<role xmlns="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
      xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3"
      xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3"
      xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3"
      xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3"
      xmlns:ri="http://midpoint.evolveum.com/xml/ns/public/resource/instance-3"
      oid="00000000-0000-0000-0000-000000000008"
      version="0">
   <name>End user</name>
   <description>Role authorizing end users to log in, change their passwords and review assigned accounts.</description>
   <metadata>
      <createTimestamp>2016-05-24T23:31:02.047Z</createTimestamp>
      <createChannel>http://midpoint.evolveum.com/xml/ns/public/gui/channels-3#init</createChannel>
   </metadata>
   <activation>
      <effectiveStatus>enabled</effectiveStatus>
      <enableTimestamp>2016-05-24T23:31:01.952Z</enableTimestamp>
   </activation>
   <iteration>0</iteration>
   <iterationToken/>
   <authorization id="1">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-ui-3#selfAll</action>
   </authorization>
   <authorization id="2">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
      <object>
         <special>self</special>
      </object>
   </authorization>
   <authorization id="3">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
      <object>
         <type>ShadowType</type>
         <owner>
            <special>self</special>
         </owner>
      </object>
   </authorization>
   <authorization id="4">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#changeCredentials</action>
      <phase>request</phase>
      <object>
         <special>self</special>
      </object>
      <c:item>credentials</c:item>
   </authorization>
   <authorization id="5">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#changeCredentials</action>
      <phase>request</phase>
      <object>
         <type>ShadowType</type>
         <owner>
            <special>self</special>
         </owner>
      </object>
      <c:item>credentials</c:item>
   </authorization>
   <authorization id="6">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
      <phase>execution</phase>
      <object>
         <special>self</special>
      </object>
      <c:item>credentials</c:item>
   </authorization>
   <authorization id="7">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#modify</action>
      <phase>execution</phase>
      <object>
         <type>ShadowType</type>
         <owner>
            <special>self</special>
         </owner>
      </object>
      <c:item>credentials</c:item>
   </authorization>
   <authorization id="8">
      <action>http://midpoint.evolveum.com/xml/ns/public/security/authorization-model-3#read</action>
      <object>
         <type>OrgType</type>
      </object>
      <object>
         <type>ResourceType</type>
      </object>
      <object>
         <type>RoleType</type>
      </object>
   </authorization>
   <roleType>system</roleType>
</role>