<div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div style="font-family: Arial, sans-serif; font-size: 14px;">Hello <span style="font-family:system-ui, sans-serif;display:inline !important">Manikanta,</span></div><div style="font-family: Arial, sans-serif; font-size: 14px;"><span style="font-family:system-ui, sans-serif;display:inline !important"><br></span></div>
<div class="protonmail_signature_block" style="font-family: Arial, sans-serif; font-size: 14px;">
<div class="protonmail_signature_block-user protonmail_signature_block-empty">
</div>
<div class="protonmail_signature_block-proton">I am also very new to the midPoint but what comes to my mind is following:</div><div class="protonmail_signature_block-proton"><ol data-editing-info="{"orderedStyleType":1,"unorderedStyleType":1}" style="margin-top: 0px; margin-bottom: 0px;"><li style="list-style-type: "1. ";"><span>You can create a custom attribute on a person level - for example: supervisor</span></li><li style="list-style-type: "2. ";"><span>In the person form you then can provide supervisor's email or any other ID. How to implement this in a best way, I do not know as I did not try yet search filters for attributes in the forms but this should be possible as I understood.</span></li><li style="list-style-type: "3. ";"><span>In the policy you use this value for approver audience. As I understood you can use script inside approverExpression:<br> <span> <approverExpression></span><div><span> <trace>true</trace></span></div><div><span> <script></span></div><div><span> <code><b>midpoint.getManagersOidsExceptUser(object) <- here get supervisor instead using your own code</b></code></span></div><div><span> </script></span></div><div><span> </approverExpression></span></div></span></li></ol><div><span><br></span></div><div><span>With best regards,</span></div><div><span>Mike</span></div></div>
</div>
<div style="font-family: Arial, sans-serif; font-size: 14px;"><br></div><div class="protonmail_quote">
On Thursday, 3 April 2025 at 9:47 AM, Mani Pasarla via midPoint <midpoint@lists.evolveum.com> wrote:<br>
<blockquote class="protonmail_quote" type="cite">
<div class="WordSection1">
<p class="MsoNormal">Hello All,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Does anyone have any suggestions or feedback on the following query?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="background:yellow;mso-highlight:yellow">“We are currently setting up MidPoint in our lab environment and working on a few IGA use cases for the demo. Based on the current setup, I see that the manager is configured at the organization
level, where all manager approvals are routed to the common manager during access requests and access reviews. However, I wanted to check if it is possible to associate the manager identity object at the individual identity level instead of the organization
level. Can you confirm if this is possible and let us know if any specific configurations are required to achieve it?</span>”</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal"><span style="mso-fareast-language:EN-SG" lang="EN-US">Regards,</span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-SG" lang="EN-US">Manikanta</span></p>
</div>
<p class="MsoNormal"> </p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none;mso-fareast-language:EN-SG" lang="EN-US">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;mso-ligatures:none;mso-fareast-language:EN-SG" lang="EN-US">
Mani Pasarla <br>
<b>Sent:</b> Thursday, 27 March 2025 7:17 pm<br>
<b>To:</b> midpoint@lists.evolveum.com; midpoint-dev@lists.evolveum.com<br>
<b>Subject:</b> Midpoint - Manager at Identity Level</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Hi all,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">We are currently setting up MidPoint in our lab environment and working on a few IGA use cases for the demo. Based on the current setup, I see that the manager is configured at the organization level, where all manager approvals are routed
to the common manager during access requests and access reviews. However, I wanted to check if it is possible to associate the manager identity object at the individual identity level instead of the organization level. Can you confirm if this is possible and
let us know if any specific configurations are required to achieve it?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-SG" lang="EN-US">Regards,</span></p>
<p class="MsoNormal"><span style="mso-fareast-language:EN-SG" lang="EN-US">Manikanta</span></p>
<p class="MsoNormal"> </p>
</div>
</blockquote><br>
</div>