<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ Copyright (c) 2010-2024 Evolveum and contributors
  ~
  ~ Licensed under the EUPL-1.2 or later.
  -->

<role oid="00000000-0000-0000-0000-000000000004"
      xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3">
    <name>Superuser</name>
    <description>Role that gives user full authorization in MidPoint.</description>
    <indestructible>true</indestructible>
    <assignment id="1">
        <identifier>archetype</identifier>
        <targetRef oid="00000000-0000-0000-0000-000000000320" type="ArchetypeType"/> <!-- System role -->
    </assignment>
    <assignment id="3">
        <identifier>privileged-access</identifier>
        <documentation>Superuser role provides privileged access - by definition.</documentation>
        <targetRef oid="00000000-0000-0000-0000-000000000332" type="PolicyType"/>
    </assignment>
    <authorization id="2">
        <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-3#all</action>
    </authorization>
</role>
