{"id":461032,"date":"2025-05-26T15:00:22","date_gmt":"2025-05-26T15:00:22","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=461032"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=461032","title":{"rendered":"\u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u0432, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0445 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 IDM Midpoint<\/span>"},"content":{"rendered":"
<\/div>\n
\n
\n
\n
\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c <\/strong>\u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u041f\u0440\u043e\u0435\u043a\u0442\u044b. \u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043d\u0435\u0442 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0433\u0434\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0443 \u043a\u043e\u0433\u043e \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438 \u043c\u044b \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u0438\u0445 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0438\u0437 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0438 \u0440\u0430\u0437\u0432\u0435\u0441\u0438\u0442\u044c \u043a\u0430\u043a \u0434\u0435\u043b\u0430\u043b\u0438 \u044d\u0442\u043e \u0441 \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c\u0438. \u041f\u0443\u0441\u0442\u044c \u0443 \u043d\u0430\u0441 \u0431\u0443\u0434\u0435\u0442 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435, \u0434\u0430\u0436\u0435 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e-\u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0435, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041f\u0440\u043e\u0435\u043a\u0442 \u0432 \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0441\u043a\u043e\u043c \u0441\u043c\u044b\u0441\u043b\u0435 \u044d\u0442\u043e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c — \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u043b\u0435\u043d\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. <\/p>\n

<\/figure>\n

\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0432\u043e\u0439 GUI Midpoint, \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u041f\u0440\u043e\u0435\u043a\u0442. \u0412 Request Access \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438. \u0422\u0430\u043c \u0436\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043f\u043e\u0434\u0447\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0438 \u0441\u0435\u0431\u044f \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442-\u0432\u044b\u0434\u0430\u0451\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442. \u041c\u043e\u0436\u0435\u0442 \u043d\u0430 \u041f\u0440\u043e\u0435\u043a\u0442 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c(\u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0430\u044f AD \u0433\u0440\u0443\u043f\u043f\u0443 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0443 \u0438 \u043e\u043d\u0430 \u0431\u0443\u0434\u0435\u0442 \u0443 \u0432\u0441\u0435\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0438\u043b\u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041c\u043e\u0436\u043d\u043e \u0443\u0431\u0440\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043f\u0440\u0430\u0432\u0430 \u043f\u0440\u0438\u0448\u0435\u0434\u0448\u0438\u0435 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u0441\u043d\u0438\u043c\u0443\u0442\u0441\u044f. <\/p>\n

\u041f\u0440\u043e\u0441\u0442\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/p>\n

<\/figure>\n

1. \u0423 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a User \u0435\u0441\u0442\u044c \u0440\u043e\u043b\u044c \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432 GUI \u043f\u0440\u043e\u0435\u043a\u0442\u044b Role.<\/p>\n

2. \u041f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 N001 Role \u0441\u0440\u0430\u0437\u0443 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442 N001 User \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u0441\u0435\u0431\u0435 \u043f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n

3. \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a(\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a) \u0432 Request Access c\u0435\u0431\u0435, \u043d\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 Position User, \u0438\u043b\u0438 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0438\u0445 User Position \u0432\u044b\u0434\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n

4. \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a(\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a) \u0432 Request Access \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u0440\u043e\u043b\u0438 Forward Role(\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0430\u0432, \u043f\u0440\u043e\u0435\u043a\u0442 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0430\u0432, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0443\u0434\u0435\u0442 \u0443\u0447\u0435\u0442\u043a\u0430 AD \u043d\u0430 \u043f\u043e\u0437\u0446\u0438\u0438 User \u0438\u043b\u0438 \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 User) \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 N001 User.<\/p>\n

5. \u0422\u0430\u043c \u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 N001 User \u0440\u043e\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u0440\u043e\u043b\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0440\u043e\u043b\u044c(\u0435\u0441\u043b\u0438 \u0435\u0451 \u043d\u0435\u0442).<\/p>\n

6. \u042d\u0442\u0443 \u0440\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0443 N001 User \u0438\u043b\u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e Position User. \u041d\u0430 \u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0434\u0430\u0435\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u0440\u043e\u043b\u044c \u0435\u0441\u043b\u0438 \u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f \u043d\u0435\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role, \u0438 \u0441\u043d\u0438\u043c\u0430\u0435\u0442 \u0435\u0451 \u0435\u0441\u043b\u0438 \u0443 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f \u043f\u0440\u043e\u043f\u0430\u0434\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n

\u041f\u043e\u043b\u043d\u0435\u0439\u0448\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/p>\n

\"Files:<\/p>\n
Files: JPG<\/a>, SVG<\/a><\/figcaption><\/div>\n<\/figure>\n

\u041e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Github IDM-Midpoint-POC-Employments-and-Positions<\/a><\/p>\n

Docker-\u043e\u0431\u0440\u0430\u0437: IDM-Midpoint-POC-Employments-and-Positions\/tree\/main\/Docker<\/a><\/p>\n

\u041f\u0435\u0440\u0435\u0434 \u043d\u0430\u0447\u0430\u043b\u043e\u043c<\/strong><\/p>\n

\u0412\u044b\u043d\u0443\u0436\u0434\u0435\u043d \u043f\u0440\u0438\u0441\u043a\u043e\u0440\u0431\u043d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c \u0447\u0442\u043e orgRelation \u043d\u0443 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 Midpoint 4.9.1, \u0438\u043b\u0438 \u044f \u0432\u0441\u0435 \u0442\u0430\u043a\u0438 \u043d\u0435 \u0443\u0433\u0430\u0434\u0430\u043b \u043a\u0430\u043a \u0438\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0442\u043e\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043a\u043e\u043d\u0435\u0447\u043d\u043e. \u0412 3-\u0442\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c <\/strong>\u043e\u043d \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c, \u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0438\u043a\u0430\u043a! \u0410 \u0432 Midpoint 4.9.2-3 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0432 targetSelection group collection \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430 4.9.1.<\/p>\n

\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u044b\u0432\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0440\u043e\u043b\u0438 POCE GUI My Subordinates, \u0444\u0443\u043b\u0441\u0442\u043e\u0440\u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043d\u043e \u0438\u0434\u0435\u044f \u0442\u0430\u043a\u0430\u044f \u0432 User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u0438\u043d \u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442 \u043e\u0434\u0438\u043d \u043f\u0440\u0438\u0437\u043d\u0430\u043a — \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0434\u0430\/\u043d\u0435\u0442. \u0412 \u0435\u0433\u043e \u0441\u043f\u0438\u0441\u043e\u043a \u0441 Forward Roles \u043f\u0438\u0448\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0443 DEPARTMENT|EMP001001|DEP10101|POS000101|EMP002001|600667|default \u0438\u043b\u0438 manager. Org \u0420\u043e\u043b\u044c Departament \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u0435\u0451 \u0438 \u043f\u0438\u0448\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043c\u043e\u0439 \u0431\u043e\u0441\u0441 \u0442\u0430\u043a\u043e\u0439-\u0442\u043e \u0438 User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u044d\u0442\u043e \u0432 \u0441\u0435\u0431\u044f \u0438 \u043f\u0438\u0448\u0435\u0442 \u043c\u043e\u0439 \u0431\u043e\u0441\u0441 \u0442\u0430\u043a\u043e\u0439-\u0442\u043e. \u041f\u0440\u043e\u0441\u0442\u043e \u0438 \u043f\u043e\u043d\u044f\u0442\u043d\u043e.<\/p>\n

\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u041f\u0440\u043e\u0435\u043a\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c<\/strong><\/p>\n

\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0443 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432. \u041a\u043b\u0430\u0434\u0435\u043c \u0444\u0430\u0439\u043b project.xsd \u0432 \/opt\/midpoint\/var\/schema\/<\/p>\n

\u0441 \u043a\u043e\u0434\u043e\u043c<\/p>\n

<xsd:schema elementFormDefault=\"qualified\"             targetNamespace=\"http:\/\/example.com\/xml\/ns\/mySchema\"   xmlns:tns=\"http:\/\/example.com\/xml\/ns\/mySchema\"   xmlns:a=\"http:\/\/prism.evolveum.com\/xml\/ns\/public\/annotation-3\"   xmlns:c=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/common-3\"   xmlns:xsd=\"http:\/\/www.w3.org\/2001\/XMLSchema\">   <xsd:complexType name=\"RoleExtensionType\">     <xsd:annotation>       <xsd:appinfo>         <a:extension ref=\"c:RoleType\"\/>       <\/xsd:appinfo>     <\/xsd:annotation>     <xsd:sequence> <xsd:element name=\"role_active\" type=\"xsd:boolean\" minOccurs=\"0\" maxOccurs=\"1\">         <xsd:annotation>           <xsd:appinfo>             <a:indexed>true<\/a:indexed>             <a:displayName>Active<\/a:displayName>             <a:displayOrder>1<\/a:displayOrder>             <a:help>ToDo<\/a:help>           <\/xsd:appinfo>         <\/xsd:annotation> <\/xsd:element>     <\/xsd:sequence>   <\/xsd:complexType>   <xsd:complexType name=\"OrgExtensionType\">     <xsd:annotation>       <xsd:appinfo>         <a:extension ref=\"c:OrgType\"\/>       <\/xsd:appinfo>     <\/xsd:annotation>     <xsd:sequence>       <xsd:element name=\"org_boss\" type=\"xsd:string\" minOccurs=\"0\" maxOccurs=\"unbounded\">         <xsd:annotation>           <xsd:appinfo>             <a:indexed>true<\/a:indexed>         <a:displayName>Org Bosses<\/a:displayName>             <a:displayOrder>138<\/a:displayOrder>             <a:help>ToDo<\/a:help>           <\/xsd:appinfo>         <\/xsd:annotation> <\/xsd:element>     <\/xsd:sequence>   <\/xsd:complexType> <\/xsd:schema><\/code><\/pre>\n
 \u041f\u0435\u0440\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c Midpoint<\/p>\n
\u0412 Configuration\\Import Object \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
\u043a\u043e\u0434<\/p>\n
<sequence xmlns=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/common-3\">   <name>Projects number<\/name>   <counter>1<\/counter>   <maxCounter>999999<\/maxCounter>   <allowRewind>true<\/allowRewind>   <maxUnusedValues>10<\/maxUnusedValues> <\/sequence><\/code><\/pre>\n
\u042d\u0442\u043e \u0441\u0447\u0435\u0442\u0447\u0438\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 1 \u0438\u0434\u0435\u0442 \u0434\u043e 999999 \u0434\u043b\u044f name \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445<\/p>\n
\u0412 Configuration\\Object Template\\ \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Project Role Object Template<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<item id=\"104\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP EMP001001 Person Project User from Project Role<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>a9291b83-3b40-4581-91c8-63f05410ed63<\/oid>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"105\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP Policy: Project Role only for Project User or Position User<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>c35b6362-1f81-4f87-917b-1921a984fb54<\/oid>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"5\">   <ref>assignment<\/ref>   <displayName>Assignment to Position Role Catalog<\/displayName>   <mapping id=\"9\">     <name>Name<\/name>     <source>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>OrgType<\/targetType>         <filter>           <q:equal>             <q:path>identifier<\/q:path>             <expression>               <trace>true<\/trace>               <script>                 <code>result = \"\\\\RC\\\\\" + user_employment_parent + \"\\\\\" + \"Position\"                   return result<\/code>               <\/script>             <\/expression>           <\/q:equal>         <\/filter>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"16\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCE Policy: Forward Role for Employment in EMP01001 Company<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <_metadata id=\"19\">         <provenance>           <acquisition id=\"20\">             <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"               type=\"c:UserType\">               <!-- administrator -->             <\/actorRef>             <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>             <timestamp>2025-03-24T10:12:58.273Z<\/timestamp>           <\/acquisition>         <\/provenance>       <\/_metadata>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>8e4b4ea4-22b7-4b09-98ce-aa8fd5ace849<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>if (user_employment_parent == \"EMP001001\")           {return true}           else{return false}<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item> <item id=\"17\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCE Policy: Forward Role for Employment in EMP01002 Company<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <_metadata id=\"19\">         <provenance>           <acquisition id=\"20\">             <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"               type=\"c:UserType\">               <!-- administrator -->             <\/actorRef>             <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>             <timestamp>2025-03-24T10:12:58.273Z<\/timestamp>           <\/acquisition>         <\/provenance>       <\/_metadata>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>047dcf56-3555-4940-aac4-50b15b9071a3<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>if (user_employment_parent == \"EMP001002\")           {return true}           else{return false}<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item> <mapping id=\"4\">   <name>000<\/name>   <strength>weak<\/strength>   <expression>     <script>       <code>return actor.personalNumber<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen74=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen74:user_boss<\/path>   <\/target> <\/mapping> <mapping id=\"13\">   <name>001<\/name>   <strength>strong<\/strength>   <source>     <_metadata id=\"17\">       <provenance>         <acquisition id=\"18\">           <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"             type=\"c:UserType\">             <!-- administrator -->           <\/actorRef>           <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>           <timestamp>2025-05-08T12:21:58.394Z<\/timestamp>         <\/acquisition>       <\/provenance>     <\/_metadata>     <path>c:name<\/path>   <\/source>   <expression>     <script>       <code>         return \"PRJ\" +         basic.stringify(midpoint.getSequenceCounter(\"c725fbca-2392-45a1-83ff-91f5e3fd989a\")).padLeft(6,'0')<\/code>     <\/script>   <\/expression>   <target>     <path>c:name<\/path>   <\/target>   <condition>     <script>       <code>if (basic.isEmpty(name))         {return true}         else         {         if (name.startsWith(\"PRJ\"))         {return false}         else         {return true}         }<\/code>     <\/script>   <\/condition> <\/mapping> <mapping id=\"21\">   <name>002<\/name>   <strength>weak<\/strength>   <expression>     <script>       <code>return \"EMP001001\"<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">       c:extension\/gen569:user_employment_parent<\/path>   <\/target> <\/mapping> <mapping id=\"107\">   <name>003<\/name>   <lifecycleState>active<\/lifecycleState>   <expression>     <script>       <code>return true<\/code>     <\/script>   <\/expression>   <target>     <path>c:indestructible<\/path>   <\/target> <\/mapping> <mapping id=\"31\">   <name>004<\/name>   <expression>     <script>       <code>return \"Positions and Projects\"<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen158=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen158:role_purpose_type<\/path>   <\/target> <\/mapping> <mapping id=\"118\">   <name>005<\/name>   <strength>strong<\/strength>   <source>     <path>c:name<\/path>   <\/source>   <source>     <path>c:identifier<\/path>   <\/source>   <source>     <path>c:extension\/role_active<\/path>   <\/source>   <expression>     <script>       <code>          if (role_active)         {         return name + \": \" + identifier         }         else         {         return \"[DEACTIVATED] \" + name + \": \" + identifier         }         <\/code>     <\/script>   <\/expression>   <target>     <path>c:displayName<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 item \u043f\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f\u043c \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0434\u043b\u044f \u0447\u0435\u0433\u043e<\/p>\n
mapping 4 — \u043f\u0438\u0448\u0435\u043c \u0432 \u0440\u043e\u043b\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0432 user_boss \u0442\u043e\u0433\u043e \u043a\u0442\u043e \u0435\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442(\u043f\u043e\u0442\u043e\u043c \u0441\u044e\u0434\u0430 \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0435\u0449\u0435 \u043a\u043e\u0433\u043e-\u0442\u043e)<\/p>\n
mapping 13 — \u0441\u043e\u0437\u0434\u0430\u0435\u043c name \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0440\u0430\u043d\u0435\u0435 \u0441\u0447\u0435\u0442\u0447\u0438\u043a \u043f\u043e OID<\/p>\n
mapping 21 — \u043f\u0438\u0448\u0435\u043c identifier \u0440\u043e\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u044d\u0442\u043e \u0434\u043b\u044f item 23, \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u0441\u0435\u0433\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043c\u0435\u043d\u044f\u0442\u044c<\/p>\n
\u0412 Configuration\\ArchyTypes \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project Role ArcheType<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<archetypePolicy>   <display>     <label>Project EMP001001<\/label>     <singularLabel>Project EMP001001<\/singularLabel>     <pluralLabel>Projects EMP001001<\/pluralLabel>     <icon>       <cssClass>fa fa-briefcase-clock<\/cssClass>       <color>#d88222<\/color>     <\/icon>   <\/display>    ...    <links>     <targetLink id=\"16\">       <name>from Company to Project<\/name>       <selector>         <type>c:RoleType<\/type>         <archetypeRef oid=\"f44dc355-31d3-499b-9854-e0ae277a60dc\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCE Company Role ArcheType -->         <\/archetypeRef>       <\/selector>     <\/targetLink>   <\/links> <\/archetypePolicy><\/code><\/pre>\n
\u0422\u0443\u0442 \u0441\u0440\u0430\u0437\u0443 \u0441\u043e\u0437\u0434\u0430\u0435\u043c TargetLink \u0432 POCE Company Role ArcheType  <\/p>\n
\u0438 \u043a\u043e\u0434<\/p>\n
<inducement id=\"18\">   <focusMappings>     <mapping id=\"7\">       <name>to costCenter<\/name>       <documentation>displayName from Company Role<\/documentation>       <authoritative>false<\/authoritative>       <strength>strong<\/strength>       <expression>         <script>           <code>             linkedDATA = midpoint.findLinkedTarget('from Company to Project')             return linkedDATA.displayName           <\/code>         <\/script>       <\/expression>       <target>         <path>costCenter<\/path>       <\/target>       <condition>         <script>           <code>linkedDATA = midpoint.findLinkedTarget('from Company to Project')             if (basic.isEmpty(linkedDATA))             {return false}             else{return !basic.isEmpty(linkedDATA.displayName)}<\/code>         <\/script>       <\/condition>     <\/mapping>   <\/focusMappings> <\/inducement><\/code><\/pre>\n
 \u0412 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0435 POCE Company Role ArcheType \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c <\/p>\n
<inducement id=\"13\">   <policyRule>     <name>Recompute Project Role on displayname change<\/name>     <policyConstraints>       <or id=\"13\">         <modification id=\"14\">           <item>c:displayName<\/item>         <\/modification>       <\/or>     <\/policyConstraints>     <policyActions>       <scriptExecution id=\"16\">         <object>           <linkSource id=\"40\">             <name>Company to Project<\/name>           <\/linkSource>         <\/object>         <executeScript xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">           <s:recompute \/>         <\/executeScript>       <\/scriptExecution>     <\/policyActions>   <\/policyRule> <\/inducement> ... <archetypePolicy>    ...    <links>      ...     <sourceLink id=\"51\">       <name>Company to Project<\/name>       <selector>         <type>c:RoleType<\/type>         <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project Role ArcheType -->         <\/archetypeRef>       <\/selector>     <\/sourceLink>   <\/links> <\/archetypePolicy> <\/archetype><\/code><\/pre>\n
 \u0420\u0435\u043a\u043e\u043c\u043f\u0443\u0442\u0438\u0442\u044c \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0430\u0441\u0441\u0430\u0438\u043c\u0435\u043d\u0442 \u0435\u0441\u043b\u0438 \u043c\u0435\u043d\u0435\u0442\u0441\u044f displayName<\/p>\n
\u0418\u0437 \u043f\u043e\u0434 \u0430\u0434\u043c\u0438\u043d\u0430 \u0440\u043e\u043b\u044c \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f, name \u0437\u0430\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u043d\u0430\u0434\u043e \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u043d\u0435\u043b\u044c\u0437\u044f \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043e\u043d \u0433\u0435\u043d\u0435\u0440\u0438\u0442\u0441\u044f.<\/p>\n
 \u0422\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0447\u0442\u043e\u0431\u044b \u044d\u0442\u0430 \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u043b\u0430 User \u041f\u0440\u043e\u0435\u043a\u0442<\/p>\n
\u0412 Configuration\\Object Template\\ \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Person Project User from Project Role Object Template<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<mapping id=\"2\">   <name>01<\/name>   <source>     <path>c:name<\/path>   <\/source>   <expression \/>   <target>     <path>c:name<\/path>   <\/target> <\/mapping> <mapping id=\"4\">   <name>02<\/name>   <source>     <path xmlns:gen56=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen56:user_boss<\/path>   <\/source>   <expression \/>   <target>     <path>c:extension\/person_boss<\/path>   <\/target> <\/mapping> <mapping id=\"14\">   <name>03<\/name>   <source>     <path>c:extension\/user_employment_parent<\/path>   <\/source>   <expression \/>   <target>     <path>c:organization<\/path>   <\/target> <\/mapping> <mapping id=\"15\">   <name>04<\/name>   <source>     <path>c:displayName<\/path>   <\/source>   <expression>     <script>       <code>return displayName<\/code>     <\/script>   <\/expression>   <target>     <path>c:fullName<\/path>   <\/target> <\/mapping> <mapping id=\"21\">   <name>05<\/name>   <source>     <path>c:costCenter<\/path>   <\/source>   <expression \/>   <target>     <path>c:costCenter<\/path>   <\/target> <\/mapping> <mapping id=\"22\">   <name>06<\/name>   <source>     <path>c:description<\/path>   <\/source>   <expression \/>   <target>     <path>c:description<\/path>   <\/target> <\/mapping> <mapping id=\"23\">   <name>07<\/name>   <source>     <path>c:documentation<\/path>   <\/source>   <expression \/>   <target>     <path>c:documentation<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
\u0412 Configuration\\ArchyTypes \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project User ArcheType<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
... <archetypePolicy>   <display>     <icon>       <cssClass>fa fa-briefcase-clock<\/cssClass>       <color>#2d860a<\/color>     <\/icon>   <\/display> <\/archetypePolicy> <\/archetype><\/code><\/pre>\n
 \u0412 Configuration\\Object Template\\ \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Project User Object Template<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<item id=\"3\">   <ref>assignment<\/ref>   <displayName>Assignment to Company Role<\/displayName>   <mapping id=\"9\">     <source>       <path>organization<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <filter>           <q:text>identifier = $organization and archetypeRef matches (oid =             \"f44dc355-31d3-499b-9854-e0ae277a60dc\")<\/q:text>         <\/filter>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"4\">   <ref>assignment<\/ref>   <displayName>Assignment to Project Role<\/displayName>   <mapping id=\"9\">     <source>       <path>name<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <filter>           <q:text>name = $name and archetypeRef matches (oid =             \"49952180-49a0-4884-a8d1-5e1a50f26fa1\")<\/q:text>         <\/filter>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item><\/code><\/pre>\n
\u0412 POCP EMP001001 Project User ArcheType \u0432 Object template reference \u0443\u0442\u044b\u043a\u0430\u0435\u043c \u0432 \u044d\u0442\u043e\u0442 \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442<\/p>\n
\u041f\u0440\u043e\u0431\u0443\u0435\u043c, \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u041f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u0438\u0437 \u043f\u043e\u0434 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430<\/p>\n
<\/figure>\n
 \u0417\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0430. \u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0438\u0448\u0435\u043c \u0432 Identifier \u0442\u0430\u043a \u043d\u0430\u0434\u043e!<\/p>\n
\u0421\u043e\u0437\u0434\u0430\u043b\u0441\u044f \u041f\u0440\u043e\u0435\u043a\u0442 Role<\/p>\n
<\/figure>\n
 \u0418 \u043f\u0440\u043e\u0435\u043a\u0442 User<\/p>\n
<\/figure>\n
\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u044f \u0441\u043e\u0437\u0434\u0430\u0434\u0438\u043c Forward \u0440\u043e\u043b\u0438 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u044b.  <\/p>\n
\u0421\u043e\u0437\u0434\u0430\u043c \u0447\u0435\u0440\u043d\u0443 \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP Policy: Forward Role only for Project User  \u0432 \u043d\u0435\u0439 \u043a\u043e\u0434<\/p>\n
<inducement id=\"30\">   <policyRule>     <name>Member must have archetype POCP EMP001001 Project User ArcheType<\/name>     <policyConstraints>       <requirement id=\"31\">         <targetRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project User ArcheType -->         <\/targetRef>       <\/requirement>     <\/policyConstraints>     <policyActions>       <enforcement>         <name>Enf<\/name>       <\/enforcement>     <\/policyActions>     <evaluationTarget>assignment<\/evaluationTarget>   <\/policyRule> <\/inducement><\/code><\/pre>\n
 \u0422\u0443\u0442 \u0440\u0435\u0444 \u043d\u0430 \u0430\u0440\u0445\u0435\u0442\u0438\u043f POCP EMP001001 Project User ArcheTyp   <\/p>\n
\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0447\u0435\u0440\u043d\u0443\u044e \u0440\u043e\u043b\u044c  POCP Policy: Project Role only for Project User or Position User  <\/p>\n
\u0432 \u043d\u0435\u0439 \u043a\u043e\u0434<\/p>\n
<inducement id=\"30\">   <policyRule>     <name>Member must have archetype POCE Position User ArcgeType or POCP EMP001001 Project Role       ArcheType<\/name>     <policyConstraints>       <or id=\"43\">         <requirement id=\"44\">           <name>02<\/name>           <targetRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"             type=\"c:ArchetypeType\">             <!-- POCP EMP001001 Project User ArcheType -->           <\/targetRef>         <\/requirement>       <\/or>       <or id=\"435\">         <requirement id=\"433\">           <name>01<\/name>           <targetRef oid=\"0d1b1269-0011-49e6-b9f1-e62e7827dfed\" relation=\"org:default\"             type=\"c:ArchetypeType\">             <!-- POCE Position User ArcheType -->           <\/targetRef>         <\/requirement>       <\/or>     <\/policyConstraints>     <policyActions>       <enforcement>         <name>Enf<\/name>       <\/enforcement>     <\/policyActions>     <evaluationTarget>assignment<\/evaluationTarget>   <\/policyRule> <\/inducement><\/code><\/pre>\n
 \u0422\u0443\u0442 \u0440\u0435\u0444 \u043d\u0430 \u0430\u0440\u0445\u0435\u0442\u0438\u043f POCP EMP001001 Project User ArcheTyp  <\/p>\n
\u0412 Configuration\\Object Template\\ \u0432 POCE Forward Role Object Template \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
<item id=\"105\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP Policy: Project Role only for Project User or Position User<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen569:role_purpose_type<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>c35b6362-1f81-4f87-917b-1921a984fb54<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>if (role_purpose_type == \"Positions and Projects\")           {return true}           else{return false}<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item> <item id=\"115\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCE Policy: Forward Role only for Project User<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen569:role_purpose_type<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>5fd6a8c5-7d61-4314-a37c-a5975717b1cf<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>            if (role_purpose_type == \"Project\")           {return true}           else{return false} <\/code>       <\/script>     <\/condition>   <\/mapping> <\/item><\/code><\/pre>\n
\u0412\u0441\u0435 \u0440\u043e\u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u0438\u0437 Windows MS AD \u0442\u0430\u043a \u0447\u0442\u043e \u043d\u0430\u043a\u0438\u0434\u044b\u0432\u0430\u044e \u0442\u0430\u043c \u0433\u0440\u0443\u043f\u043f, \u0430 \u0435\u0449\u0435 \u0441\u043e\u0437\u0434\u0430\u044e \u0432 \u0440\u043e\u043b\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 Positions \u0432 OOO ODN \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e \u0440\u0435\u043a\u043e\u043d\u0441\u0438\u043b\u044f\u0446\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u0430 Windows MS AD OOO ODIN Forward Roles, \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u043e\u043b\u044f\u0445 \u043c\u0435\u043d\u044f\u044e Porpuse Type \u043d\u0430 Project \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u044e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0440\u043e\u043b\u0438<\/p>\n
<\/figure>\n
 \u0414\u0430 \u0438 \u0434\u0435\u043b\u0430\u0435\u043c \u0440\u0435\u043a\u043e\u043d\u0441\u0438\u043b\u044f\u0446\u0438\u044e MS AD group \u0432 Windows MS AD OOO ODIN <\/p>\n
\u0420\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c, \u043e\u043d\u0438 \u0437\u0430\u043f\u0438\u0448\u0443\u0442 \u0432 User \u041f\u0440\u043e\u044d\u043a\u0442 \u0432 Forwerd roles \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c! \u041d\u043e \u044d\u0442\u043e \u043d\u0430\u0434\u043e \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u0440\u043e\u0442\u0430\u0449\u0438\u0442\u044c \u0432 User \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c.<\/p>\n
\u0412 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project Role ArcheType<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<inducement id=\"1226\">   <focusMappings>     <mapping id=\"7\">       <name>11<\/name>       <documentation>get Forward Roles from Project user<\/documentation>       <authoritative>true<\/authoritative>       <strength>strong<\/strength>       <expression>         <script>           <code>linkedDATA = midpoint.findLinkedSource('from Project User to me')             if (basic.isEmpty(linkedDATA))             {return \"NO CONNECTION\"}             else             {             return basic.getExtensionPropertyValues(linkedDATA,             \"http:\/\/example.com\/xml\/ns\/mySchema\", \"person_forward_roles\")}<\/code>         <\/script>       <\/expression>       <target>         <path>$focus\/extension\/user_forward_roles<\/path>         <set>           <predefined>all<\/predefined>         <\/set>       <\/target>     <\/mapping>   <\/focusMappings> <\/inducement> ... <archetypePolicy>    ...    <links>     <sourceLink id=\"36\">       <name>from Project User to me<\/name>       <selector>         <type>c:UserType<\/type>         <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project User ArcheType -->         <\/archetypeRef>       <\/selector>     <\/sourceLink>      ...    <\/links> <\/archetypePolicy> <\/archetype>A \u0432 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project Role ArcheType \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/code><\/pre>\n
 A \u0432 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project Role ArcheType<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
... <inducement id=\"1222\">   <policyRule>     <name>Recompute Project Role on Project User Forward Roles change<\/name>     <policyConstraints>       <or id=\"13\">         <modification id=\"3344\">           <item xmlns:gen26=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen26:person_forward_roles<\/item>         <\/modification>       <\/or>     <\/policyConstraints>     <policyActions>       <scriptExecution id=\"16\">         <object>           <linkTarget id=\"17\">             <linkType>from Project User to Project Role<\/linkType>           <\/linkTarget>         <\/object>         <executeScript xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">           <s:recompute \/>         <\/executeScript>         <privileges>           <runPrivileged>true<\/runPrivileged>         <\/privileges>       <\/scriptExecution>     <\/policyActions>   <\/policyRule> <\/inducement> ... <archetypePolicy>    ...    <links>     <targetLink id=\"7\">       <name>from Project User to Project Role<\/name>       <selector>         <type>c:RoleType<\/type>         <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project Role ArcheType -->         <\/archetypeRef>       <\/selector>     <\/targetLink>   <\/links> <\/archetypePolicy> <\/archetype><\/code><\/pre>\n
 \u0412\u043a\u0430\u0447\u0430\u043b\u043ec\u044c \u0432 \u0440\u043e\u043b\u044c Project, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043a\u043e\u0433\u0434\u0430 \u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0430 User  \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439, \u0447\u0435\u0440\u0435\u0437 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0432 \u041f\u0440\u043e\u0435\u043a\u0442 role… \u0438 \u0432 \u044d\u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0434\u043e \u0432 User \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0432\u043a\u0430\u0447\u0430\u0442\u044c Forward \u0440\u043e\u043b\u0438 \u0438\u0437 \u0440\u043e\u043b\u0438 \u041f\u0440\u043e\u0435\u043a\u0442\u0430! \u041f\u043e\u043a\u0430 \u0432\u043e\u043e\u0431\u0449\u0435 \u0432\u0441\u0435 \u043f\u0440\u043e\u0441\u0442\u043e, \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0435 \u043a\u0430\u043a\u043e\u0439 \u0444\u0438\u043d\u0442 \u0431\u0443\u0434\u0435\u0442 \u0434\u0430\u043b\u044c\u0448\u0435!  <\/p>\n
\u0412 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCE Position User ArcheType<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
... <inducement id=\"12222\">   <focusMappings>     <mapping id=\"8\">       <name>01<\/name>       <authoritative>false<\/authoritative>       <exclusive>true<\/exclusive>       <strength>strong<\/strength>       <expression>         <script>           <code>             fr_list = []             fr_postion_roles = midpoint.findLinkedTargets('From Project Role to Position             User').collect { basic.getExtensionPropertyValues(it,             \"http:\/\/example.com\/xml\/ns\/mySchema\", \"user_forward_roles\")}             for (i in fr_postion_roles)             {             fr_num = 0             for(ii in i)             {             if (ii.startsWith(\"NO CONNECTION\"))             fr_num = 1             }             if (fr_num !=1)             {for (ii in i){fr_list.add(ii)}}             }             return fr_list           <\/code>         <\/script>       <\/expression>       <target>         <path>extension\/person_forward_roles_inherited<\/path>       <\/target>     <\/mapping>   <\/focusMappings> <\/inducement> ... <archetypePolicy>    ...    <links>      ...    <\/targetLink>             <targetLink id=\"300085\">       <name>From Project Role to Position User<\/name>       <selector>         <type>c:RoleType<\/type>         <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project Role ArcheType -->         <\/archetypeRef>       <\/selector>     <\/targetLink>   <\/links> <\/archetypePolicy> <\/archetype><\/code><\/pre>\n
\u0410 \u0432 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP EMP001001 Project Role ArcheType<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
... <inducement id=\"1234\">   <policyRule>     <name>Recompute Users Position<\/name>     <policyConstraints>       <or id=\"13\">         <modification id=\"22\">           <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen365:user_forward_roles<\/item>         <\/modification>       <\/or>     <\/policyConstraints>     <policyActions>       <scriptExecution id=\"16\">         <object>           <linkSource id=\"131\">             <name>from Position User to me<\/name>           <\/linkSource>         <\/object>         <executeScript xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">           <s:recompute \/>         <\/executeScript>         <privileges>           <runPrivileged>true<\/runPrivileged>         <\/privileges>       <\/scriptExecution>     <\/policyActions>   <\/policyRule> <\/inducement> ... <archetypePolicy>    ...    <sourceLink id=\"1227\">     <name>from Position User to me<\/name>     <selector>       <type>c:RoleType<\/type>       <archetypeRef oid=\"0d1b1269-0011-49e6-b9f1-e62e7827dfed\" relation=\"org:default\"         type=\"c:ArchetypeType\">         <!-- POCE Position User ArcheType -->       <\/archetypeRef>     <\/selector>   <\/sourceLink>    ...  <\/links> <\/archetypePolicy> <\/archetype><\/code><\/pre>\n
\u0412 User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432  Forward Roles Inherited \u043f\u043e\u043f\u0430\u0434\u0430\u0435\u0442, \u043d\u043e \u0434\u043b\u044f \u0441\u043b\u0443\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043a\u0430 AD \u043d\u0430 User \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430\u0434\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u044c<\/p>\n
\u0412 Configuration\\Object Template\\ \u0432POCE Person Position MS AD Account Object Template<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<mapping id=\"13\">   <name>10<\/name>   <exclusive>true<\/exclusive>   <source>     <path>c:extension\/person_forward_roles<\/path>   <\/source>   <source>     <path>c:extension\/person_forward_roles_inherited<\/path>   <\/source>   <expression>     <script>       <relativityMode>absolute<\/relativityMode>       <code>         result = []          for (i in person_forward_roles)         {         if (i.startsWith(\"MSAD\"))         {ii = i.tokenize( '|' )         result.add(ii[2])}         }          for (i in person_forward_roles_inherited)         {         if (i.startsWith(\"MSAD\"))         {ii = i.tokenize( '|' )         result.add(ii[2])         }          return result.unique()<\/code>     <\/script>   <\/expression>   <target>     <path>c:extension\/person_forward_roles<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0418\u0434\u0435\u043c \u0434\u0430\u043b\u044c\u0448\u0435, \u0442\u0430\u0449\u0438\u043c \u0434\u0430\u043b\u044c\u0448\u0435 \u0432 \u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e<\/p>\n
\u0410 \u0432 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0435 POCE Position User ArcheType<\/p>\n
\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0434\u043e \u0432\u0438\u0434\u0430<\/p>\n
<inducement id=\"1222\">   <policyRule>     <name>Recompute Position Role on Position User Forward Roles change<\/name>     <policyConstraints>       <or id=\"13\">         <modification id=\"3342\">           <item>c:activation\/c:administrativeStatus<\/item>         <\/modification>         <modification id=\"3344\">           <item xmlns:gen26=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen26:person_forward_roles<\/item>         <\/modification>         <modification id=\"300087\">           <item xmlns:gen26=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen26:person_forward_roles_inherited<\/item>         <\/modification>       <\/or>     <\/policyConstraints>     <policyActions>       <scriptExecution id=\"16\">         <object>           <linkTarget id=\"17\">             <linkType>From Position Role to Position User<\/linkType>           <\/linkTarget>         <\/object>         <executeScript xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">           <s:recompute \/>         <\/executeScript>         <privileges>           <runPrivileged>true<\/runPrivileged>         <\/privileges>       <\/scriptExecution>     <\/policyActions>   <\/policyRule> <\/inducement><\/code><\/pre>\n
 \u0410 \u0432 Configuration\\ArchyTypes \u0432 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0435 POCE Position Role ArcheType<\/p>\n
\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u043a\u043e\u0434<\/p>\n
<inducement id=\"1226\">   <focusMappings>     <mapping id=\"7\">       <name>11<\/name>       <documentation>get Forward Roles from user<\/documentation>       <authoritative>true<\/authoritative>       <strength>strong<\/strength>       <expression>         <script>           <code>linkedDATA = midpoint.findLinkedSource('from me Position Role to Position User')             if (basic.isEmpty(linkedDATA))             {return \"NO CONNECTION\"}             else             {             f1 = basic.getExtensionPropertyValues(linkedDATA, \"http:\/\/example.com\/xml\/ns\/mySchema\",             \"person_forward_roles\")             f2 = basic.getExtensionPropertyValues(linkedDATA, \"http:\/\/example.com\/xml\/ns\/mySchema\",             \"person_forward_roles_inherited\")             f1 += f2             return f1.unique()             }<\/code>         <\/script>       <\/expression>       <target>         <path>$focus\/extension\/user_forward_roles<\/path>         <set>           <predefined>all<\/predefined>         <\/set>       <\/target>     <\/mapping>   <\/focusMappings> <\/inducement> ... <\/archetype><\/code><\/pre>\n
 \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u0435\u043d\u044f\u0435\u043c \u0434\u043e \u0432\u0438\u0434\u0430<\/p>\n
<inducement id=\"1234\">   <policyRule>     <name>Recompute Users Employment<\/name>     <policyConstraints>       <or id=\"13\">         <modification id=\"22\">           <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen365:user_forward_roles<\/item>         <\/modification>         <modification id=\"22231\">           <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen365:user_forward_roles_inherited<\/item>         <\/modification>         <modification id=\"21240\">           <item xmlns:gen550=\"http:\/\/example.com\/xml\/ns\/mySchema\">             c:extension\/gen550:user_account_number<\/item>         <\/modification>       <\/or>     <\/policyConstraints>     <policyActions>       <scriptExecution id=\"16\">         <object>           <linkSource id=\"131\">             <name>from Employment User to me<\/name>           <\/linkSource>         <\/object>         <executeScript xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">           <s:recompute \/>         <\/executeScript>         <privileges>           <runPrivileged>true<\/runPrivileged>         <\/privileges>       <\/scriptExecution>     <\/policyActions>   <\/policyRule> <\/inducement><\/code><\/pre>\n
 \u0412\u0441\u0435 \u0434\u0430\u043b\u044c\u0448\u0435 \u043d\u0435  \u043d\u0430\u0434\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u0440\u043e\u043b\u0438 \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043c\u044b \u0432 User Forward Roles \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c User Forward Roles Inherited, \u0438\u0445 \u043d\u0430\u0434\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0442\u044c \u0447\u0442\u043e\u0431\u044b, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u043f\u0438\u0441\u043a\u0435  User Forward Roles \u0435\u0441\u0442\u044c \u0440\u043e\u043b\u044c NICKNAME \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0432\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u0440\u0430\u0432 \u0432 \u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0435\u0441\u043b\u0438 \u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d AD \u0430\u043a\u043a\u0430\u0443\u043d\u0442 — \u043a\u0441\u0442\u0430\u0442\u0438 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u0432\u0441\u0435\u0445 \u043f\u0440\u0430\u0432 \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e AD \u0433\u0440\u0443\u043f\u043f… \u043d\u0430\u0434\u043e \u043f\u043e\u0434\u0443\u043c\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043b\u0438 \u044d\u0442\u043e!<\/p>\n
\u0414\u0435\u043b\u0430\u0435\u043c \u0442\u0435\u043f\u0435\u0440\u044c GUI \u0434\u043b\u044f \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430<\/strong><\/p>\n
\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d Object Collection \u0432 Configuration\\Import object \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<objectCollection>   <name>my-projects-view<\/name>   <type>RoleType<\/type>   <filter>     <text>       extension\/user_boss contains `actor.personalNumber`     <\/text>   <\/filter> <\/objectCollection><\/code><\/pre>\n
 \u0412 Configuration\\System\\Admin GUI configuration\\Object detail views  <\/p>\n
\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434\u043e\u043c<\/p>\n
<objectCollectionView id=\"100320\">   <identifier>my-projects-view<\/identifier>   <display>     <label>My Projects<\/label>     <pluralLabel>My Projects<\/pluralLabel>     <icon>       <cssClass>fa fa-briefcase-clock<\/cssClass>     <\/icon>   <\/display>   <visibility>hidden<\/visibility>   <column id=\"100331\">     <name>ID<\/name>     <path>c:name<\/path>     <display>       <label>ID<\/label>     <\/display>   <\/column>   <column id=\"100333\">     <name>Project Name<\/name>     <path>c:identifier<\/path>     <display>       <label>Project Name<\/label>     <\/display>     <previousColumn>Company<\/previousColumn>   <\/column>   <column id=\"100335\">     <name>Company<\/name>     <path>c:extension\/user_employment_parent<\/path>     <display>       <label>Company<\/label>     <\/display>     <previousColumn>ID<\/previousColumn>   <\/column>   <column id=\"100337\">     <name>Members<\/name>     <display>       <label>Members<\/label>     <\/display>     <previousColumn>Description<\/previousColumn>     <export>       <expression>         <script>           <code>import com.evolveum.midpoint.prism.query.*             import com.evolveum.midpoint.xml.ns._public.common.common_3.*              query =             prismContext.queryFor(UserType.class).item(AssignmentHolderType.F_ROLE_MEMBERSHIP_REF).ref(object.getOid()).build();             objects = midpoint.searchObjects(UserType.class, query)             return (objects.size() - 1);<\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <column id=\"100342\">     <name>Description<\/name>     <path>c:description<\/path>     <display>       <label>Description<\/label>     <\/display>     <previousColumn>Project Name<\/previousColumn>   <\/column>   <column id=\"100344\">     <name>Roles<\/name>     <path xmlns:gen458=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen458:user_forward_roles<\/path>     <display>       <label>Roles<\/label>     <\/display>     <previousColumn>Members<\/previousColumn>     <export>       <expression>         <script>           <code>if (basic.isEmpty(input))             {return \"0\"}             else             {             for (i in input)             {             if (basic.stringify(i) == \"NO CONNECTION\")             {return \"0\"}              }              return input.size()}<\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <type>c:RoleType<\/type>   <collection>     <collectionRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/collectionRef>     <baseCollectionRef>       <collectionRef oid=\"b2119133-e6a0-4a93-bb1f-8d48ee95b123\" relation=\"org:default\"         type=\"c:ObjectCollectionType\">         <!-- my-projects-view -->       <\/collectionRef>     <\/baseCollectionRef>   <\/collection> <\/objectCollectionView> ... <\/objectCollectionViews><\/code><\/pre>\n
 \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0447\u0435\u0440\u043d\u0443\u044e \u0440\u043e\u043b\u044c POCP GUI Project Manager<\/p>\n
\u041a\u043e\u0434<\/p>\n
<authorization id=\"2\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#read<\/action>   <object id=\"7\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>         extension\/user_boss contains `actor.personalNumber`       <\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"3\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#modify<\/action>   <phase>request<\/phase>   <object id=\"7\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>         extension\/user_boss contains `actor.personalNumber`       <\/q:text>     <\/filter>   <\/object>   <item>assignment<\/item>   <item>extension\/user_boss<\/item>   <item>roleMembershipRef<\/item>   <item>documentation<\/item>   <item>description<\/item>   <item>identifier<\/item>   <item>extension\/user_employment_parent<\/item>   <item>extension\/role_active<\/item> <\/authorization> <authorization id=\"4\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#modify<\/action>   <phase>execution<\/phase>   <object id=\"7\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>         extension\/user_boss contains `actor.personalNumber`       <\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"5\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <phase>execution<\/phase>   <object id=\"7\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>   <\/object> <\/authorization> <authorization id=\"1\">   <name>to see Roles folder<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-ui-3#rolesView<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-ui-3#role<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-ui-3#roleDetails<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-bulk-3#recompute<\/action> <\/authorization> <authorization id=\"6\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <phase>request<\/phase>   <object id=\"7\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>   <\/object>   <item>documentation<\/item>   <item>description<\/item>   <item>assignment<\/item>   <item>identifier<\/item>   <item>extension\/user_employment_parent<\/item>   <item>extension\/role_active<\/item> <\/authorization> <authorization id=\"31\">   <name>create-usr-project-from-role-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <phase>execution<\/phase>   <object id=\"1233534\">     <type>UserType<\/type>     <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project User ArcheType -->     <\/archetypeRef>   <\/object> <\/authorization> <authorization id=\"20\">   <name>assign-project-role-to-project-user<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#assign<\/action>   <object id=\"1768\">     <type>UserType<\/type>     <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project User ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/person_boss contains `actor.personalNumber` and activation\/effectiveStatus         != 'disabled'\"<\/q:text>     <\/filter>   <\/object>   <target id=\"1\">     <type>RoleType<\/type>     <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Forward Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/role_purpose_type = 'Project' or extension\/role_purpose_type = 'Positions         and Projects'<\/q:text>     <\/filter>   <\/target>   <relation>org:default<\/relation> <\/authorization> <authorization id=\"21\">   <name>pocp-read-user-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#read<\/action>   <object id=\"1768\">     <type>UserType<\/type>     <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project User ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/person_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object>   <item>assignment<\/item>   <item>name<\/item>   <item>fullName<\/item>   <item>costCenter<\/item>   <item>roleMembershipRef<\/item>   <item>organization<\/item> <\/authorization> <authorization id=\"23\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#modify<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#delete<\/action>   <phase>execution<\/phase>   <object id=\"1768\">     <type>UserType<\/type>     <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project User ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/person_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"1765\">   <name>assign-project-roles-to-subordinates<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#assign<\/action>   <target id=\"1\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber` and extension\/role_active != false<\/q:text>     <\/filter>   <\/target>   <relation>org:default<\/relation> <\/authorization><\/code><\/pre>\n
 \u0412 \u0440\u043e\u043b\u0438 POCE GUI My Subordinates \u0434\u0435\u043b\u0430\u0435\u043c \u0432 \u043d\u0435\u0451 \u0438\u043d\u0434\u0443\u0441\u043c\u0435\u043d\u0442.<\/p>\n
  \u0412 \u0440\u043e\u043b\u044c POCE GUI My IDM Objects \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
... <group id=\"17659\">   <identifier>my-projects<\/identifier>   <display>     <label>My Projects<\/label>     <icon>       <cssClass>fa fa-briefcase-clock<\/cssClass>     <\/icon>   <\/display>   <collection>     <filter>       <q:text>extension\/person_boss contains `actor.personalNumber` and archetypeRef matches (oid =         'c2523d38-76ed-43bc-9e73-5158ed225042')<\/q:text>     <\/filter>   <\/collection> <\/group> <\/targetSelection> ... <\/accessRequest> <\/adminGuiConfiguration> <\/role> <\/code><\/pre>\n
 \u0417\u0430\u0445\u043e\u0434\u0438\u043c \u043f\u043e\u0434 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u043e\u043c, \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e \u044d\u0442\u043e \u0432\u0430\u0436\u043d\u043e \u0443 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u043e\u043c \u0435\u0441\u0442\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438 \u0438\u043c \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442.<\/p>\n
\u0412 Administartion \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c Roles \u0430 \u0432 \u043d\u0435\u0439 My Projects. \u041d\u0430 \u043a\u043d\u043e\u043f\u043a\u0443 New role \u043d\u0435 \u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435, \u044f \u0435\u0451 \u043d\u0435 \u0445\u043e\u0442\u0435\u043b \u0438 \u043e\u043d\u0430 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0434\u0435\u043b\u0430\u0435\u0442.<\/p>\n
<\/figure>\n
 \u0421\u043e\u0437\u0434\u0430\u0451\u043c \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442<\/p>\n
<\/figure>\n
 \u0412 Identifier \u043f\u0438\u0448\u0435\u043c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0435 \u043f\u0443\u0441\u0442\u044b\u043c \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u044c\u0441\u044f.<\/p>\n
<\/figure>\n
\u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0430 \u043e\u043d \u043f\u0435\u0440\u0432\u044b\u0439, \u0430 \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e \u043e\u043d 68. \u042d\u0442\u043e \u0432\u0441\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u044b \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u043c\u0435\u043d\u044f\u0442\u044c, \u043d\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e, \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u0447\u0442\u043e name \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c. \u0410 \u0438 \u0432 User\u2019s Boss \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0441\u0435\u0431\u044f, \u0430 \u0442\u043e \u0441\u0440\u0430\u0437\u0443 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u0435\u0442 \u0432\u043b\u0430\u0434\u0435\u0442\u044c, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043c\u043e\u0447\u044c \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c, \u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u0433\u043e \u0442\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0438 \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u0435\u043c\u0443 \u0443\u0431\u0435\u0440\u0438 \u043c\u0435\u043d\u044f… \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0441\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0447\u0442\u043e \u043e\u043d \u0432\u0441\u0435\u0433\u0434\u0430 \u0443 \u043a\u043e\u0433\u043e-\u0442\u043e \u0435\u0441\u0442\u044c!  <\/p>\n
\u0417\u0430\u043f\u0440\u043e\u0441\u0438\u043c \u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438\u0434\u0435\u043c \u0432 Request Access<\/p>\n
<\/figure>\n
 \u0416\u043c\u0435\u043c \u043d\u0430 My Project, \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043d\u0430\u0448 \u043f\u0440\u043e\u0435\u043a\u0442 \u0442\u0443\u0442 \u043e\u043d \u0443\u0436\u0435 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u043e\u043c<\/p>\n
<\/figure>\n
 \u0418 \u0432 \u0434\u0435\u0440\u0435\u0432\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0440\u043e\u043b\u0435\u0439 \u0432\u044b\u0445\u043e\u0434\u0438\u043c \u043d\u0430 \u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0432 OOO ODIN<\/p>\n
<\/figure>\n
\u0416\u043c\u0435\u043c \u0434\u0430\u043b\u044c\u0448\u0435 \u0434\u0430\u043b\u044c\u0448\u0435 \u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442, \u0430 \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f Linked Object \u043e\u043f\u044f\u0442\u044c \u0431\u0443\u0434\u0443 \u0434\u0435\u043b\u0430\u0442\u044c \u0442\u0430\u0441\u043a\u0443 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0440\u0435\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 Role \u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442 User.<\/p>\n
\u0417\u0430\u0445\u043e\u0434\u0438\u043c \u0432 Administration\\Server Tasks\\Iterative action tasks \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c POCP Recompute Project roles if Project User has been mod \u0438 \u043d\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0435\u0433\u043e \u043a\u043e\u0434\u043e\u043c<\/p>\n
<schedule>   <recurrence>recurring<\/recurrence>   <interval>300<\/interval> <\/schedule> <activity>   <work>     <iterativeScripting>       <objects>         <type>c:UserType<\/type>         <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"           type=\"c:ArchetypeType\">         <\/archetypeRef>         <query>           <q:filter>             <q:and>               <q:text>                 archetypeRef matches (oid = 'c2523d38-76ed-43bc-9e73-5158ed225042') and                 assignment\/@metadata\/storage\/createTimestamp greater ```                 dateminus5m = basic.addDuration(basic.currentDateTime(), \"-PT5M\")                 return dateminus5m                 ``` <\/q:text>             <\/q:and>           <\/q:filter>         <\/query>         <useRepositoryDirectly>true<\/useRepositoryDirectly>       <\/objects>       <scriptExecutionRequest xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">         <s:action>           <s:type>execute-script<\/s:type>           <s:parameter>             <s:name>script<\/s:name>             <s:value xsi:type=\"c:ScriptExpressionEvaluatorType\">               <code>                 import com.evolveum.midpoint.xml.ns._public.common.common_3.*                 import com.evolveum.midpoint.prism.delta.builder.*                 import com.evolveum.midpoint.model.api.*                  role_name = input.name                 query_role= midpoint.queryFor(RoleType.class, \"archetypeRef matches (oid =                 '49952180-49a0-4884-a8d1-5e1a50f26fa1') and name equal '$role_name'\")                 result_role = midpoint.searchObjects(query_role)                 midpoint.recompute(RoleType.class, basic.stringify(result_role.oid))                 <\/code>             <\/s:value>           <\/s:parameter>         <\/s:action>       <\/scriptExecutionRequest>     <\/iterativeScripting>   <\/work> <\/activity><\/code><\/pre>\n
\u0422\u0435\u043f\u0435\u0440\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u043c\u0438\u043d\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 Forwad \u0440\u043e\u043b\u044f\u043c\u0438 \u043f\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 Role.<\/p>\n
\u0412\u044b\u0434\u0430\u0434\u0438\u043c \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u043c \u0438\u0434\u0435\u043c \u0432 Request Access \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 EMP001001(OOO ODIN) \u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0440\u043e\u043b\u0435\u0439 \u0434\u043b\u044f \u043f\u043e\u0437\u0438\u0446\u0438\u0439 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442 Role.  <\/p>\n
<\/figure>\n
\u0418 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0435\u0441\u043b\u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0432\u043e\u044e \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u0432 Members \u0442\u043e \u0432\u0438\u0434\u0438\u0442 \u0447\u0442\u043e \u0442\u0430\u043c \u043f\u0440\u043e\u0435\u043a\u0442 User \u0438 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0437\u0438\u0446\u0438\u044f User<\/p>\n
<\/figure>\n
\u0412 c\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0432\u0438\u0434\u0438\u0442 \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u043e\u043b\u0435\u0439 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0443 Roles 5 \u0438 \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0447\u043b\u0435\u043d\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Members 1<\/p>\n
<\/figure>\n
 \u041a\u0441\u0442\u0430\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u0443 \u043d\u0430\u0434\u043e \u0441\u0435\u0431\u044f \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u043f\u0440\u043e\u0435\u043a\u0442, \u0441\u0432\u043e\u0451 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u043f\u043e\u0437\u0438\u0446\u0438\u044e!  <\/p>\n
\u0422\u0435\u043f\u0435\u0440\u044c \u043a\u043e\u0433\u0434\u0430 \u0443 \u043d\u0430\u0441 \u0432\u0441\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u0442\u0441\u044f \u0441\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u0434\u0443\u043c\u0430\u0442\u044c \u043a\u0430\u043a \u043e\u0442\u0431\u0438\u0440\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0443 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u0445 \u0438 \u0440\u043e\u043b\u0438 \u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430! Midpoint \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0433\u043e\u0442\u043e\u0432 \u0447\u0442\u043e \u0442\u043e-\u043e\u0442\u0431\u0438\u0440\u0430\u0442\u044c, \u043e\u043d \u0440\u0430\u0441\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u0447\u0442\u043e \u0438\u0441\u0447\u0435\u0437\u043d\u0435\u0442 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c! \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u043c \u043d\u0443\u0436\u043d\u044b \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043a\u043d\u043e\u043f\u043a\u0438 \u0438 \u043f\u0440.<\/p>\n
\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 POCP GUI Project Manager<\/p>\n
<authorization id=\"555\">   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-ui-3#adminUnassignMember<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-ui-3#adminUnassign<\/action> <\/authorization> <authorization id=\"556\">   <name>unassign-project-roles-from-subordinates<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#unassign<\/action>   <object id=\"1768\">     <orgRelation>       <subjectRelation>org:manager<\/subjectRelation>       <scope>allDescendants<\/scope>       <includeReferenceOrg>false<\/includeReferenceOrg>     <\/orgRelation>   <\/object>   <target id=\"1\">     <type>RoleType<\/type>     <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/target>   <relation>org:default<\/relation> <\/authorization> <authorization id=\"600\">   <name>unassign-project-roles-from-project-user<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#unassign<\/action>   <object id=\"1768\">     <type>UserType<\/type>     <archetypeRef oid=\"c2523d38-76ed-43bc-9e73-5158ed225042\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project User ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/person_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object>   <target id=\"1\">     <type>RoleType<\/type>     <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Forward Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/role_purpose_type = 'Project' or extension\/role_purpose_type = 'Positions         and Projects'<\/q:text>     <\/filter>   <\/target>   <relation>org:default<\/relation> <\/authorization><\/code><\/pre>\n
 555 — \u0432\u0435\u0448\u0430\u0435\u0442 \u043a\u043d\u043e\u043f\u043a\u0438 \u0437\u0430\u0430\u043d\u0430\u0441\u0430\u0438\u043d\u0442 \u0432 members \u0432 \u0440\u043e\u043b\u0438 \u0438 \u0432 assigment \u0432\u043e\u043e\u0431\u0449\u0435 \u0432\u0435\u0437\u0434\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0432 \u043b\u044e\u0434\u0435\u0439.<\/p>\n
556 — \u0430 \u0432\u043e\u0442 \u0442\u0443\u0442 \u0443\u0436\u0435 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0430\u043d\u0430\u0441\u0441\u0430\u0438\u043d\u0438\u0442\u044c \u0440\u043e\u043b\u0438 \u043d\u0430\u0448\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043d\u0430\u0448\u0438\u0445 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u0445<\/p>\n
600 — \u0441 \u043d\u0430\u0448\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 User \u0440\u043e\u043b\u0438  Forward \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441 \u043f\u043e\u043c\u0435\u0442\u043a\u043e\u0439 Project<\/p>\n
\u0427\u0442\u043e\u0431\u044b \u0443\u0431\u0440\u0430\u0442\u044c \u0447\u043b\u0435\u043d\u043e\u0432 \u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438\u0434\u0435\u043c \u0432 \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0432 Members<\/p>\n
<\/figure>\n
 \u0412\u043e\u0442 \u0442\u0443\u0442 \u0441 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430\u0436\u0438\u043c\u0430\u0435\u043c \u043d\u0430 \u043f\u0435\u0440\u0435\u0447\u0435\u0440\u043a\u043d\u0443\u0442\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0438 \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0430\u043d\u0430\u0441\u0441\u0430\u0438\u043d \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u043f\u043e\u0437\u0438\u0446\u0438\u044f, \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u043f\u0440\u043e\u0435\u043a\u0442 \u043d\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f!<\/p>\n
\u0422\u0435\u043f\u0435\u0440\u044c \u0447\u0442\u043e\u0431\u044b \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0442\u0443\u0442 \u0436\u0435 \u0436\u043c\u0435\u043c \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 User, \u0434\u043e\u0445\u043e\u0434\u0438\u043c \u0443 \u043d\u0435\u0433\u043e \u0434\u043e Assigments \u0438 \u0442\u0430\u043c \u0443\u0436\u0435 \u0436\u043c\u0435\u043c \u043d\u0430 \u0447\u0435\u0440\u0442\u043e\u0447\u043a\u0443<\/p>\n
<\/figure>\n
 \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u0441\u043e\u0437\u0434\u0430\u043d\u0430, \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043d\u0435\u0433\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0442\u043e\u0436\u0435, \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u043f\u0435\u0440\u0435\u0442\u0435\u043a\u0430\u043d\u0438\u0435 \u043f\u0440\u0430\u0432 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442\u0435 — \u0434\u0443\u043c\u0430\u0435\u0442\u0435 \u0432\u0441\u0451? \u0414\u0430, \u043a\u043e\u043d\u0435\u0447\u043d\u043e! <\/p>\n
\u0410 \u0434\u0430\u0432\u0430\u0439\u0442\u0435 \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u0442\u0430\u043a \u0447\u0442\u043e\u0431\u044b \u0443 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0431\u044b\u043b\u0438 \u043d\u0435 \u043e\u0434\u0438\u043d\u0430\u043a\u043e\u0432\u044b\u0435 \u043f\u0440\u0430\u0432\u0430!<\/strong><\/p>\n
\u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0431\u0443\u0434\u0443\u0442 \u0443 \u0432\u0441\u0435\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0430 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430-\u0440\u043e\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u043e \u043d\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c Position User. Midpoint \u043a \u044d\u0442\u043e\u043c\u0443 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u043d\u0435 \u0433\u043e\u0442\u043e\u0432, \u0442\u043e \u0435\u0441\u0442\u044c \u043e\u043d \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0435 \u0433\u043e\u0442\u043e\u0432 \u043a \u0441\u043b\u043e\u0436\u043d\u044b\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u043c, \u0430 \u043a \u044d\u0442\u043e\u043c\u0443 \u043d\u0443 \u0441\u043e\u0432\u0441\u0435\u043c!<\/p>\n
\u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c Forward \u0440\u043e\u043b\u0438 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u0432\u043e\u0437\u044c\u043c\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 AD \u0433\u0440\u0443\u043f\u043f\u044b. \u041d\u0430\u043c \u043d\u0443\u0436\u043d\u0430 Forward \u0440\u043e\u043b\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 User, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c Forward \u0440\u043e\u043b\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u0440\u043e\u043b\u044c AD \u0433\u0440\u0443\u043f\u043f\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c AD \u0433\u0440\u0443\u043f\u043f\u044b \u0432 AD. \u0417\u0432\u0443\u0447\u0438\u0442 \u043f\u0440\u043e\u0441\u0442\u043e \u0438 \u0442\u0430\u043a \u043e\u043d\u043e \u0438 \u0435\u0441\u0442\u044c, \u0435\u0441\u043b\u0438 \u043d\u0435 \u0437\u0430\u0434\u0443\u043c\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e \u043a\u0430\u0436\u0434\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0446\u0438\u043a\u043b\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430…<\/p>\n
\u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Persona \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043c\u044b \u0438 \u0442\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u043d\u0435 \u043f\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e, \u0438\u043c\u0435\u0435\u0442 \u0435\u0449\u0435 \u0438 \u043c\u0438\u043d\u0443\u0441, \u0432 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0435\u0433\u043e \u043d\u0435\u0434\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435\u0434\u043e\u0441\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0441\u0442\u0438, \u043e\u043d \u043d\u0435 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u043d, \u043c\u044b \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u0432 \u043d\u0435\u0433\u043e \u043a\u0438\u043d\u0443\u0442\u044c \u0441\u0434\u0435\u043b\u0430\u0439 \u043d\u0430\u043c \u0447\u0442\u043e-\u0442\u043e \u0441 \u0442\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c, \u043c\u044b \u0432 \u043d\u0435\u0433\u043e \u043a\u0438\u0434\u0430\u0435\u043c object template \u0433\u0434\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0438\u043c\u044f \u0431\u0435\u0440\u0435\u043c \u043e\u0442 \u0441\u044e\u0434\u0430, \u0438\u043b\u0438 \u0438\u043c\u044f \u0431\u0443\u0434\u0435\u0442 \u0442\u0430\u043a\u0438\u043c. \u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043d\u0430\u0434\u0435\u043b\u0430\u0442\u044c Object \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442\u043e\u0432! \u0410 \u0432\u043e\u0442 \u043d\u0430 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0430\u0445 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u0441\u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0442\u044c!<\/p>\n
\u041d\u0430\u0447\u043d\u0435\u043c \u0441 \u043a\u043e\u043d\u0446\u0430. \u0412 \u0440\u0435\u0441\u0443\u0440\u0441\u0435 Resource\\All resources\\Windows MS AD OOO ODIN\\Schema handling\\Object types\\MS AD group\\Mappings \u0441\u0434\u0435\u043b\u0430\u0435\u043c \u0432\u043e\u0442 \u0442\u0430\u043a<\/p>\n
<\/figure>\n
 \u0414\u043e\u0431\u0430\u0432\u0438\u043c \u0447\u0435\u0440\u043d\u0443\u044e \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP Create AD Group from Role in OOO ODIN \u0432 \u043d\u0435\u0439 \u043a\u043e\u0434<\/p>\n
<inducement id=\"3\">   <construction>     <resourceRef oid=\"b8618fba-cf8b-416c-8e3b-32ea34cf003d\" relation=\"org:default\"       type=\"c:ResourceType\">       <!-- Windows MS AD OOO ODIN -->     <\/resourceRef>     <kind>entitlement<\/kind>     <intent>intent MS AD group<\/intent>   <\/construction> <\/inducement><\/code><\/pre>\n
 \u0412 Object Template POCE Forward Role Object Template \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043a\u043e\u0434<\/p>\n
<item id=\"116\">   <ref>assignment<\/ref>   <displayName>Assignment or creation to AD Group [Project Name]-Admins<\/displayName>   <mapping id=\"9\">     <strength>strong<\/strength>     <source>       <path>identifier<\/path>     <\/source>     <source>       <path xmlns:gen671=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen671:user_personalNumber<\/path>     <\/source>     <source>       <path xmlns:gen671=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen671:user_forward_roles_inherited<\/path>     <\/source>     <source>       <path xmlns:gen671=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen671:user_boss<\/path>     <\/source>     <source>       <path>documentation<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <filter>           <q:text>identifier = $identifier and archetypeRef matches (oid =             \"e9eda47b-b097-4814-9605-7177a2482fa1\")<\/q:text>         <\/filter>         <createOnDemand>true<\/createOnDemand>         <populateObject>           <populateItem>             <expression>               <script>                 <code>\"ADG:\" + user_personalNumber + documentation<\/code>               <\/script>             <\/expression>             <target>               <path>name<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <script>                 <code>\"Auto-created AD group for Project\" + user_personalNumber + \" by \" +                   actor.personalNumber<\/code>               <\/script>             <\/expression>             <target>               <path>description<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <script>                 <code>user_personalNumber + documentation<\/code>               <\/script>             <\/expression>             <target>               <path>documentation<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <script>                 <code>identifier<\/code>               <\/script>             <\/expression>             <target>               <path>identifier<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <script>                 <code>user_boss<\/code>               <\/script>             <\/expression>             <target>               <path>extension\/user_boss<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <assignmentTargetSearch>                 <targetType>ArchetypeType<\/targetType>                 <oid>e9eda47b-b097-4814-9605-7177a2482fa1<\/oid>               <\/assignmentTargetSearch>             <\/expression>             <target>               <path>assignment<\/path>             <\/target>           <\/populateItem>           <populateItem>             <expression>               <assignmentTargetSearch>                 <targetType>RoleType<\/targetType>                 <oid>7e9dbf52-eda7-4922-9e50-3ffe817143eb<\/oid>               <\/assignmentTargetSearch>             <\/expression>             <target>               <path>assignment<\/path>             <\/target>           <\/populateItem>         <\/populateObject>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <relativityMode>absolute<\/relativityMode>         <code>for (i in user_forward_roles_inherited)           {if (i == \"Create AD group for EMP001001\")           {return true}}           return false<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item><\/code><\/pre>\n
\u0415\u0441\u043b\u0438 \u0432 Forward \u0440\u043e\u043b\u0438 \u0432  user_forward_roles_inherited \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e  Create AD group for EMP001001 \u0442\u043e \u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u044d\u0442\u0443 \u0440\u043e\u043b\u044c \u0437\u0430 \u0430\u0441\u0441\u0430\u0438\u043d\u0438\u0442\u044c \u043a \u0440\u043e\u043b\u0438 AD Group \u0435\u0441\u043b\u0438 \u0435\u0451 \u043d\u0435\u0442 \u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0435\u0451. \u0422\u043e \u0447\u0442\u043e \u0432 Forward \u0440\u043e\u043b\u0438 \u0432 assignment \u0431\u0443\u0434\u0435\u0442 AD \u0433\u0440\u0443\u043f\u043f\u0430 \u0440\u043e\u043b\u044c \u043d\u0435 \u0441\u0442\u0440\u0430\u0448\u043d\u043e, \u043e\u043d\u0430 \u043d\u0435 \u043f\u043e\u043f\u0430\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e… \u0422\u0443\u0442 \u043d\u0435 \u0441\u0442\u0430\u043b Person \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u043e\u043b\u044c person \u0442\u043e \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e \u0447\u0442\u043e \u043e\u043d\u0430 \u0441\u0434\u0435\u043b\u0430\u043b\u0430, \u0430 \u0442\u0443\u0442 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f person \u043d\u0435 \u0443\u0434\u0430\u043b\u0438\u043b\u0430\u0441\u044c, \u0434\u0430 \u0438 \u043b\u0430\u0434\u043d\u043e \u043f\u0443\u0441\u0442\u044c AD Group \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f — \u043e\u043d\u0430 \u0431\u0443\u0434\u0435\u0442 \u043f\u0443\u0441\u0442\u043e\u0439 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e.  <\/p>\n
\u0414\u0435\u043b\u0430\u0435\u043c Object \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c POCP Persona Forward Role AD Group [Project Name]-Admins<\/p>\n
\u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<mapping id=\"3\">         <name>01 name<\/name>         <source>             <path>c:name<\/path>         <\/source>         <expression>             <script>                 <code>return \"OOO ODIN FR:PRJ for \" + name + \" AD Group \" + name + \"-Admins\"<\/code>             <\/script>         <\/expression>         <target>             <path>c:name<\/path>         <\/target>     <\/mapping>     <mapping id=\"6\">         <name>02<\/name>         <source>             <path>c:organization<\/path>         <\/source>         <expression\/>         <target>             <path xmlns:gen531=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen531:user_employment_parent<\/path>         <\/target>     <\/mapping>     <mapping id=\"7\">         <name>03<\/name>         <strength>weak<\/strength>         <expression>             <script>                 <code>return \"Positions and Projects\"<\/code>             <\/script>         <\/expression>         <target>             <path xmlns:gen422=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen422:role_purpose_type<\/path>         <\/target>     <\/mapping>     <mapping id=\"9\">         <name>04<\/name>         <expression>             <script>                 <code>return \"MSAD\"<\/code>             <\/script>         <\/expression>         <target>             <path xmlns:gen578=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen578:role_root_system<\/path>         <\/target>     <\/mapping>     <mapping id=\"10\">         <name>05<\/name>         <strength>weak<\/strength>         <expression>             <script>                 <code>return \"5\"<\/code>             <\/script>         <\/expression>         <target>             <path>c:riskLevel<\/path>         <\/target>     <\/mapping>     <mapping id=\"13\">         <name>06<\/name>         <source>             <path>c:name<\/path>         <\/source>         <expression>             <script>                 <code>return \"CN=\" + name + \"-Admins,OU=Groups,OU=OOO_ODIN,DC=168testserverhome,DC=com\"<\/code>             <\/script>         <\/expression>         <target>             <path>c:identifier<\/path>         <\/target>     <\/mapping>     <mapping id=\"15\">         <name>07<\/name>         <source>             <path>c:name<\/path>         <\/source>         <expression\/>         <target>             <path xmlns:gen805=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen805:user_personalNumber<\/path>         <\/target>     <\/mapping>     <mapping id=\"16\">         <name>08<\/name>         <source>             <path xmlns:gen232=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen232:person_boss<\/path>         <\/source>         <expression\/>         <target>             <path xmlns:gen339=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen339:user_boss<\/path>         <\/target>     <\/mapping>     <mapping id=\"19\">         <name>10<\/name>         <expression>             <value>POCP Policy: Project Project Role only for User with Project Role<\/value>         <\/expression>         <target>             <path xmlns:gen319=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen319:user_forward_roles_inherited<\/path>         <\/target>     <\/mapping>     <mapping id=\"20\">         <name>09<\/name>         <source>             <path>c:organization<\/path>         <\/source>         <expression>             <script>                 <code>return \"Create AD group for \" + organization <\/code>             <\/script>         <\/expression>         <target>             <path xmlns:gen319=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen319:user_forward_roles_inherited<\/path>         <\/target>     <\/mapping>     <mapping id=\"26\">         <name>11<\/name>         <expression>             <value>-Admins<\/value>         <\/expression>         <target>             <path>c:documentation<\/path>         <\/target>     <\/mapping>     <mapping id=\"28\">         <name>12<\/name>         <source>             <path>c:nickName<\/path>         <\/source>         <expression>             <script>                 <code>if (nickName == \"Deactivated\") {return false} else {return true}<\/code>             <\/script>         <\/expression>         <target>             <path xmlns:gen96=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen96:role_active<\/path>         <\/target>     <\/mapping><\/code><\/pre>\n
 \u0412 \u043c\u0430\u043f\u043f\u0438\u043d\u0433\u0430\u0445 1 \u0438 11 \u043d\u0430\u0434\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u0442\u044c \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0446\u0430 \u043f\u0430\u043f\u043a\u0438 \u00ab-Admins\u00bb<\/p>\n
\u0414\u0435\u043b\u0430\u0435\u043c Forward \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c OOO ODIN FR:PRJ Creat AD Group [Project Name]-Admins<\/p>\n
\u0418 \u0437\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0435\u0451 \u0442\u0430\u043a<\/p>\n
<\/figure>\n
 \u0418 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u043d\u0435\u0451 \u043a\u043e\u0434<\/p>\n
<inducement id=\"125\">         <personaConstruction>             <targetType>RoleType<\/targetType>             <objectMappingRef oid=\"ffc5b12d-23b8-43b2-abbf-aef3ac40f926\" relation=\"org:default\" type=\"c:ObjectTemplateType\">                 <!-- POCP Persona Forward Role AD Group [Project Name]-Admins -->             <\/objectMappingRef>             <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\" type=\"c:ArchetypeType\">                 <!-- POCE Forward Role ArcheType -->             <\/archetypeRef>         <\/personaConstruction>     <\/inducement><\/code><\/pre>\n
\u041f\u043e\u0434 \u0430\u0434\u043c\u0438\u043d\u043e\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0443 User \u0440\u043e\u043b\u044c OOO ODIN FR:PRJ Creat AD Group [Project Name]-Admins \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043e\u0434\u043d\u0430 Forward \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438 \u043e\u0434\u043d\u0430 \u0440\u043e\u043b\u044c Ad \u0433\u0440\u0443\u043f\u043f\u0430 \u043f\u0440\u0438\u0447\u0435\u043c \u0432 \u0440\u0435\u0441\u0443\u0440\u0441\u0435 \u0442\u043e\u0436\u0435 \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u044d\u043a\u0446\u0438\u044f \u0441\u0440\u0430\u0437\u0443<\/p>\n
<\/figure>\n
\u0421\u0430\u043c\u0443 \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0434 AD \u0433\u0440\u0443\u043f\u043f\u0443 \u043f\u043e\u043a\u0430 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0430\u043d\u043e, \u043c\u044b \u0436\u0435 \u0445\u043e\u0442\u0438\u043c \u0447\u0442\u043e\u0431\u044b \u0435\u0451 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0435, \u0434\u0430 \u0435\u0449\u0435 \u0447\u0442\u043e\u0431\u044b \u043e\u043d\u0430 \u043e\u0442\u0431\u0438\u0440\u0430\u043b\u0430\u0441\u044c \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0443\u0445\u043e\u0434\u044f\u0442!  <\/p>\n
\u0422\u0443\u0442 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0431\u0435\u0433\u043d\u0443\u0442\u044c \u043a \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0435… \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u044d\u0442\u043e \u0430\u043f\u043e\u0444\u0435\u043e\u0437 \u0433\u0435\u043d\u0438\u044f Evolveum \u0442\u0443\u0442 \u0441\u043e\u0448\u043b\u043e\u0441\u044c \u0432\u0441\u0435 \u0438 \u043d\u0435\u0434\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u0435\u0434\u043e\u0441\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u0433\u043b\u044e\u0447\u043d\u043e\u0441\u0442\u044c. \u0425\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0442\u043e \u0435\u0441\u0442\u044c assigment \u0438 \u0432\u0441\u0435 \u0441\u043b\u043e\u0432\u0430 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0435\u0441\u0442\u044c \u0438 \u0434\u0430\u0436\u0443 \u043f\u0430\u0440\u0443 \u043a\u043d\u043e\u043f\u043e\u043a — \u043d\u043e \u043d\u0435\u0442! \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0431\u0443\u0434\u0435\u0442 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0441\u0435\u0433\u0434\u0430. \u0425\u043e\u0442\u0435\u043b\u043e\u0441\u044c \u0431\u044b \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u0431\u044b\u043b\u0430 \u043a\u0430\u043a\u0430\u044f-\u0442\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0432\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u0438 \u0432\u0441\u0435 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0435\u0441\u0442\u044c  message \u043d\u043e \u043d\u0435\u0442, \u043f\u043e\u043b\u044f \u043d\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u044b, \u0434\u0440\u0435\u0432\u043d\u0438\u0439 \u043a\u043e\u0434(\u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440) \u043d\u044b\u043d\u0435\u0448\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f Midpoint \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442…<\/p>\n
\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0447\u0435\u0440\u043d\u0443\u044e \u0440\u043e\u043b\u044c POCP Policy: Project Project Role only for User with Project Role<\/p>\n
\u0432 \u043d\u0435\u0439 \u043a\u043e\u0434<\/p>\n
<inducement id=\"2\">   <policyRule>     <name>Member must have <\/name>     <policyConstraints>       <assignmentState id=\"7\">         <expression>           <script>             <code>import com.evolveum.midpoint.xml.ns._public.common.common_3.*               import com.evolveum.midpoint.prism.delta.builder.*               import com.evolveum.midpoint.model.api.*                assignmentsToDelete = []               boolean yes = false               boolean yes_my = false                user_oid = focus.getOid()               role_oid = target.getOid()                user = midpoint.getObject(UserType.class, user_oid)               role = midpoint.getObject(RoleType.class, role_oid)               role_f = basic.stringify(basic.getExtensionPropertyValue(role, \"http:\/\/example.com\/xml\/ns\/mySchema\", \"user_personalNumber\"))               query_role_depend = midpoint.queryFor(RoleType.class, \"name = '$role_f' and               archetypeRef matches (oid = '49952180-49a0-4884-a8d1-5e1a50f26fa1')\")               role_depend = midpoint.searchObjects(query_role_depend)                for (i in user.assignment) {                if (i.targetRef?.oid == basic.stringify(role_depend.oid))               { yes = true               }               if (i.targetRef?.oid == basic.stringify(role_oid))               { yes_my = true                def removeAssignment = new AssignmentType()               removeAssignment.id = i.id               assignmentsToDelete.add removeAssignment.asPrismContainerValue()                }               }                if (yes &amp;&amp; !yes_my)               {               return false}               else               {if (!yes &amp;&amp; !yes_my)               {               return true               }else{                if (yes &amp;&amp; yes_my){                return false               }else{               delta_un =               prismContext.deltaFor(UserType.class).item(UserType.F_ASSIGNMENT).delete(assignmentsToDelete).asObjectDelta(user_oid)               midpoint.modifyObject(delta_un, ModelExecuteOptions.createRaw())               midpoint.recompute(UserType, basic.stringify(user_oid))               return false}               }               }              <\/code>           <\/script>         <\/expression>         <messageExpression \/>       <\/assignmentState>     <\/policyConstraints>     <policyActions>       <enforcement>         <name>Enf<\/name>       <\/enforcement>       <suspendTask \/>     <\/policyActions>     <evaluationTarget>assignment<\/evaluationTarget>   <\/policyRule> <\/inducement><\/code><\/pre>\n
\u042d\u0442\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0432\u0441\u0435\u0433\u0434\u0430 \u0435\u0441\u043b\u0438 \u043d\u0430\u0434 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0447\u0442\u043e-\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0438 \u0443 \u043d\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0440\u043e\u043b\u044c \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438, \u0438\u043b\u0438 \u0435\u0451 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c.  <\/p>\n
assignmentState — \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043d\u0430 \u0432\u043e\u043f\u0440\u043e\u0441 \u0432\u044b\u043a\u0438\u0434\u044b\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443 \u0434\u0430 \u0438\u043b\u0438 \u043d\u0435\u0442.<\/p>\n
\u041d\u0430 \u0432\u0445\u043e\u0434\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438 \u0441\u0430\u043c\u0430 \u0440\u043e\u043b\u044c \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430.<\/p>\n
\u0415\u0441\u0442\u044c \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442\u0430  \/ \u041d\u0435\u0442 \u0440\u043e\u043b\u0438 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 [\u041c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438] — \u043e\u043a \u043c\u043e\u043b\u0447\u0438\u043c<\/p>\n
\u041d\u0435\u0442 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430  \/ \u041d\u0435\u0442 \u0440\u043e\u043b\u0438 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 [\u041c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438] — \u0432\u044b\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u0435\u043c \u043e\u0448\u0438\u0431\u043a\u0443<\/p>\n
\u041d\u0435\u0442 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430  \/ \u0415\u0441\u0442\u044c \u0440\u043e\u043b\u044c \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f [\u041c\u043e\u043c\u0435\u043d\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u0445]- \u043c\u043e\u043b\u0447\u0430 \u0443\u0434\u0430\u043b\u044f\u0435\u043c \u0435\u0451 \u0438\u0437 assignment, \u0440\u0435\u043a\u043e\u043c\u043f\u0438\u043b\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.<\/p>\n
\u0412 Object template POCP Persona Forward Role AD Group [Project Name]-Admins<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<mapping id=\"19\">   <name>10<\/name>   <expression>     <value>POCP Policy: Project Project Role only for User with Project Role<\/value>   <\/expression>   <target>     <path xmlns:gen319=\"http:\/\/example.com\/xml\/ns\/mySchema\">       c:extension\/gen319:user_forward_roles_inherited<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0412 Object template POCE Forward Role Object Template<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<item id=\"18\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP Policy: Project Project Role only for User with Project Role<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <path xmlns:gen671=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen671:user_forward_roles_inherited<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>e781c75e-17bb-45d5-910f-426b22ef37cf<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <relativityMode>absolute<\/relativityMode>         <code>for (i in user_forward_roles_inherited)           {if (i == \"POCP Policy: Project Project Role only for User with Project Role\")           {return true}}           return false<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item><\/code><\/pre>\n
 \u0418 \u043c\u0435\u043d\u044f\u0435\u043c \u0430\u0439\u0442\u0435\u043c 1 \u043d\u0430<\/p>\n
<item id=\"1\">   <ref>assignment<\/ref>   <displayName>Assignment to Role Catalog<\/displayName>   <mapping id=\"9\">     <name>Name<\/name>     <source>       <path xmlns:gen444=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen444:user_employment_parent<\/path>     <\/source>     <source>       <path xmlns:gen189=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen189:role_purpose_type<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>OrgType<\/targetType>         <filter>           <q:equal>             <q:path>identifier<\/q:path>             <expression>               <trace>true<\/trace>               <script>                 <code>                   if (role_purpose_type == \"Positions and Projects\")                   {                   result = []                   result1 = \"\\\\RC\\\\\" + user_employment_parent + \"\\\\Position\"                   result.add(result1)                   result2 = \"\\\\RC\\\\\" + user_employment_parent + \"\\\\Project\"                   result.add(result2)                   return result                   }                   else{                   result = \"\\\\RC\\\\\" + user_employment_parent + \"\\\\\" + role_purpose_type                   return result                   }                  <\/code>               <\/script>             <\/expression>           <\/q:equal>         <\/filter>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item><\/code><\/pre>\n
 \u0427\u0442\u043e\u0431\u044b \u0440\u043e\u043b\u0438 \u0441  Positions and Projects \u0432 \u0440\u043e\u043b\u0435 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 \u0431\u044b\u043b\u0438 \u0438 \u0432 Position \u0438 \u0432 Project  <\/p>\n
\u041f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e User \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u043d\u0443\u044e \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443 \u043d\u0435\u0433\u043e \u043d\u0435\u0442!<\/p>\n
<\/figure>\n
\u041d\u0438 \u043e \u0447\u0435\u043c \u043d\u0435 \u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043d\u043e \u0435\u0441\u043b\u0438 \u043a\u0440\u0430\u0441\u043d\u043e\u0435 \u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0440\u043e\u043b\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0442\u043e \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442 \u043d\u0435 \u043d\u0430\u0434\u043e \u0435\u0451 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0442\u044c. \u0414\u043e\u0431\u0430\u0432\u0438\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 — \u0414\u0410 \u043a\u0441\u0442\u0430\u0442\u0438 \u043d\u0435\u043b\u044c\u0437\u044f \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0440\u043e\u043b\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f!  <\/p>\n
\u041f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442!<\/p>\n
<\/figure>\n
\u0412 Assigment: 1 \u0421\u0438\u0441\u0442\u0435\u043c\u043d\u0430\u044f \u0440\u043e\u043b\u044c — \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u043e \u0444\u0430\u043a\u0442\u0443 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f, \u0445\u043e\u0442\u044f \u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u044c, 2 \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u043e\u043b\u044c — \u0432 \u044d\u0442\u0438\u0445 \u043f\u0430\u043f\u043a\u0430\u0445 \u0440\u043e\u043b\u044c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043c\u043e\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043d\u0430\u0439\u0442\u0438 \u044d\u0442\u0443 \u0440\u043e\u043b\u044c, 3 \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 — \u043d\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u043d\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u044e \u0438 \u0442\u0430\u043a \u0432\u0441\u0435 \u044f\u0441\u043d\u043e.<\/p>\n
\u0412 Inducement: 1 \u041f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 — POCE POLICY: identifier from Forward Role to User Forward Roles List \u043a\u0430\u043a \u0438 \u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043e Forward \u0440\u043e\u043b\u044f\u043c<\/p>\n
\u041f\u043e\u0434 \u0430\u0434\u043c\u0438\u043d\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e\u0448\u043b\u0438 \u0432 GUI \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f<\/p>\n
\u0412 \u0440\u043e\u043b\u044c  POCP GUI Project Manager \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
<authorization id=\"77700\">   <name>operation-with-personal-forward-roles-for-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#modify<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#delete<\/action>   <phase>execution<\/phase>   <object id=\"3\">     <type>RoleType<\/type>     <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Forward Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"77701\">   <name>operation-ad-group-roles-for-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#modify<\/action>   <phase>execution<\/phase>   <object id=\"3\">     <type>RoleType<\/type>     <archetypeRef oid=\"e9eda47b-b097-4814-9605-7177a2482fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- AD Group ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"77703\">   <name>read-roles<\/name>   <description>     For POCP Policy: Project Project Role only for User with Project Role could work under GUI User   <\/description>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#read<\/action>   <object id=\"3\">     <type>RoleType<\/type>     <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Forward Role ArcheType -->     <\/archetypeRef>   <\/object>   <item>extension\/user_personalNumber<\/item> <\/authorization> <authorization id=\"3325\">   <name>poce-shadow-read<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#read<\/action>   <object id=\"32325\">     <type>ShadowType<\/type>     <owner>       <type>RoleType<\/type>       <archetypeRef oid=\"e9eda47b-b097-4814-9605-7177a2482fa1\" relation=\"org:default\"         type=\"c:ArchetypeType\">         <!-- AD Group ArcheType -->       <\/archetypeRef>       <filter>         <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>       <\/filter>     <\/owner>   <\/object> <\/authorization> <authorization id=\"11\">   <name>poce-shadow-execution-add-modify-delete<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <phase>execution<\/phase>   <object id=\"3325\">     <type>ShadowType<\/type>     <owner>       <type>RoleType<\/type>       <archetypeRef oid=\"e9eda47b-b097-4814-9605-7177a2482fa1\" relation=\"org:default\"         type=\"c:ArchetypeType\">         <!-- AD Group ArcheType -->       <\/archetypeRef>       <filter>         <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>       <\/filter>     <\/owner>   <\/object> <\/authorization> <authorization id=\"77707\">   <name>operation-ad-group-roles-for-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#add<\/action>   <phase>request<\/phase>   <object id=\"3\">     <type>RoleType<\/type>     <archetypeRef oid=\"e9eda47b-b097-4814-9605-7177a2482fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- AD Group ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object> <\/authorization> <authorization id=\"77702\">   <name>read-personal-forward-roles-for-project<\/name>   <action>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/security\/authorization-model-3#read<\/action>   <object id=\"3\">     <type>RoleType<\/type>     <archetypeRef oid=\"b527aa8f-9097-45d7-94c9-8c2d79e53832\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Forward Role ArcheType -->     <\/archetypeRef>     <filter>       <q:text>extension\/user_boss contains `actor.personalNumber`<\/q:text>     <\/filter>   <\/object> <\/authorization><\/code><\/pre>\n
 77700 — \u0442\u043e \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0432  extension\/user_boss \u044d\u0442\u043e \u043f\u0440\u043e\u0435\u0432\u0435\u0440\u044f\u0435\u0441\u0442\u044f \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u0439 \u0440\u043e\u043b\u0438<\/p>\n
77703 — \u0427\u0442\u043e\u0431\u044b \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 POCP Policy: Project Project Role only for User with Project Role could work under GUI User \u043d\u0430\u043c \u043d\u0430\u0434\u043e \u0432 Forward \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c  extension\/user_personalNumber<\/p>\n
TODO: <\/strong>\u0415\u0441\u043b\u0438 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0443 \u0440\u043e\u043b\u044c OOO ODIN FR:PRJ Creat AD Group [Project Name]-Admins \u0438 \u0435\u0449\u0435 \u043a\u0430\u043a\u0443\u044e-\u0442\u043e. \u0422\u043e \u0432\u0441\u0451 \u0441\u0432\u0435\u0440\u0448\u0438\u0442\u0441\u044f \u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0430 — \u0442\u0430\u043a \u043a\u0430\u043a Midpoint \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c, \u0438 \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u0447\u0442\u043e \u0438\u043c\u044f \u0443\u0436\u0435 \u0437\u0430\u043d\u044f\u0442\u043e, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043e\u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0430… \u0431\u0443\u0434\u0443 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0435\u0451 \u0432 \u0441\u0431\u043e\u0440\u043a\u0435 \u0434\u043b\u044f Demo-\u041f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u041f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u043e\u043d\u0430 \u0432\u043e \u043f\u0435\u0440\u0432\u044b\u0445 \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442, \u0430 \u0432\u043e \u0432\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0438\u0437 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438, \u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0433\u043b\u044e\u043a!<\/p>\n
\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0435\u0441\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442<\/strong><\/p>\n
\u0415\u0441\u043b\u0438 effectiveStatus \u0441\u0442\u0430\u043d\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d \u0442\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f \u0441\u0442\u0440\u0430\u0448\u043d\u043e\u0435 — \u0447\u0442\u043e-\u0442\u043e \u043e\u0442\u0440\u0443\u0431\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0440\u043e\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f Persona, \u043d\u043e \u043e\u0442\u0440\u0443\u0431\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u043a \u0447\u0442\u043e \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043a\u043e\u043d\u0446\u044b \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u0435\u0448\u0430\u044e\u0442 \u0434\u0430\u043b\u044c\u0448\u0435, \u0430 \u0447\u0442\u043e \u0442\u043e \u043d\u0435 \u043e\u0442\u0440\u0443\u0431\u0430\u0435\u0442\u0441\u044f \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u043e\u043b\u0438, \u0445\u043e\u0442\u044f \u0440\u043e\u043b\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f Persona \u0442\u043e\u0436\u0435 \u0440\u043e\u043b\u044c. \u0418 Persona \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u043d\u0435 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0430\u044e\u0442\u0441\u044f Persona \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0440\u043e\u043b\u044c\u044e Persona \u043d\u0430 \u044d\u0442\u043e\u0439 Persona…<\/p>\n
\u041d\u0430\u043c \u043d\u0443\u0436\u0435\u043d \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0430\u0442\u0440\u0438\u0431\u0443\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u043f\u0440\u043e\u0435\u043a\u0442 \u0430\u043a\u0442\u0438\u0432\u0435\u043d, \u0438 \u043f\u043e \u043d\u0435\u043c\u0443 \u0431\u0443\u0434\u0435\u043c \u0435\u0433\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0433\u043b\u0443\u0448\u0438\u0442\u044c! \u042d\u0442\u043e\u0442 \u0430\u0442\u0440\u0438\u0431\u0443\u0442  role_active \u0432 \u0440\u043e\u043b\u0438!  <\/p>\n
\u0412 \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Project Role Object Template \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u0435\u0433\u043e \u043c\u0430\u043f\u043f\u0438\u043d\u0433 005 \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
<mapping id=\"124\">   <name>006<\/name>   <strength>weak<\/strength>   <source>     <path xmlns:gen851=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen851:role_active<\/path>   <\/source>   <expression>     <script>       <code>return true<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen850=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen850:role_active<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0415\u0441\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0441\u043e\u0437\u0434\u0430\u0435\u0442\u0441\u044f \u0431\u0435\u0437 \u0443\u043a\u0437\u0430\u043d\u0438\u044f role_active \u0442\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u044c\u0441\u044f true — \u0441\u043b\u0430\u0431\u043e \u0441\u0442\u0430\u0432\u0438\u0442\u0441\u044f<\/p>\n
  <\/p>\n
\u0412 \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Person Project User from Project Role Object Template \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
<mapping id=\"36\">   <name>08<\/name>   <source>     <path xmlns:gen181=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen181:role_active<\/path>   <\/source>   <expression>     <script>       <code>if (role_active)         {return \"Active\"}         else         {return \"Deactivated\"}<\/code>     <\/script>   <\/expression>   <target>     <path>c:nickName<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0412 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0435 POCP EMP001001 Project Role ArcheType<\/p>\n
\u043c\u0435\u043d\u0435\u044f\u043c \u0438\u043d\u0434\u0443\u0441\u043c\u0435\u043d\u0442 1226 \u043d\u0430<\/p>\n
<inducement id=\"1226\">   <focusMappings>     <mapping id=\"7\">       <name>11<\/name>       <documentation>get Forward Roles from Project user<\/documentation>       <authoritative>true<\/authoritative>       <strength>strong<\/strength>       <source>         <path xmlns:gen851=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen851:role_active<\/path>       <\/source>       <expression>         <script>           <code>linkedDATA = midpoint.findLinkedSource('from Project User to me')             if (basic.isEmpty(linkedDATA))             {return \"NO CONNECTION\"}             else             {             roles_result = []             roles = basic.getExtensionPropertyValues(linkedDATA,             \"http:\/\/example.com\/xml\/ns\/mySchema\", \"person_forward_roles\")              for (i in roles)             {             if (!i.startsWith(\"ROLE|\"))             {roles_result.add(i)}             }              return roles_result              }<\/code>         <\/script>       <\/expression>       <target>         <path>$focus\/extension\/user_forward_roles<\/path>         <set>           <predefined>all<\/predefined>         <\/set>       <\/target>       <condition>         <script>           <code>role_active<\/code>         <\/script>       <\/condition>     <\/mapping>   <\/focusMappings> <\/inducement><\/code><\/pre>\n
 \u0412 \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c POCP Persona Forward Role AD Group [Project Name]-Admins<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
<mapping id=\"28\">   <name>12<\/name>   <source>     <path>c:nickName<\/path>   <\/source>   <expression>     <script>       <code>if (nickName == \"Deactivated\")         {return false}         else         {return true}<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen96=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen96:role_active<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0412 \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCE Forward Role Object Template \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<mapping id=\"121\">   <name>01<\/name>   <source>     <_metadata id=\"126\">       <provenance>         <acquisition id=\"127\">           <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"             type=\"c:UserType\">             <!-- administrator -->           <\/actorRef>           <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>           <timestamp>2025-05-20T05:35:01.850Z<\/timestamp>         <\/acquisition>       <\/provenance>     <\/_metadata>     <path xmlns:gen417=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen417:role_active<\/path>   <\/source>   <source>     <path>name<\/path>   <\/source>   <expression>     <script>       <code>if (basic.isEmpty(role_active) || role_active == true)         {return name}         else         {return \"[DEACTIVATED] \" + name}<\/code>     <\/script>   <\/expression>   <target>     <path>c:displayName<\/path>   <\/target> <\/mapping><\/code><\/pre>\n
 \u0412 \u0440\u043e\u043b\u0438 POCE POLICY: identifier from Forward Role to User Forward Roles List<\/p>\n
\u043c\u0435\u043d\u044f\u0435\u043c \u043a\u043e\u0434<\/p>\n
<script>   <code>import com.evolveum.midpoint.xml.ns._public.common.common_3.*     forward_role = midpoint.getObject(RoleType.class, assignmentPath[0].target.oid)     return ( basic.stringify(basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"role_root_system\")) + \"|\" +     basic.stringify(basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"user_employment_parent\")) + \"|\" +     basic.stringify(assignmentPath[0].target.identifier + \"|\" + name + \"|\" +     person_employment_parent + \"|\" + person_account_number))<\/code> <\/script><\/code><\/pre>\n
\u043d\u0430<\/p>\n
<script>   <code>import com.evolveum.midpoint.xml.ns._public.common.common_3.*     forward_role = midpoint.getObject(RoleType.class, assignmentPath[0].target.oid)     role_active = basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"role_active\")     if (basic.isEmpty(role_active) || role_active == true)     {return ( basic.stringify(basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"role_root_system\")) + \"|\" +     basic.stringify(basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"user_employment_parent\")) + \"|\" +     basic.stringify(assignmentPath[0].target.identifier + \"|\" + name + \"|\" +     person_employment_parent + \"|\" + person_account_number))     }     else     {return ( basic.stringify(\"[DEACTIVATED] \" + basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"role_root_system\")) + \"|\" +     basic.stringify(basic.getExtensionPropertyValue(forward_role,     \"http:\/\/example.com\/xml\/ns\/mySchema\", \"user_employment_parent\")) + \"|\" +     basic.stringify(assignmentPath[0].target.identifier + \"|\" + name + \"|\" +     person_employment_parent + \"|\" + person_account_number))     }   <\/code> <\/script><\/code><\/pre>\n
 \u0418 \u0432\u043e Configuration\\System\\Admin GUI configuration\\Object detail views<\/p>\n
\u043c\u0435\u043d\u044f\u0435\u043c \u0432\u0435\u0441\u044c objectCollectionView 100320 \u043d\u0430<\/p>\n
<objectCollectionView id=\"100320\">   <identifier>my-projects-view<\/identifier>   <display>     <label>My Projects<\/label>     <pluralLabel>My Projects<\/pluralLabel>     <icon>       <cssClass>fa fa-briefcase-clock<\/cssClass>     <\/icon>   <\/display>   <visibility>hidden<\/visibility>   <column id=\"100331\">     <name>ID<\/name>     <path>c:name<\/path>     <display>       <label>ID<\/label>     <\/display>   <\/column>   <column id=\"100333\">     <name>Project Name<\/name>     <path>c:identifier<\/path>     <display>       <label>Project Name<\/label>     <\/display>     <previousColumn>Company<\/previousColumn>   <\/column>   <column id=\"100335\">     <name>Company<\/name>     <path>c:extension\/user_employment_parent<\/path>     <display>       <label>Company<\/label>     <\/display>     <previousColumn>Status<\/previousColumn>     <export>       <expression>         <script>           <code>import com.evolveum.midpoint.xml.ns._public.common.common_3.*              orgId = basic.stringify(input)             query_org = midpoint.queryFor(OrgType.class, \"identifier endsWith '$orgId' and             archetypeRef matches (oid = '7cab0b16-142a-4d37-8b60-9668e95b4b94') and             activation\/effectiveStatus!='disabled'\")             org_respond = midpoint.searchObjects(query_org)             orgIt = midpoint.getObject(OrgType.class, basic.stringify(org_respond.oid))              result = basic.stringify(input) + \":\" + basic.stringify(orgIt.displayName)             return result<\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <column id=\"100337\">     <name>Members<\/name>     <path>name<\/path>     <display>       <label>Members<\/label>     <\/display>     <previousColumn>Description<\/previousColumn>     <export>       <expression>         <script>           <code>import com.evolveum.midpoint.xml.ns._public.common.common_3.*             name = basic.stringify(input)             query = midpoint.queryFor(UserType.class, \"assignment\/targetRef\/@\/name = '$name' and             archetypeRef matches (oid = '0d1b1269-0011-49e6-b9f1-e62e7827dfed')\")             objects = midpoint.searchObjects(query)             return objects.size()<\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <column id=\"100342\">     <name>Description<\/name>     <path>c:description<\/path>     <display>       <label>Description<\/label>     <\/display>     <previousColumn>Project Name<\/previousColumn>   <\/column>   <column id=\"100344\">     <name>Roles<\/name>     <path>name<\/path>     <display>       <label>Roles<\/label>     <\/display>     <previousColumn>Members<\/previousColumn>     <export>       <expression>         <script>           <code>             import com.evolveum.midpoint.xml.ns._public.common.common_3.*              result = 0             user_name = basic.stringify(input)             query_user = midpoint.queryFor(UserType.class, \"name = '$user_name' and archetypeRef             matches (oid = 'c2523d38-76ed-43bc-9e73-5158ed225042')\")             user = midpoint.searchObjects(query_user)              user_object = midpoint.getObject(UserType.class, basic.stringify(user.oid))              for (i in user_object.roleMembershipRef)             {             if (i.type?.localPart == \"RoleType\")             {             role_object = midpoint.getObject(RoleType.class, basic.stringify(i.oid))             for (ii in role_object.assignment)              {              if (ii.targetRef?.oid == \"b527aa8f-9097-45d7-94c9-8c2d79e53832\")             {              result++             }             }             }             }             return result             <\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <column id=\"1100335\">     <name>Status<\/name>     <path xmlns:gen458=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen458:role_active<\/path>     <display>       <label>Status<\/label>     <\/display>     <previousColumn>ID<\/previousColumn>     <export>       <expression>         <script>           <code>if (input)             {return \"OK\"}             else             {return \"DEACTIVATED\"}<\/code>         <\/script>       <\/expression>     <\/export>   <\/column>   <type>c:RoleType<\/type>   <collection>     <collectionRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCP EMP001001 Project Role ArcheType -->     <\/collectionRef>     <baseCollectionRef>       <collectionRef oid=\"b2119133-e6a0-4a93-bb1f-8d48ee95b123\" relation=\"org:default\"         type=\"c:ObjectCollectionType\">         <!-- my-projects-view -->       <\/collectionRef>     <\/baseCollectionRef>   <\/collection> <\/objectCollectionView> <objectCollectionView id=\"1100340\">   <identifier>my-company-roles<\/identifier>   <display>     <singularLabel>Company Role<\/singularLabel>     <pluralLabel>Company Roles<\/pluralLabel>     <icon>       <imageUrl>fa fa-city<\/imageUrl>     <\/icon>   <\/display>   <visibility>hidden<\/visibility>   <type>c:RoleType<\/type>   <collection>     <collectionRef oid=\"f44dc355-31d3-499b-9854-e0ae277a60dc\" relation=\"org:default\"       type=\"c:ArchetypeType\">       <!-- POCE Company Role ArcheType -->     <\/collectionRef>   <\/collection> <\/objectCollectionView><\/code><\/pre>\n
\u0442\u0443\u0442 \u0435\u0441\u0442\u044c \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f<\/p>\n
\u0412\u0438\u044e\u0445\u0430 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0432 GUI \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0442\u0435\u043f\u0435\u0440\u044c \u0442\u0430\u043a\u0430<\/p>\n
<\/figure>\n
 \u0412 \u0430\u0440\u0445\u0435\u0442\u0438\u043f\u0435 POCP EMP001001 Project Role ArcheType<\/p>\n
\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0435\u0449\u0435 \u043e\u0434\u043d\u043e \u0443\u0441\u043b\u043e\u0432\u0438\u0435 \u0432 Recompute Users Position<\/p>\n
\u0431\u044b\u043b\u043e<\/p>\n
<or id=\"13\">   <modification id=\"22\">     <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen365:user_forward_roles<\/item>   <\/modification> <\/or><\/code><\/pre>\n
 \u0441\u0442\u0430\u043b\u043e<\/p>\n
<or id=\"13\">                     <modification id=\"22\">                         <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen365:user_forward_roles<\/item>                     <\/modification>                     <modification id=\"2222\">                         <item xmlns:gen365=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen365:role_active<\/item>                     <\/modification>                 <\/or><\/code><\/pre>\n
 \u041f\u043e\u0434 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a\u043e\u043c \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 \u0441\u0442\u0430\u0432\u0438\u043c False \u043d\u0430 Active<\/p>\n
\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u0440\u0430\u0437\u0443<\/p>\n
— \u041a \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442 Role \u0438 User \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f [DEACTIVATED]<\/p>\n
— \u041a \u0438\u043c\u0435\u043d\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f [DEACTIVATED]<\/p>\n
— \u0423 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0441\u0440\u0430\u0437\u0443 \u0438\u0441\u0447\u0435\u0437\u0430\u044e\u0442 \u0440\u043e\u043b\u0438 \u043f\u0440\u0438\u0448\u0435\u0434\u0448\u0438\u0435 \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445<\/p>\n
\u0427\u0442\u043e \u043d\u0435 \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c<\/p>\n
— \u0423 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0435 \u0443\u0448\u043b\u0430 \u0440\u043e\u043b\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 — \u043e\u043d\u0430 \u0443\u0439\u0434\u0451\u0442 \u043f\u0440\u0438 \u043f\u043b\u0430\u043d\u043e\u0432\u043e\u0439 \u0440\u0435\u043a\u043e\u043d\u0441\u0438\u043b\u044f\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f<\/p>\n
\u041d\u043e \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 \u0443 \u043d\u0430\u0441 \u043d\u0435 \u0443\u0434\u0430\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442, \u043d\u0435\u043b\u044c\u0437\u044f \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0440\u043e\u043b\u044c \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u0439 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f member \u043f\u043e\u0442\u043e\u043c\u0443 \u0442\u043e\u0433\u0434\u0430 \u0443 \u043d\u0438\u0445 \u0432 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u00abNot found\u00bb \u0438 \u044d\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u0440\u0430\u0441\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u0445.<\/p>\n
\u041d\u0430\u043c \u043d\u0443\u0436\u043d\u0430 \u043c\u0435\u0433\u0430 \u0442\u0430\u0441\u043a\u0430 — \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043b\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043c\u0438\u043d\u0443\u0442, \u0438 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0443\u0431\u0438\u0440\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0440\u043e\u043b\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043d \u0435\u0441\u0442\u044c! \u042d\u0442\u043e \u0440\u0435\u0448\u0438\u0442 \u043d\u0435\u0434\u043e\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442!<\/p>\n
\u0417\u0430\u0445\u043e\u0434\u0438\u043c \u0432 Administration\\Server Tasks\\Iterative action tasks \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c POCP Unassign deactivated projects  \u0438 \u043d\u0430\u043f\u043e\u043b\u043d\u044f\u0435\u043c \u0435\u0433\u043e \u043a\u043e\u0434\u043e\u043c<\/p>\n
<schedule>   <recurrence>recurring<\/recurrence>   <interval>300<\/interval> <\/schedule> <activity>   <work>     <iterativeScripting>       <objects>         <type>c:RoleType<\/type>         <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"           type=\"c:ArchetypeType\">           <!-- POCP EMP001001 Project Role ArcheType -->         <\/archetypeRef>         <query>           <q:filter>             <q:and>               <q:text>                 extension\/role_active = \"false\" and metadata\/modifyTimestamp greater ```                 dateminus5m = basic.addDuration(basic.currentDateTime(), \"-PT5M\")                 return dateminus5m                 ``` <\/q:text>             <\/q:and>           <\/q:filter>         <\/query>         <useRepositoryDirectly>true<\/useRepositoryDirectly>       <\/objects>       <scriptExecutionRequest xmlns:s=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/model\/scripting-3\">         <s:action>           <s:type>execute-script<\/s:type>           <s:parameter>             <s:name>script<\/s:name>             <s:value xsi:type=\"c:ScriptExpressionEvaluatorType\">               <code>                 import com.evolveum.midpoint.xml.ns._public.common.common_3.*                 import com.evolveum.midpoint.prism.delta.builder.*                 import com.evolveum.midpoint.model.api.*                  input_name = basic.stringify(input.name)                  query_user = midpoint.queryFor(UserType.class, \"assignment\/targetRef\/@\/name =                 '$input_name' and archetypeRef matches (oid =                 '0d1b1269-0011-49e6-b9f1-e62e7827dfed')\")                 user_to_un = midpoint.searchObjects(query_user)                 for (i in user_to_un)                 {                 user_oid = basic.stringify(i.oid)                 user = midpoint.getObject(UserType.class, user_oid)                 def assignmentsToDelete = []                 for (a in user.assignment) {                 if (a.targetRef?.oid == basic.stringify(input.oid)) {                 def removeAssignment = new AssignmentType()                 removeAssignment.id = a.id                 assignmentsToDelete.add removeAssignment.asPrismContainerValue()                 }                 }                 delta =                 prismContext.deltaFor(UserType.class).item(UserType.F_ASSIGNMENT).delete(assignmentsToDelete).asObjectDelta(user_oid)                 midpoint.modifyObject(delta, ModelExecuteOptions.createRaw())                 midpoint.recompute(UserType, basic.stringify(user.oid))                 }                <\/code>             <\/s:value>           <\/s:parameter>         <\/s:action>       <\/scriptExecutionRequest>     <\/iterativeScripting>   <\/work> <\/activity> <affectedObjects>   <activity id=\"8\">     <activityType>c:iterativeScripting<\/activityType>     <objects>       <type>c:RoleType<\/type>       <archetypeRef oid=\"49952180-49a0-4884-a8d1-5e1a50f26fa1\" relation=\"org:default\"         type=\"c:ArchetypeType\">         <!-- POCP EMP001001 Project Role ArcheType -->       <\/archetypeRef>     <\/objects>     <executionMode>full<\/executionMode>     <predefinedConfigurationToUse>production<\/predefinedConfigurationToUse>   <\/activity> <\/affectedObjects><\/code><\/pre>\n
 \u041f\u0440\u043e\u0431\u0443\u0435\u043c<\/p>\n
\u0421\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 PRJ000090<\/p>\n
\u0414\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043c Active False<\/strong><\/p>\n
\u041f\u0440\u043e\u0435\u043a\u0442 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435<\/p>\n
\u0420\u043e\u043b\u0438 \u043d\u0430 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 — \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442\u0430(\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u043d\u0435\u0441\u043b\u0430 \u0435\u0449\u0435 \u0434\u0432\u0435 \u0440\u043e\u043b\u0438 \u043d\u043e \u0442\u0443\u0442 \u043c\u044b \u0438\u0445 \u043d\u0435 \u0432\u0438\u0434\u0438\u043c), \u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u0430\u044f<\/p>\n
\u0413\u0440\u0443\u043f\u043f\u044b AD \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0435\u0433\u043e User \u0443\u0447\u0435\u0442\u043a\u0430<\/p>\n
<\/figure>\n
 \u041f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 Active False<\/strong><\/p>\n
\u041f\u0440\u043e\u0435\u043a\u0442 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0441\u044f Status \u0438 \u043d\u0430 \u0441\u0430\u043c\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438 displayName, \u0438 \u0435\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435\u043b\u044c\u0437\u044f \u0432\u044b\u0434\u0430\u0442\u044c (\u0442\u0430\u043a \u0436\u0435 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c)<\/p>\n
\u0420\u043e\u043b\u0438 \u043d\u0430 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 — \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u043c\u044f \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u043d\u043e \u044d\u0442\u043e \u0432\u0435\u0441\u0433\u043e \u043b\u0438\u0448\u044c \u0441\u0440\u0430\u0431\u043e\u0442\u0430\u043b \u043f\u043e\u0438\u0441\u043a<\/p>\n
\u0413\u0440\u0443\u043f\u043f\u044b AD \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0435\u0433\u043e User \u0443\u0447\u0435\u0442\u043a\u0430 —  \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043d\u0435\u0442<\/p>\n
<\/figure>\n
 \u0427\u0435\u0440\u0435\u0437 5 \u043c\u0438\u043d\u0443\u0442<\/strong>(\u043c\u0430\u043a\u0441\u0438\u043c\u0443\u043c) <\/p>\n
\u0421\u0440\u0430\u0431\u043e\u0442\u0430\u043b task  POCP Unassign deactivated projects<\/p>\n
\u041f\u0440\u043e\u0435\u043a\u0442 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0442\u0435\u043f\u0435\u0440\u044c 0 Members<\/p>\n
\u0420\u043e\u043b\u0438 \u043d\u0430 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0441\u043d\u044f\u0442\u044b<\/p>\n
\u0413\u0440\u0443\u043f\u043f\u044b AD \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0435\u0433\u043e User \u0443\u0447\u0435\u0442\u043a\u0430 \u0441\u043d\u044f\u0442\u044b<\/p>\n
<\/figure>\n
\u0412\u043e\u0442 \u0442\u0430\u043a \u043f\u0440\u043e\u0441\u0442\u043e \u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0435 \u0431\u044b\u0441\u0442\u0440\u043e \u043c\u043e\u0436\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u041f\u0440\u043e\u0435\u043a\u0442 \u0432 IDM Midpoint!<\/strong><\/p>\n<\/div>\n<\/div>\n<\/div>\n
<\/div>\n

 \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438  https:\/\/habr.com\/ru\/articles\/912720\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
<\/div>\n
\n
\n
\n
\n
\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c <\/strong>\u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e \u041f\u0440\u043e\u0435\u043a\u0442\u044b. \u0414\u043e\u043f\u0443\u0441\u0442\u0438\u043c \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043d\u0435\u0442 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0433\u0434\u0435 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0443 \u043a\u043e\u0433\u043e \u043a\u0430\u043a\u043e\u0439 \u043f\u0440\u043e\u0435\u043a\u0442, \u0438 \u043c\u044b \u043d\u0435 \u043c\u043e\u0436\u0435\u043c \u0438\u0445 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0438\u0437 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0438 \u0440\u0430\u0437\u0432\u0435\u0441\u0438\u0442\u044c \u043a\u0430\u043a \u0434\u0435\u043b\u0430\u043b\u0438 \u044d\u0442\u043e \u0441 \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c\u0438. \u041f\u0443\u0441\u0442\u044c \u0443 \u043d\u0430\u0441 \u0431\u0443\u0434\u0435\u0442 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0435, \u0434\u0430\u0436\u0435 \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e-\u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0435, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0438 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041f\u0440\u043e\u0435\u043a\u0442 \u0432 \u0444\u0438\u043b\u043e\u0441\u043e\u0444\u0441\u043a\u043e\u043c \u0441\u043c\u044b\u0441\u043b\u0435 \u044d\u0442\u043e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c — \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0447\u043b\u0435\u043d\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. <\/p>\n
<\/figure>\n
\u041d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0437\u0430\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0432\u043e\u0439 GUI Midpoint, \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u041f\u0440\u043e\u0435\u043a\u0442. \u0412 Request Access \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u0438. \u0422\u0430\u043c \u0436\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043f\u043e\u0434\u0447\u0438\u043d\u0451\u043d\u043d\u044b\u0445 \u0438 \u0441\u0435\u0431\u044f \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442-\u0432\u044b\u0434\u0430\u0451\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442. \u041c\u043e\u0436\u0435\u0442 \u043d\u0430 \u041f\u0440\u043e\u0435\u043a\u0442 \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442 \u0440\u043e\u043b\u044c(\u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0430\u044f AD \u0433\u0440\u0443\u043f\u043f\u0443 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u0443 \u0438 \u043e\u043d\u0430 \u0431\u0443\u0434\u0435\u0442 \u0443 \u0432\u0441\u0435\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0438\u043b\u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c\u0443 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041c\u043e\u0436\u043d\u043e \u0443\u0431\u0440\u0430\u0442\u044c \u0440\u043e\u043b\u044c \u0438\u043b\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043f\u0440\u0430\u0432\u0430 \u043f\u0440\u0438\u0448\u0435\u0434\u0448\u0438\u0435 \u0441 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u0441\u043d\u0438\u043c\u0443\u0442\u0441\u044f.  <\/p>\n
\u041f\u0440\u043e\u0441\u0442\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/p>\n
<\/figure>\n
1. \u0423 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a User \u0435\u0441\u0442\u044c \u0440\u043e\u043b\u044c \u0434\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u0430\u0432\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0432 GUI \u043f\u0440\u043e\u0435\u043a\u0442\u044b Role.<\/p>\n
2. \u041f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0440\u043e\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 N001 Role \u0441\u0440\u0430\u0437\u0443 \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u043f\u0440\u043e\u0435\u043a\u0442 N001 User \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u0442 \u0441\u0435\u0431\u0435 \u043f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n
3. \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a(\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a) \u0432 Request Access  c\u0435\u0431\u0435, \u043d\u0430 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 Position User, \u0438\u043b\u0438 \u043f\u043e\u0434\u0447\u0438\u043d\u0435\u043d\u043d\u044b\u043c \u043d\u0430 \u0438\u0445 User Position \u0432\u044b\u0434\u0430\u0435\u0442 \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n
4. \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a(\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a)  \u0432 Request Access \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442 \u0440\u043e\u043b\u0438 Forward Role(\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0430\u0432, \u043f\u0440\u043e\u0435\u043a\u0442 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044c \u043f\u0440\u0430\u0432, \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u0435\u043c \u0431\u0443\u0434\u0435\u0442 \u0443\u0447\u0435\u0442\u043a\u0430 AD \u043d\u0430 \u043f\u043e\u0437\u0446\u0438\u0438 User \u0438\u043b\u0438 \u0442\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 User) \u043d\u0430 \u043f\u0440\u043e\u0435\u043a\u0442 N001 User.<\/p>\n
5. \u0422\u0430\u043c \u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u0434\u0430\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442 N001 User \u0440\u043e\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u0440\u043e\u043b\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0443\u044e \u0440\u043e\u043b\u044c(\u0435\u0441\u043b\u0438 \u0435\u0451 \u043d\u0435\u0442).<\/p>\n
6. \u042d\u0442\u0443 \u0440\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c  \u043f\u0440\u043e\u0435\u043a\u0442\u0443 N001 User \u0438\u043b\u0438  \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e Position User. \u041d\u0430 \u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0434\u0430\u0435\u0442 \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u0442\u044c \u0440\u043e\u043b\u044c \u0435\u0441\u043b\u0438 \u0443 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u0435\u043b\u044f \u043d\u0435\u0442  \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role, \u0438 \u0441\u043d\u0438\u043c\u0430\u0435\u0442 \u0435\u0451 \u0435\u0441\u043b\u0438 \u0443 \u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044f \u043f\u0440\u043e\u043f\u0430\u0434\u0430\u0435\u0442  \u0440\u043e\u043b\u044c \u041f\u0440\u043e\u0435\u043a\u0442 N001 Role.<\/p>\n
\u041f\u043e\u043b\u043d\u0435\u0439\u0448\u0430\u044f \u0441\u0445\u0435\u043c\u0430<\/p>\n
\n
Files: JPG<\/a>, SVG<\/a><\/figcaption><\/div>\n<\/figure>\n
\u041e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 Github IDM-Midpoint-POC-Employments-and-Positions<\/a><\/p>\n
Docker-\u043e\u0431\u0440\u0430\u0437: IDM-Midpoint-POC-Employments-and-Positions\/tree\/main\/Docker<\/a><\/p>\n
 \u041f\u0435\u0440\u0435\u0434 \u043d\u0430\u0447\u0430\u043b\u043e\u043c<\/strong><\/p>\n
\u0412\u044b\u043d\u0443\u0436\u0434\u0435\u043d \u043f\u0440\u0438\u0441\u043a\u043e\u0440\u0431\u043d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c \u0447\u0442\u043e  orgRelation \u043d\u0443 \u043d\u0438\u043a\u0430\u043a \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 Midpoint 4.9.1, \u0438\u043b\u0438 \u044f \u0432\u0441\u0435 \u0442\u0430\u043a\u0438 \u043d\u0435 \u0443\u0433\u0430\u0434\u0430\u043b \u043a\u0430\u043a \u0438\u043c\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0442\u043e\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043a\u043e\u043d\u0435\u0447\u043d\u043e. \u0412 3-\u0442\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c <\/strong>\u043e\u043d \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u043e \u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c, \u043d\u043e \u0441\u0435\u0439\u0447\u0430\u0441 \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0438\u043a\u0430\u043a! \u0410 \u0432  Midpoint 4.9.2-3 \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0432 targetSelection  group collection \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430 4.9.1.<\/p>\n
\u0422\u0430\u043a \u0447\u0442\u043e \u043f\u0435\u0440\u0435\u0434\u0435\u043b\u044b\u0432\u0430\u0435\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043b\u044f \u0440\u043e\u043b\u0438 POCE GUI My Subordinates, \u0444\u0443\u043b\u0441\u0442\u043e\u0440\u0438 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043d\u043e \u0438\u0434\u0435\u044f \u0442\u0430\u043a\u0430\u044f \u0432 User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0434\u0438\u043d \u0434\u0435\u043f\u0430\u0440\u0442\u0430\u043c\u0435\u043d\u0442 \u043e\u0434\u0438\u043d \u043f\u0440\u0438\u0437\u043d\u0430\u043a — \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0438\u043a \u0434\u0430\/\u043d\u0435\u0442. \u0412 \u0435\u0433\u043e \u0441\u043f\u0438\u0441\u043e\u043a \u0441 Forward Roles \u043f\u0438\u0448\u0435\u043c \u0441\u0442\u0440\u043e\u043a\u0443 DEPARTMENT|EMP001001|DEP10101|POS000101|EMP002001|600667|default \u0438\u043b\u0438 manager. Org \u0420\u043e\u043b\u044c Departament \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u0435\u0451 \u0438 \u043f\u0438\u0448\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043c\u043e\u0439 \u0431\u043e\u0441\u0441 \u0442\u0430\u043a\u043e\u0439-\u0442\u043e \u0438 User \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u044d\u0442\u043e \u0432 \u0441\u0435\u0431\u044f \u0438 \u043f\u0438\u0448\u0435\u0442 \u043c\u043e\u0439 \u0431\u043e\u0441\u0441 \u0442\u0430\u043a\u043e\u0439-\u0442\u043e. \u041f\u0440\u043e\u0441\u0442\u043e \u0438 \u043f\u043e\u043d\u044f\u0442\u043d\u043e.<\/p>\n
\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 \u041f\u0440\u043e\u0435\u043a\u0442\u044b \u0432 \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u044e  \u0421\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a-\u0422\u0440\u0443\u0434\u043e\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e-\u041d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043d\u0430 \u0434\u043e\u043b\u0436\u043d\u043e\u0441\u0442\u044c<\/strong><\/p>\n
\u0414\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0443 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u043e\u0432. \u041a\u043b\u0430\u0434\u0435\u043c \u0444\u0430\u0439\u043b project.xsd \u0432 \/opt\/midpoint\/var\/schema\/<\/p>\n
\u0441 \u043a\u043e\u0434\u043e\u043c<\/p>\n
<xsd:schema elementFormDefault=\"qualified\"             targetNamespace=\"http:\/\/example.com\/xml\/ns\/mySchema\"   xmlns:tns=\"http:\/\/example.com\/xml\/ns\/mySchema\"   xmlns:a=\"http:\/\/prism.evolveum.com\/xml\/ns\/public\/annotation-3\"   xmlns:c=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/common-3\"   xmlns:xsd=\"http:\/\/www.w3.org\/2001\/XMLSchema\">   <xsd:complexType name=\"RoleExtensionType\">     <xsd:annotation>       <xsd:appinfo>         <a:extension ref=\"c:RoleType\"\/>       <\/xsd:appinfo>     <\/xsd:annotation>     <xsd:sequence> <xsd:element name=\"role_active\" type=\"xsd:boolean\" minOccurs=\"0\" maxOccurs=\"1\">         <xsd:annotation>           <xsd:appinfo>             <a:indexed>true<\/a:indexed>             <a:displayName>Active<\/a:displayName>             <a:displayOrder>1<\/a:displayOrder>             <a:help>ToDo<\/a:help>           <\/xsd:appinfo>         <\/xsd:annotation> <\/xsd:element>     <\/xsd:sequence>   <\/xsd:complexType>   <xsd:complexType name=\"OrgExtensionType\">     <xsd:annotation>       <xsd:appinfo>         <a:extension ref=\"c:OrgType\"\/>       <\/xsd:appinfo>     <\/xsd:annotation>     <xsd:sequence>       <xsd:element name=\"org_boss\" type=\"xsd:string\" minOccurs=\"0\" maxOccurs=\"unbounded\">         <xsd:annotation>           <xsd:appinfo>             <a:indexed>true<\/a:indexed>         <a:displayName>Org Bosses<\/a:displayName>             <a:displayOrder>138<\/a:displayOrder>             <a:help>ToDo<\/a:help>           <\/xsd:appinfo>         <\/xsd:annotation> <\/xsd:element>     <\/xsd:sequence>   <\/xsd:complexType> <\/xsd:schema><\/code><\/pre>\n
 \u041f\u0435\u0440\u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c Midpoint<\/p>\n
\u0412 Configuration\\Import Object \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c<\/p>\n
\u043a\u043e\u0434<\/p>\n
<sequence xmlns=\"http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/common-3\">   <name>Projects number<\/name>   <counter>1<\/counter>   <maxCounter>999999<\/maxCounter>   <allowRewind>true<\/allowRewind>   <maxUnusedValues>10<\/maxUnusedValues> <\/sequence><\/code><\/pre>\n
\u042d\u0442\u043e \u0441\u0447\u0435\u0442\u0447\u0438\u043a \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 1 \u0438\u0434\u0435\u0442 \u0434\u043e 999999 \u0434\u043b\u044f name \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445<\/p>\n
\u0412 Configuration\\Object Template\\ \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043e\u0431\u0436\u0435\u043a\u0442 \u0442\u0435\u043c\u043f\u043b\u0435\u0439\u0442 POCP EMP001001 Project Role Object Template<\/p>\n
\u0432 \u043d\u0435\u043c \u043a\u043e\u0434<\/p>\n
<item id=\"104\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP EMP001001 Person Project User from Project Role<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>a9291b83-3b40-4581-91c8-63f05410ed63<\/oid>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"105\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCP Policy: Project Role only for Project User or Position User<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>c35b6362-1f81-4f87-917b-1921a984fb54<\/oid>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"5\">   <ref>assignment<\/ref>   <displayName>Assignment to Position Role Catalog<\/displayName>   <mapping id=\"9\">     <name>Name<\/name>     <source>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>OrgType<\/targetType>         <filter>           <q:equal>             <q:path>identifier<\/q:path>             <expression>               <trace>true<\/trace>               <script>                 <code>result = \"\\\\RC\\\\\" + user_employment_parent + \"\\\\\" + \"Position\"                   return result<\/code>               <\/script>             <\/expression>           <\/q:equal>         <\/filter>       <\/assignmentTargetSearch>     <\/expression>   <\/mapping> <\/item> <item id=\"16\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCE Policy: Forward Role for Employment in EMP01001 Company<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <_metadata id=\"19\">         <provenance>           <acquisition id=\"20\">             <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"               type=\"c:UserType\">               <!-- administrator -->             <\/actorRef>             <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>             <timestamp>2025-03-24T10:12:58.273Z<\/timestamp>           <\/acquisition>         <\/provenance>       <\/_metadata>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>8e4b4ea4-22b7-4b09-98ce-aa8fd5ace849<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>if (user_employment_parent == \"EMP001001\")           {return true}           else{return false}<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item> <item id=\"17\">   <ref>assignment<\/ref>   <displayName>Auto assignment to POCE Policy: Forward Role for Employment in EMP01002 Company<\/displayName>   <mapping id=\"9\">     <authoritative>true<\/authoritative>     <strength>strong<\/strength>     <source>       <_metadata id=\"19\">         <provenance>           <acquisition id=\"20\">             <actorRef oid=\"00000000-0000-0000-0000-000000000002\" relation=\"org:default\"               type=\"c:UserType\">               <!-- administrator -->             <\/actorRef>             <channel>http:\/\/midpoint.evolveum.com\/xml\/ns\/public\/common\/channels-3#user<\/channel>             <timestamp>2025-03-24T10:12:58.273Z<\/timestamp>           <\/acquisition>         <\/provenance>       <\/_metadata>       <path xmlns:gen569=\"http:\/\/example.com\/xml\/ns\/mySchema\">         c:extension\/gen569:user_employment_parent<\/path>     <\/source>     <expression>       <assignmentTargetSearch>         <targetType>RoleType<\/targetType>         <oid>047dcf56-3555-4940-aac4-50b15b9071a3<\/oid>       <\/assignmentTargetSearch>     <\/expression>     <condition>       <script>         <code>if (user_employment_parent == \"EMP001002\")           {return true}           else{return false}<\/code>       <\/script>     <\/condition>   <\/mapping> <\/item> <mapping id=\"4\">   <name>000<\/name>   <strength>weak<\/strength>   <expression>     <script>       <code>return actor.personalNumber<\/code>     <\/script>   <\/expression>   <target>     <path xmlns:gen74=\"http:\/\/example.com\/xml\/ns\/mySchema\">c:extension\/gen74:user_boss<\/path>   <\/target> <\/mapping> <mapping id=\"13\">   <name>001<\/name>   <strength>strong<\/strength>   <source>     <_metadata id=\"17\">       <provenance>         <acquisition id=\"18\">           <actorRef<\/code><\/pre>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-461032","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/461032","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=461032"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/461032\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=461032"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=461032"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=461032"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}