Re: [Unity-idm-discuss] get users sys:ProjectManagementRole

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 01.10.2021 o 15:17, Sander Apweiler pisze:
> Hi Krzysztof,
>
> is there a way to get the sys:ProjectManagementRole of a user in a
> specific group within output translation profiles? And is this
> information stored for subgroups as well? I saw in the web UI that an
> account has manager privileges in a group (and subgroups because of the
> inheritance) but this is not shown as attribute in the subgroup.
>
> We have a connected service which needs to know who is the manager of a
> specific group.

The ProjectManagementRole attribute is only defined in one place - in 
subgroups its presence is not needed to have authZ.

So if you want to have this attribute available in some sub-group 
context you need to add an attribute statement in that sub-group, to 
copy the role attribute from the parnet group. Then it will be visible 
in output profile.

HTH,
Krzysztof