<archetype xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
           xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
           xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
           xmlns:org="http://midpoint.evolveum.com/xml/ns/public/common/org-3"
           xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
           xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
           xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3"
           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" oid="00000000-0000-0001-0328-000000000160">
    <name>Universal security group</name>
    <description>Universal security groups are basic roles. The Universal security groups are integrating technical components for creation of user access with business description of the access.</description>
    <lifecycleState>active</lifecycleState>
    <indestructible>true</indestructible>
    <assignment>
        <activation>
            <effectiveStatus>enabled</effectiveStatus>
        </activation>
        <assignmentRelation>
            <holderType>RoleType</holderType>
        </assignmentRelation>
    </assignment>
    <assignment>
        <targetRef oid="00000000-0000-0000-0000-000000000328" relation="org:default" type="c:ArchetypeType"/>
        <activation>
            <effectiveStatus>enabled</effectiveStatus>
        </activation>
    </assignment>
    <iteration>0</iteration>
    <iterationToken/>
    <archetypeRef oid="00000000-0000-0000-0000-000000000328" relation="org:default" type="c:ArchetypeType"/>
    <roleMembershipRef oid="00000000-0000-0000-0000-000000000328" relation="org:default" type="c:ArchetypeType"/>
    <activation>
        <effectiveStatus>enabled</effectiveStatus>
    </activation>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>UniversalSecurityGroup</intent>
        </construction>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>account</kind>
            <intent>user</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>UserType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>account</kind>
            <intent>msa</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>UserType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>DomainLocalDistributionGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>DomainLocalSecurityGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>GlobalDistributionGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>GlobalSecurityGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>UniversalDistributionGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <inducement>
        <lifecycleState>active</lifecycleState>
        <construction>
            <strength>weak</strength>
           <!-- replace resource filter with direct Oid value if needed -->
            <!--<resourceRef oid="75c197a9-1071-4ac8-b8c0-414b1c8eb4f1" relation="org:default" type="c:ResourceType"/>-->
            <resourceRef relation="org:default" type="c:ResourceType">
                <filter>
                    <q:text>name = "AD first steps"</q:text>
                </filter>
            </resourceRef>
            <kind>entitlement</kind>
            <intent>UniversalSecurityGroup</intent>
            <association>
                <ref>ri:UniversalSecurity</ref>
                <outbound>
                    <strength>strong</strength>
                    <expression>
                        <associationFromLink>
                            <projectionDiscriminator xsi:type="c:ShadowDiscriminatorType">
                                <kind>entitlement</kind>
                                <intent>UniversalSecurityGroup</intent>
                            </projectionDiscriminator>
                        </associationFromLink>
                    </expression>
                </outbound>
            </association>
        </construction>
        <order>2</order>
        <focusType>RoleType</focusType>
    </inducement>
    <!--<inducement>
        <lifecycleState>active</lifecycleState>
        <targetRef oid="00000000-0000-0001-0328-000000000100" relation="org:default" type="c:ArchetypeType"/>
        <focusType>RoleType</focusType>
    </inducement>-->
    <archetypePolicy>
        <display>
            <label>Universal security group</label>
            <pluralLabel>Universal security groups</pluralLabel>
            <icon>
                <cssClass>fas fa-users</cssClass>
                <color>green</color>
            </icon>
        </display>
    </archetypePolicy>
    <superArchetypeRef oid="00000000-0000-0001-0328-000000000100" relation="org:default" type="c:ArchetypeType">
        <description>Referencing to the parent archetype</description>
        <referentialIntegrity>default</referentialIntegrity>
    </superArchetypeRef>
    <archetypeType>structural</archetypeType>
</archetype>
