AssignmentType (Complex Type)

Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Generic assignments of one object to another object. This will usually be assignment of a role to a user, assignment of an organizational unit, team or whatever. It may also be used to assign role to another role, creating a role hierarchy. Assignment is an abstract concept. It can be anything that gives the "receptor" object additional access rights, privileges, capabilities or similar ability or right. But it may also constraint the object with policy, e.g. to implement separation of duties. Roles, organizations and privileges in IDM system are examples of assignments. The assignment may target either existing IDM object (such as a role) or abstract resource account that may or may not exist. In case of resource objects it is constrained to accounts, as accounts are the only resource objects that can be assigned to a user. Other resource objects (entitlements) can be assigned to accounts, but not to users. TODO: constraints
Item Summary  
Name Type Multiplicity Description
description property
string
[0,1]  
extension container
ExtensionType
[0,1] The assignment extension used to add parameters to the assignment. 
metadata container
MetadataType
[0,1] Meta-data about data creation, modification, etc. 
targetRef reference
ObjectReferenceType
[0,1] TODO: target ref  
construction container
ConstructionType
[0,1] TODO  
focusMappings container
MappingsType
[0,1] Set of mappings that are applied to a focus in addition to object template. 
activation container
ActivationType
[0,1] Type that defines activation properties. 
order property
int
[0,1]  
focusType property
QName
[0,1]  
tenantRef reference
ObjectReferenceType
[0,1] Reference to the tenant to which this assignment refers. 
orgRef reference
ObjectReferenceType
[0,1] Reference to the organization (org. 
condition property
MappingType
[0,1]