The role above will be automatically assigned to any user that has property
employeeType set to
intern. As all midPoint mapping even this mapping is relativistic. If user becomes an intern (the
employeeType property is changed) then the role is automatically assigned. When the user stops being an intern the role is unassigned.
See Role Autoassign Configuration page for more details.
Autoassignment in Object Template
TODO: exclusion and pruning