Authorization define fine-grained access to midPoint objects and system functionality.

Item Summary
Name	Type	Multiplicity	Description
name	property string	[0,1]
description	property string	[0,1]
decision	property AuthorizationDecisionType	[0,1]
action	property anyURI	[1,-1]
phase	property AuthorizationPhaseType	[0,1]
object	container OwnedObjectSelectorType	[0,-1]	Object part from the (subject,action,object) authorization triple.
item	property ItemPathType	[0,-1]
target	container OwnedObjectSelectorType	[0,-1]	Target of the operation.

Items
- name
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- description
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- decision
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [0,1]
- action
  
  Flags: RAM,runtime
  
  Multiplicity: [1,-1]
- phase
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [0,1]
- object
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Object part from the (subject,action,object) authorization triple.
- item
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
- target
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Target of the operation. E.g. an role that is being assigned. It can be considered an operation parameter. If no target is specified then the authorization applies to all possible targets.