<div dir="ltr">Does anyone have any ideas, why a global rule with "maxAssignees" doesn't work?<br><div><br></div><div>Also, another question. I have a role 

which has "maxAssignees" policy rule assigned. I'd like to induce this role (order=2) using a meta role.</div><div>I can see that this way bypasses the policy rule and I can assign any number of roles which have the meta role assigned.</div><div>If I assign the role with 

"maxAssignees" rule directly the rule triggers enforcement properly.</div><div><br></div><div>So, the question is, does indirect assignment bypass policy rules?</div><div><br></div><div>Thanks in advance,</div><div>Yakov   </div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, 18 Jul 2024 at 20:19, Yakov Revyakin <<a href="mailto:yrevyakin@gmail.com">yrevyakin@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi all,<div>I can see that not any policy constraints trigger an action. In the following rule "modification" constraints works properly, but "maxAssignees" doesn't - I can make a member more then 1 user. Where am I wrong?<br><div><br></div><div>    <globalPolicyRule><br>        <name>test0123</name><br>        <policyConstraints><br>            <maxAssignees><br>                <multiplicity>1</multiplicity><br>            </maxAssignees><br><!--<br>            <modification><br>                <operation>modify</operation><br>            </modification><br>--><br>        </policyConstraints><br>        <policyActions><br>            <enforcement/><br>        </policyActions><br>        <focusSelector><br>            <type>RoleType</type><br>            <filter><br>                <q:text>name = "Security Officer"</q:text><br>            </filter><br>        </focusSelector><br>    </globalPolicyRule><br></div></div></div>
</blockquote></div>