# RoleRelationObjectSpecificationType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Definition of object with respect to subject relation to a role. Used to specify authorizations for role approvers, owners and so on.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
subjectRelation | property QName | [0,-1] | Specifies the relation that the subject needs to have to the role for this condition to trigger.
objectRelation | property QName | [0,1] | Specifies the relation that the target needs to have to the role for this condition to trigger.
includeMembers | property boolean | [0,1] | If set to true then the members of reference role (the one which the subjects belongs to) are included in the scope (limited by objectRelation).
includeReferenceRole | property boolean | [0,1] | If set to true then the reference role (the one which the subjects belongs to) is included in the scope.

- ### Items

  - #### subjectRelation

    Flags: RAM,runtime

    Multiplicity: [0,-1]

    Specifies the relation that the subject needs to have to the role for this condition to trigger. This is usually approver or owner. If not specified then any relation is accepted.

  - #### objectRelation

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Specifies the relation that the target needs to have to the role for this condition to trigger. This is usually default relation (member). If not specified then any relation is accepted.

  - #### includeMembers

    Flags: RAM,runtime

    Multiplicity: [0,1]

    If set to true then the members of reference role (the one which the subjects belongs to) are included in the scope (limited by objectRelation). If set to false then the members of reference role is excluded from the scope (objectRelation is not used in this case).

  - #### includeReferenceRole

    Flags: RAM,runtime

    Multiplicity: [0,1]

    If set to true then the reference role (the one which the subjects belongs to) is included in the scope. If set to false then the reference role is excluded from the scope.