<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
        {font-family:"Cambria Math";
        panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Verdana;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:"JetBrains Mono";}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        font-size:11.0pt;
        font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
span.E-MailFormatvorlage18
        {mso-style-type:personal-reply;
        font-family:"Verdana",sans-serif;
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri",sans-serif;
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE-CH" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US">Hi Lubo,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US">Thank you very much for your help, it solved my problem.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US">Best Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US">Patrik<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="584" style="width:437.7pt;background:white;border-collapse:collapse">
<tbody>
<tr>
<td style="padding:.75pt .75pt .75pt .75pt"></td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:12.0pt;color:black;display:none"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="DE">Von:</span></b><span lang="DE"> Lubomir Odlevak <odlevak.lubomir@gmail.com>
<br>
<b>Gesendet:</b> Donnerstag, 6. Juli 2023 12:03<br>
<b>An:</b> midPoint General Discussion <midpoint@lists.evolveum.com><br>
<b>Cc:</b> Patrik Sidler <patrik.sidler@itconcepts.ch><br>
<b>Betreff:</b> Re: [midPoint] Active Directory Role setting Attribute on AD Account, does not Cleanup Attribute whe Role is removed<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Hi Patrik,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">try this:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:8.0pt;line-height:106%"><span lang="CS" style="font-family:"Arial",sans-serif"><outbound><br>
            <expression><br>
                        <value>ImportantValue</value><br>
            </expression><br>
            <target><br>
                        <set><br>
                                   <predefined>all</predefined><br>
                        </set><br>
            </target><br>
</outbound</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Regards<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Lubo<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">Å¡t 6. 7. 2023 o 11:19 Patrik Sidler via midPoint <<a href="mailto:midpoint@lists.evolveum.com" target="_blank">midpoint@lists.evolveum.com</a>> napísal(a):<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">Hi Commuinity,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">I have created a Role, that sets a predefined Attribute Value on an users Active Directory Account when
 the role I assigned.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt;background:#2B2B2B">
<span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"><role
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank"><span lang="EN-US">http://midpoint.evolveum.com/xml/ns/public/common/common-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">c</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://midpoint.evolveum.com/xml/ns/public/common/common-3" target="_blank"><span lang="EN-US">http://midpoint.evolveum.com/xml/ns/public/common/common-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">icfs</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" target="_blank"><span lang="EN-US">http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">org</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://midpoint.evolveum.com/xml/ns/public/common/org-3" target="_blank"><span lang="EN-US">http://midpoint.evolveum.com/xml/ns/public/common/org-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">q</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://prism.evolveum.com/xml/ns/public/query-3" target="_blank"><span lang="EN-US">http://prism.evolveum.com/xml/ns/public/query-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">ri</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3" target="_blank"><span lang="EN-US">http://midpoint.evolveum.com/xml/ns/public/resource/instance-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><br>
      </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">xmlns:</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#9876AA">t</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">=</span><span style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759"><a href="http://prism.evolveum.com/xml/ns/public/types-3" target="_blank"><span lang="EN-US">http://prism.evolveum.com/xml/ns/public/types-3</span></a></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A">><br>
    <name></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">SetValue</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></name><br>
    <description></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">Role required to set a Value on an Attribute</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></description><br>
    <indestructible></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">true</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></indestructible><br>
    <requestable></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">true</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></requestable><br>
    <inducement </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">id</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">="2"</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A">><br>
        <construction><br>
            <resourceRef </span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">oid</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">="fb3f7385-7a9a-4e8c-926e-8fc23de7efb5"
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">relation</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">="org:default"
</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#BABABA">type</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#6A8759">="c:ResourceType"</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A">/><br>
            <attribute><br>
                <ref></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">ri:extensionAttribute1</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></ref><br>
                <outbound><br>
                    <expression><br>
                        <value></span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#A9B7C6">ImportantValue</span><span lang="EN-US" style="font-size:10.0pt;font-family:"JetBrains Mono";color:#E8BF6A"></value><br>
                    </expression><br>
                </outbound><br>
            </attribute><br>
        </construction><br>
    </inducement><br>
</role></span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">The Assignment works perfect. As soon as the Role is assigned, the Value is available on the Users Active
 Directory Account.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">But when I remove the Role, the value stays on the Attribute. It will not be removed when I unassign
 the Role?</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">I do not know if this is possible or not.
</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">But It would be great if anyone is having an Idea how to clean up the Attribute when I unassign the
 Role.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Thank you in advance for your help.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Best Regards,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span lang="EN-US" style="font-size:10.0pt;font-family:"Verdana",sans-serif">Patrik</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="https://lists.evolveum.com/mailman/listinfo/midpoint" target="_blank">https://lists.evolveum.com/mailman/listinfo/midpoint</a><o:p></o:p></p>
</div>
</blockquote>
</div>
</div>
</div>
</body>
</html>