# RoleManagementConfigurationType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

A configuration for role management: role catalog, role assignments, etc.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
description | property string | [0,1] |
documentation | property string | [0,1] | Technical documentation for a particular object or construct.
roleCatalogRef | reference ObjectReferenceType | [0,1] | Reference to the root object of the role catalog.
roleCatalogCollections | property ObjectCollectionsUseType | [0,1] | Specifies the set of object collections ("role catalog views") to display in role catalog.
defaultCollection | property ObjectCollectionUseType | [0,1] | Specifies the default object collections ("role catalog view") to display in role catalog.
defaultAssignmentConstraints | property AssignmentConstraintsType | [0,1] | Default assignment constraints.
defaultExecuteAfterAllApprovals | property boolean | [0,1] | Default value for "Execute after all approvals" flag.
autoassignEnabled | property boolean | [0,1] | Global switch that enables autoassign functionality for roles.
accessesMetadataEnabled | property boolean | [0,1] | Global switch that enables/disables accesses metadata processing for assignment holders.
relations | container RelationsDefinitionType | [0,1] | Definition of (custom) relations.

- ### Items

  - #### description

    Flags: RAM,runtime

    Multiplicity: [0,1]

  - #### documentation

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Technical documentation for a particular object or construct.

    The purpose of this element is to document system configuration and behavior. The documentation will not be presented to end users. In fact, it will probably not be presented at all in midPoint user interface. This documentation element is supposed to be a part of the technical documentation of midPoint deployment. The tools than generate deployment configuration will look for these elements and combine them to compiled documentation document.

    AsciiDoc formatting is assumed for this element. Any leading or trailing whitespace is skipped. Indentation equivalent to he indentation of the first non-blank line of text is also skipped.

  - #### roleCatalogRef

    Flags: RAM

    Multiplicity: [0,1]

    Reference to the root object of the role catalog. REMOVED: Configuration was moved to adminGuiConfiguration/accessRequest/roleCatalog

  - #### roleCatalogCollections

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Specifies the set of object collections ("role catalog views") to display in role catalog. If this element is not specified then the default (hardcoded) collections will be displayed. If this element is specified then only those collections specified in this element are displayed. REMOVED: Configuration was moved to adminGuiConfiguration/accessRequest/roleCatalog Requires value converting (roleCatalogCollections.collection.collectionUri -> collection.identifier)

  - #### defaultCollection

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Specifies the default object collections ("role catalog view") to display in role catalog. REMOVED: Configuration was moved to adminGuiConfiguration/accessRequest/roleCatalog Requires value converting (roleCatalogCollections.collection.collectionUri -> collection.identifier; collection.default should be set to true)

  - #### defaultAssignmentConstraints

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Default assignment constraints. These constraints are applied globally to the entire system. This value defines whether the same abstract role may be assigned only once or multiple times to the same focus. This is the system-wide default value. It will be possible to override this value for each individual role using the policy rules in the future midPoint versions.

  - #### defaultExecuteAfterAllApprovals

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Default value for "Execute after all approvals" flag.

  - #### autoassignEnabled

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Global switch that enables autoassign functionality for roles.

  - #### accessesMetadataEnabled

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Global switch that enables/disables accesses metadata processing for assignment holders. When enabled assignment holder object stores not only indirect assignments (roleMembershipRef) but also the details how it appeared on the object. This is enabled by default.

  - #### relations

    Flags: RAM,runtime

    Multiplicity: [0,1]

    Definition of (custom) relations. This is system-global definition.