AbstractRoleType (Complex Type)

Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

ABSTRACT
Supertype: FocusType

Abstract class that contains the "essence" of a role. This is kind of "Roleable" interface when speaking in Java terms.

A role implies assignments. The role may "grant" accounts on resources, attributes and entitlements for such accounts. The role can also assign organizational units, other roles or various IDM objects that can be assigned directly to user. Role is in fact just a named set of assignments.

This is the basic building block of role-based access control (RBAC) in the provisioning system. It defines what rights (e.g. accounts) should be given to user, how they should look like (attributes) and what groups or native roles to assign to them (entitlements).

Item Summary  
Name Type Multiplicity Description
$itemDefinition.Name.LocalPart property
PolyStringType
[0,1] Human-readable, mutable name of the object. 
$itemDefinition.Name.LocalPart property
string
[0,1] Free-form textual description of the object. 
$itemDefinition.Name.LocalPart property
string
[0,-1] Type of the object. 
$itemDefinition.Name.LocalPart property
OperationResultType
[0,1] Result of the operation that fetched this instance of the object. 
$itemDefinition.Name.LocalPart container
ExtensionType
[0,1] Extension container that provides generic extensibility mechanism. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] Set of the orgs (organizational units, projects, teams) that the object relates to. 
$itemDefinition.Name.LocalPart container
TriggerType
[0,-1] Triggers for this object. 
$itemDefinition.Name.LocalPart container
MetadataType
[0,1] Meta-data about object creation, modification, etc. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,1] Reference to the tenant to which this object belongs. 
$itemDefinition.Name.LocalPart property
string
[0,1] Lifecycle state of the object. 
$itemDefinition.Name.LocalPart container
OperationExecutionType
[0,-1] Description of recent operations executed on this object (or related objects, e. 
$itemDefinition.Name.LocalPart container
LensContextType
[0,1] Model context describing executed operation  
$itemDefinition.Name.LocalPart property
anyURI
[0,-1] The policy situation(s) of this object. 
$itemDefinition.Name.LocalPart property
EvaluatedPolicyRuleType
[0,-1] Triggered policy rules for this assignment. 
$itemDefinition.Name.LocalPart container
PolicyExceptionType
[0,-1] Recorded exception from a policy rule. 
$itemDefinition.Name.LocalPart property
DiagnosticInformationType
[0,-1] Diagnostic information attached to this object. 
$itemDefinition.Name.LocalPart container
AssignmentType
[0,-1] Set of object's assignments. 
$itemDefinition.Name.LocalPart property
int
[0,1] Iteration number. 
$itemDefinition.Name.LocalPart property
string
[0,1] Iteration token. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] References to all applicable archetypes, including "indirect" archetypes such as archetype supertypes. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] References to abstract roles (roles, orgs, services) that this focus currently belongs to - directly or indirectly. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] References to objects (abstract roles as well as users) obtained via delegation. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] References to abstract roles (roles and orgs) that this focus may directly belong to. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] Set of shadows (projections) linked to this focal object. 
$itemDefinition.Name.LocalPart reference
ObjectReferenceType
[0,-1] Set of personas linked to this focal object. 
$itemDefinition.Name.LocalPart container
ActivationType
[0,1] Type that defines activation properties. 
$itemDefinition.Name.LocalPart property
base64Binary
[0,1] Photo corresponding to the user / org / role. 
$itemDefinition.Name.LocalPart property
string
[0,1] The name, identifier or code of the cost center to which the user belongs. 
$itemDefinition.Name.LocalPart property
PolyStringType
[0,1] Primary locality of the user, the place where the user usually works, the country, city or building that he belongs to. 
$itemDefinition.Name.LocalPart property
string
[0,1] Indicates user's preferred language, usually for the purpose of localizing user interfaces. 
$itemDefinition.Name.LocalPart property
string
[0,1] Defines user's preference in displaying currency, dates and other items related to location and culture. 
$itemDefinition.Name.LocalPart property
string
[0,1] User's preferred timezone. 
$itemDefinition.Name.LocalPart property
string
[0,1] E-Mail address of the user, org. 
$itemDefinition.Name.LocalPart property
string
[0,1] Primary telephone number of the user, org. 
$itemDefinition.Name.LocalPart property
PolyStringType
[0,1] Human-readable name of the role or org. 
$itemDefinition.Name.LocalPart property
string
[0,1] Identifier of the role or org. 
$itemDefinition.Name.LocalPart container
AssignmentType
[0,-1] Inducements define the privileges and "features" that other objects should have. 
$itemDefinition.Name.LocalPart container
AuthorizationType
[0,-1] Set of role authorizations. 
$itemDefinition.Name.LocalPart property
boolean
[0,1] If set to true then this role may be directly requested by the users. 
$itemDefinition.Name.LocalPart property
boolean
[0,1] If set to true then this role may be delegated to a deputy. 
$itemDefinition.Name.LocalPart property
IdempotenceType
[0,1] This value indicates, whether the evaluation of this role gives the same results regardless of its position in the assignment/inducement hierarchy. 
$itemDefinition.Name.LocalPart property
string
[0,1] Indication of the level of risk associated with the permissions that this role assigns. 
$itemDefinition.Name.LocalPart container
MappingType
[0,1] The role is applied only if the condition is evaluated to true. 
$itemDefinition.Name.LocalPart container
AdminGuiConfigurationType
[0,1] Specifies the admin GUI configuration that should be used for the members of this role. 
$itemDefinition.Name.LocalPart container
DataProtectionType
[0,1] Specifies the GDPR related attributes  
$itemDefinition.Name.LocalPart container
AutoassignSpecificationType
[0,1] Specification of role auto-assignment properties.