# ExecutionPrivilegesSpecificationType (Complex Type)

### Namespace: http://midpoint.evolveum.com/xml/ns/public/common/common-3

Privileges and identity that will be used to execute an expression or similar operation.

Item Summary
Name | Type | Multiplicity | Description
--- | --- | --- | ---
runAsRef | reference ObjectReferenceType | [0,1] | Reference to the user (or other focal object) whose identity will be used to execute the operation in question.
runPrivileged | property boolean | [0,1] | If set to "true", the full authorization (i.

- ### Items

  - #### runAsRef

    Flags: RAM

    Multiplicity: [0,1]

    Reference to the user (or other focal object) whose identity will be used to execute the operation in question. The operation will use authorizations that this object has. If the operation triggers any change then the change will be audited under the identity of this object as well as under the identity of the original principal (this is valid since 4.8). If no object is specified then the identity of currently logged-in user or the owner of the task will be used.

  - #### runPrivileged

    Flags: RAM,runtime

    Multiplicity: [0,1]

    If set to "true", the full authorization (i.e. "http://midpoint.evolveum.com/xml/ns/public/security/authorization-3#all" on all objects) will be used to execute the operation. An information about elevated privileges being used will be recorded in the audit log, if any audit records are produced during the operation.