Authorization define fine-grained access to midPoint objects and system functionality.

Item Summary
Name	Type	Multiplicity	Description
name	property string	[0,1]
description	property string	[0,1]
decision	property AuthorizationDecisionType	[0,1]
action	property anyURI	[1,-1]
phase	property AuthorizationPhaseType	[0,1]
enforcementStrategy	property AuthorizationEnforcementStrategyType	[0,1]	Setting that specifies when to enforce the authorization.
object	container OwnedObjectSelectorType	[0,-1]	Object part from the (subject,action,object) authorization triple.
item	property ItemPathType	[0,-1]
target	container OwnedObjectSelectorType	[0,-1]	Target of the operation.

Items
- name
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- description
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
- decision
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [0,1]
- action
  
  Flags: RAM,runtime
  
  Multiplicity: [1,-1]
- phase
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [0,1]
- enforcementStrategy
  
  Flags: RAM,runtime,AVals:2
  
  Multiplicity: [0,1]
  
  Setting that specifies when to enforce the authorization. Default setting is to always enforce the authorization.
- object
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Object part from the (subject,action,object) authorization triple.
- item
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
- target
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Target of the operation. E.g. an role that is being assigned. It can be considered an operation parameter. If no target is specified then the authorization applies to all possible targets.