# AccessCertificationAssignmentReviewScopeType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Supertype: AccessCertificationObjectBasedScopeType
Scope for assignment-related reviews.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
name | property string | [0,1] | User-readable name of this scope definition.
description | property string | [0,1] | Description of this scope definition.
objectType | property QName | [1,1] | Type of objects to be selected for certification.
searchFilter | property SearchFilterType | [0,1] | Filter to find objects for certification.
itemSelectionExpression | property ExpressionType | [0,1] | Expression that selects items that are to be included in the certification.
caseGenerationExpression | property ExpressionType | [0,-1] | Expression that produces certification cases.
includeAssignments | property boolean | [0,1] | Should assignments be included in the certification?
includeInducements | property boolean | [0,1] | Should inducements be included in the certification?
includeRoles | property boolean | [0,1] | Should assignments/inducements of roles be included in the certification?
includeOrgs | property boolean | [0,1] | Should assignments/inducements of orgs be included in the certification?
includeResources | property boolean | [0,1] | Should assignments/inducements of resources be included in the certification?
includeServices | property boolean | [0,1] | Should assignments/inducements of services be included in the certification?
includeUsers | property boolean | [0,1] | Should assignments/inducements of users (e.
enabledItemsOnly | property boolean | [0,1] | Should we approve only assignments/inducements that are currently enabled? (I.
relation | property QName | [0,-1] | Relation(s) which are to be considered.

- ### Items

  - #### name

    Flags: RAM,runtime

    Multiplicity: [0,1]

    User-readable name of this scope definition. (In case it is necessary.)

  - #### description

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Description of this scope definition.

  - #### objectType

    Flags: RAM,runtime

    Multiplicity: [1,1]

    Type of objects to be selected for certification.

  - #### searchFilter

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Filter to find objects for certification. By default, all objects of a given type will be selected.

  - #### itemSelectionExpression

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Expression that selects items that are to be included in the certification. Exact use of this expression depends on the certification handler. E.g. user assignment handler could call this expression individually with each assignment to determine which assignments should be included and which should not.

  - #### caseGenerationExpression

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Expression that produces certification cases. This can be any expression, whose input is an object that has passed the search filter specified above, and its output is a list of certification cases. An example: a groovy expression, creating certification cases by selecting user's "risky" assignments (e.g. assignments to a roles of a given type/types). Another example can be the computation of all assignments (direct and indirect ones), and selecting among these. NOT IMPLEMENTED YET

  - #### includeAssignments

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments be included in the certification?

  - #### includeInducements

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should inducements be included in the certification?

  - #### includeRoles

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments/inducements of roles be included in the certification?

  - #### includeOrgs

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments/inducements of orgs be included in the certification?

  - #### includeResources

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments/inducements of resources be included in the certification?

  - #### includeServices

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments/inducements of services be included in the certification?

  - #### includeUsers

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should assignments/inducements of users (e.g. deputy relations) be included in the certification?

  - #### enabledItemsOnly

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Should we approve only assignments/inducements that are currently enabled? (I.e. with administrativeStatus either null or ENABLED)

  - #### relation

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Relation(s) which are to be considered. Value of q:any means "any relation". If no relation is present, org:default (i.e. null) is assumed.