Role Catalog Configuration

Last modified 12 Nov 2021 16:57 +01:00
Since 3.5
This functionality is available since version 3.5.

For an introduction to the role catalog concept please see Role Catalog page.

Role Catalog Implementation

Simply speaking, role catalog is just an organizational structure structure. However, instead of divisions and sections the role catalog is composed of categories. And instead of member users there are roles. But apart from that the role catalog is just ordinary organizational structure. The categories are ordinary org objects. The roles are assigned to the categories in exactly the same way as users are assigned to organizational structure. Remember: MidPoint can have any number of organizational structures and the role catalog is just one of them. There may even be several role catalogs at the same time as any midPoint object can be assigned to any number of orgs. However, the current limitation is that only one role catalog will be presented to end users.

Role Catalog Root

The root of this role catalog needs to be configured in the system configuration object like this:

<systemConfiguration>
    ...
    <roleManagement>
      <roleCatalogRef oid="8fbbe7b4-f422-11e6-b00e-e3483e7a1051"/>
    </roleManagement>
    ...
</systemConfiguration>

The roleCatalogRef reference above points to the org which is the root of the role catalog.

Was this page helpful?
YES NO
Thanks for your feedback