Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

Item Summary
Name	Type	Multiplicity	Description
subjectRelation	property QName	[0,-1]	Specifies the relation that the subject needs to have to the role for this condition to trigger.
objectRelation	property QName	[0,1]	Specifies the relation that the target needs to have to the role for this condition to trigger.
includeMembers	property boolean	[0,1]	If set to true then the members of reference role (the one which the subjects belongs to) are included in the scope (limited by objectRelation).
includeReferenceRole	property boolean	[0,1]	If set to true then the reference role (the one which the subjects belongs to) is included in the scope.

Items
- subjectRelation
  
  Flags: RAM,runtime
  
  Multiplicity: [0,-1]
  
  Display order:
  
  Specifies the relation that the subject needs to have to the role for this condition to trigger. This is usually approver or owner. If not specified then any relation is accepted.
- objectRelation
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Display order:
  
  Specifies the relation that the target needs to have to the role for this condition to trigger. This is usually default relation (member). If not specified then any relation is accepted.
- includeMembers
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Display order:
  
  If set to true then the members of reference role (the one which the subjects belongs to) are included in the scope (limited by objectRelation). If set to false then the members of reference role is excluded from the scope (objectRelation is not used in this case).
- includeReferenceRole
  
  Flags: RAM,runtime
  
  Multiplicity: [0,1]
  
  Display order:
  
  If set to true then the reference role (the one which the subjects belongs to) is included in the scope. If set to false then the reference role is excluded from the scope.