How does Grantable roles in User Roles will work with 5.21.3 version of modeler

Hi All, Below XPath condition is used in system module. And this XPath condition is included for UserRole entity. Can someone help me understanding how this XPath will work. [System.UserRoles = '[%CurrentUser%]' or System.grantableRoles[reversed()]/System.UserRole/System.UserRoles = '[%CurrentUser%]'] PFA.  
2 answers

The specific xpath:

[System.UserRoles = '[%CurrentUser%]' or System.grantableRoles[reversed()]/System.UserRole/System.UserRoles = '[%CurrentUser%]']


means a user can access the UserRole object if

  • there is an associated User for that UserRole which is the current user OR
  • it has a grantableRoles association with another UserRole which is associated with the current user. 



This is related to the User Management Properties in the User role config.

An option to allow users with a certain role , to manage users with a specific rol(set)