Privileges and identity that will be used to execute an expression or similar operation.

Item Summary
Name	Type	Multiplicity	Description
runAsRef	reference ObjectReferenceType	[0,1]	Reference to the user (or other focal object) whose identity will be used to execute the operation in question.
runPrivileged	property boolean	[0,1]	If set to "true", the full authorization (i.

Items
- runAsRef
  
  Flags: RAM
  
  Multiplicity: [0,1]
  
  Reference to the user (or other focal object) whose identity will be used to execute the operation in question. The operation will use authorizations that this object has. If the operation triggers any change then the change will be audited under the identity of this object as well as under the identity of the original principal (this is valid since 4.8). If no object is specified then the identity of currently logged-in user or the owner of the task will be used.
- runPrivileged
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  If set to "true", the full authorization (i.e. "http://midpoint.evolveum.com/xml/ns/public/security/authorization-3#all" on all objects) will be used to execute the operation. An information about elevated privileges being used will be recorded in the audit log, if any audit records are produced during the operation.