<authorization> <action>...</action> <object> <archetypeRef oid="00000000-0000-0000-0000-000000000321"/> </object> </authorization>
Archetype specification is multi-valued. If more than one
archetypeRef is used in the same authorization, then or operation is implied. I.e. match of a single archetypes from the list will make the authorization applicable for the object.
The <archetypeRef> mechanism is available in midPoint 4.0 and later. See also Archetypes.