alt="logo"></span></a><span style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td width="10" style="width:7.5pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal"><span style="mso-fareast-language:FR-CH"> <o:p></o:p></span></p>
</td>
<td width="497" valign="top" style="width:372.75pt;padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-GB" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#FF0044;mso-fareast-language:FR-CH">Loïc Schamber</span></b><span lang="EN-GB" style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH">
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"> | IT Consultant<br>
</span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a href="mailto:lschamber@positivethinking.tech"><span lang="EN-GB" style="color:#FF0044">lschamber@positivethinking.tech</span></a></span><span lang="EN-GB" style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><br>
Tel. </span><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"><a href="tel:+41%2022%20721%2007%2077"><span style="color:#FF0044">+41 22 721 07 77</span></a> | Direct.
<a href="tel:+41%2022%20555%2027%2069"><span style="color:#FF0044">+41 22 555 27 69</span></a>
<br>
<o:p></o:p></span></p>
</td>
</tr>
<tr>
<td style="border:none;border-right:solid #FF0044 2.25pt;padding:0cm 7.5pt 0cm 0cm">
<p class="MsoNormal" align="right" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;text-align:right">
<span style="mso-fareast-language:FR-CH"><br>
</span><a href="https://www.linkedin.com/company/the-positive-thinking-company/" target="_blank"><span style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1029" src="cid:image002.png@01D73C19.569F04F0" alt="LinkedIn"></span></a><span style="mso-fareast-language:FR-CH">
</span><a href="https://www.instagram.com/positivethinkingcompany/" target="_blank"><span style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1028" src="cid:image003.png@01D73C19.569F04F0" alt="Instagram"></span></a><span style="mso-fareast-language:FR-CH">
</span><a href="https://twitter.com/PTC_Tech" target="_blank"><span style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1027" src="cid:image004.png@01D73C19.569F04F0" alt="Vimeo"></span></a><span style="mso-fareast-language:FR-CH">
</span><a href="https://youtube.com/channel/UCfaImWa6r0IoZoUYLhbiF7w" target="_blank"><span style="color:blue;mso-fareast-language:FR-CH;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="_x0000_i1026" src="cid:image005.png@01D73C19.569F04F0" alt="Vimeo"></span></a><span style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
<td valign="bottom" style="padding:0cm 0cm 0cm 0cm"></td>
<td valign="bottom" style="padding:0cm 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:9.0pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH">Chemin du Pré-Fleuri 5 – CH 1228 Plan-les-Ouates</span><span style="font-size:3.5pt;font-family:"Tahoma",sans-serif;color:#777777;mso-fareast-language:FR-CH"> </span><span style="mso-fareast-language:FR-CH"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
<div class="MsoNormal" align="center" style="text-align:center"><span style="mso-fareast-language:FR-CH">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><b><span lang="EN-GB" style="font-size:8.0pt;font-family:Roboto;color:#FF0044;mso-fareast-language:FR-CH">Help save paper, do you really need to print this email?</span></b><span lang="EN-GB" style="font-size:8.0pt;font-family:Roboto;color:#FF0044;mso-fareast-language:FR-CH">
</span><span lang="EN-GB" style="mso-fareast-language:FR-CH"><br>
</span><i><span lang="EN-GB" style="font-size:8.0pt;font-family:Roboto;color:#777777;mso-fareast-language:FR-CH">The content of this email and any attachments are confidential and are intended solely for the person and/or company to whom they are addressed.
The information may also be legally privileged. No employee or agent is authorized to conclude any binding agreement on behalf of Positive Thinking Company with another party by email without express written confirmation. If you have received this email in
error, any use, reproduction or dissemination of this transmission is strictly prohibited. If you are not the intended recipient, please immediately notify the sender by return E-mail and delete this message, its attachments and all copies from your system.
Internet communications cannot be guaranteed to be timely, secure, error or virus-free. The sender does not accept liability for any errors or omissions.
</span></i><i><span style="font-size:8.0pt;font-family:Roboto;color:#777777;mso-fareast-language:FR-CH">Thank you for your cooperation.
<br>
</span></i><o:p></o:p></p>
</div>
</body>
</html>