Additional assignment creator for context resources
This extension adds additional resource assignments for resources that are referred by the contexts in which an identity is. You can use the concept together with the assignment policies or as an alternative to the assignment policies.
The extension works for all types of context objects, not just org. units.
By default, has the property ORGUNIT.ROLESREF
that links Resource data objects to Org. unit data objects. You must use the extension in order to have the referred resources assigned to the identities in an org. unit.
Configuration and example
Using the extension, you can configure the properties to use to refer resources on the context data objects.
By default, RoPE treats reference properties as attributes with the datatype string. In order for the extension to work, you must register all the properties specified as ResourceAttributes
as being treated as data type Reference. Use the RoPEReferenceAttribs
customer setting to do this:
ResourceAttributes
- type a comma-delimited list of reference attributes present on context objects to use to refer to resources that should be assigned to the identities in the contexts.
<add type="Omada.RoPE.Controller.OISX.Extensions.AdditionalAssignmentCreatorForOrgUnitRoles, Omada.RoPE.Controller.OISX" >
<settings>
<add key="ResourceAttributes" value="ROLESREF"/>
</settings>
</add>