<!--
  ~ Copyright (c) 2024 Evolveum and contributors
  ~
  ~ This work is dual-licensed under the Apache License 2.0
  ~ and European Union Public License. See LICENSE file for details.
  -->
<policy xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
        oid="00000000-0000-0000-0000-000000000332">
    <name>Privileged access</name>
    <description>Classification used to label roles providing privileged access.</description>
    <assignment>
        <targetRef oid="00000000-0000-0000-0000-000000000330" type="ArchetypeType"/>
    </assignment>
    <inducement id="4">
        <orderConstraint>
            <order>2</order>
        </orderConstraint>
        <focusType>UserType</focusType>
        <focusMappings>
            <mapping>
                <strength>strong</strength>
                <expression>
                    <value>true</value>
                </expression>
                <target>
                    <path>extension/privilegedAccess</path>
                </target>
            </mapping>
        </focusMappings>
    </inducement>
</policy>
