role-catalog-root
apps
app-foo
app-bar
role-low1
true
low
role-low2
true
low
role-high1
true
high
role-high2
true
high
service-low1
true
low
service-low2
true
low
service-high1
true
high
service-high2
true
high
role-requester
gui-access
http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll
self-read
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#get
self-modify
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify
execution
- credentials
- assignment
users-read
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read
orgs-search
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read
- name
- description
- displayName
service-read
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read
- name
- description
- displayName
- requestable
- riskLevel
assign-requestable-services
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign
request
ServiceType
requestable
true
riskLevel
low
org:default
roles-read
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read
- name
- description
- displayName
- requestable
- riskLevel
assign-requestable-roles
http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#assign
request
RoleType
requestable
true
riskLevel
high
org:default
hidden
myself
true
org:default
true
true
user1
active
test1
Test5ecr3t