From 9b47923c2b6968803d33d5e7dec51e9693c5ce58 Mon Sep 17 00:00:00 2001 From: "ivan.zamkovyi" Date: Mon, 27 Apr 2026 17:44:13 +0300 Subject: [PATCH 1/7] update documentation for power automate --- .../11.1/admincenter/workflow/integrate.md | 70 +++++++++--------- .../workflow/connections_area.webp | Bin 2802 -> 16702 bytes .../admincenter/workflow/pa_permissions.webp | Bin 9350 -> 22584 bytes .../workflow/pa_template_message.webp | Bin 1906 -> 7658 bytes 4 files changed, 36 insertions(+), 34 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/integrate.md index 6b2f68751a..783b08ae18 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/integrate.md @@ -17,7 +17,7 @@ You can link an identity store in Directory Manager to Power Automate to achieve You can link a workflow in an identity store to a flow. Both system and user-defined workflows can be linked to flows. -- As a one-time process, connect your identity store to Microsoft Power Automate .See the Connect an +- As a one-time process, connect your identity store to Microsoft Power Automate. See the Connect an Identity Store to Power Automate topic. - Link a workflow to a flow by providing the URL of that flow in the workflow .See the Link an Identity Store Workflow to a Flow topic. @@ -31,19 +31,20 @@ auto approved. ::: +### Pre-steps before configuring connection to Power Automate + +1. Check your certificate and ensure that it is valid. +2. Make sure the Directory Manager server is deployed on a machine that is exposed over the + Internet, as Power Automate needs to communicate with the Directory Manager server for processing + requests. Power Automate cannot communicate with a server deployed on a machine behind NAT. + + ### Connect an Identity Store to Power Automate -To connect an identity tore to Power Automate, you must configure a Power Automate client for that +To connect an identity store to Power Automate, you must configure a Power Automate client for that identity store. This will establish a communication channel between the Directory Manager Data service and the Power Automate platform. -:::note -Make sure the Directory Manager server is deployed on a machine that is exposed over the -Internet, as Power Automate needs to communicate with the Directory Manager server for processing -requests. Power Automate cannot communicate with a server deployed on a machine behind NAT. -::: - - **To configure a Power Automate client for an identity store:** 1. In Admin Center, click **Identity Stores** in the left pane. @@ -55,20 +56,26 @@ requests. Power Automate cannot communicate with a server deployed on a machine 6. Enter the following information: - **Organization Code** - the unique name for the environment that stores your flows in Power - Automate. + Automate (the first part before dot). - **Region** - the location of your environment. - **Directory Manager Data Service URL** - the URL of the Data service. Requests from Power Automate will communicate with the Data service endpoint. The URL is as: - `https:///` For example: - https://powerautomate-netwrix1.msappproxy.net/directorymanagerdataservice + `https:///AdminCenter` For example: + https://powerautomate-netwrix1.msappproxy.net/AdminCenter - **Tenant ID** - the tenant ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - **Client ID** - the application ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. + - **Client Secret** - the client secret value to the Directory Manager application when you + registered it in Microsoft Entra Admin Center. + - **Redirect URI** - the URL of the endpoint which is used for authorization in Power Automate + `https:///AdminCenter/api/MsFlow/OAuthCallback`. For example: + https://powerautomate-netwrix1.msappproxy.net/AdminCenter/api/MsFlow/OAuthCallback :::note The Directory Manager application in Microsoft Entra Admin Center must have the following permissions for Power Automate: + ![pa_permissions](/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp) ::: @@ -90,12 +97,9 @@ triggered, the linked flow is auto triggered. 4. On the **Configure Workflows** tab of the **Workflows** page, click the ellipsis button for a workflow and select **Edit**. 5. On the **Edit Workflow** page, click **Power Automate Settings** in the top right corner. -6. On the **Power Automate Settings** dialog box, provide the username and password of a Microsoft - Entra ID account for managing flows in the Microsoft Power Automate portal. This account must - have the following permissions on the Entra tenant: - - ![pa_permissions](/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp) - +6. In the dialog box click **Authorize with Power Automate** button. A pop-up will open — + sign in with your corporate account and complete MFA. The pop-up will close automatically + after a successful login. 7. Click **Create Template**. Directory Manager creates a basic flow in Power Automate with the same name as the workflow, and displays the following message: @@ -104,27 +108,25 @@ triggered, the linked flow is auto triggered. 8. The next step is to copy the flow URL from Power Automate and provide it here. To copy the URL, do the following: - 1. Launch Power Automate and navigate to **Environments > GroupID application > My Flows**. This - page displays the flow you created in Power Automate from the Directory Manager workflow. + 1. Launch Power Automate, choose your environment and navigate to **My Flows**. This page displays the + flow you created in Power Automate from the Directory Manager workflow. 2. Hover the mouse over the flow to display the ellipsis button. Click it and select **Edit**. - 3. Expand the **Connections** area. - ![connections_area](/images/directorymanager/11.1/admincenter/workflow/connections_area.webp) + ![connections_area](/images/directorymanager/11.1/admincenter/workflow/connections_area.webp) - 4. Click **Approvals** in the **Connections** area. The approver of the Directory Manager - workflow is auto added here. Click **Save**. - 5. Expand the **When a HTTP request is received** area and copy the URL displayed for **HTTP - POST URL**. + 3. Expand the **Manual** area and set up **Who can trigger the flow"** + 4. Expand the **Start and wait for an approval** area and set up new connection field. Click **Save**. + 5. Navigate back to **Edit** window. Expand the **Manual** area and copy the URL displayed for **HTTP + URL**. -9. In Directory Manager, return to the workflow being linked to the flow, and click **Configure a - Request URL** on the **Power Automate Settings** dialog box. -10. Enter the copied HTTP POST URL in the **Request URL** box. -11. Click **Authenticate** and then **Save**. -12. Click **Update Workflow** on the **Edit Workflow** page to save the settings. -13. Click **Save** on the **Workflows** page. -14. Next, enable the linked flow in Power Automate. To do so: +9. In Directory Manager, return to the workflow being linked to the flow, and click + **Configure a Request URL** on the **Power Automate Settings** dialog box. +10. Enter the copied HTTP POST URL in the **Request URL** box. Then close dialog box. +11. Click **Update Workflow** on the **Edit Workflow** page to save the settings. +12. Click **Save** on the **Workflows** page. +13. Next, enable the linked flow in Power Automate. To do so: - 1. In Power Automate, navigate to **Environments > GroupID application > My Flows**. This page + 1. In Power Automate, choose your environment and navigate to **My Flows**. This page displays the flow you created in Power Automate from the Directory Manager workflow. 2. Hover the mouse over the flow to display the ellipsis button. Click it and select **Turn on**. diff --git a/static/images/directorymanager/11.1/admincenter/workflow/connections_area.webp b/static/images/directorymanager/11.1/admincenter/workflow/connections_area.webp index 6f7d3cb97f40ee58e59d88c5ac664292125ec277..6833ed2886de300ed89246a83604eb8c08adaf74 100644 GIT binary patch literal 16702 zcmYhiV{|S&um)P&*tKoj?XGRxw(%Cbwr$(CZQHip-tU}s?z;E+k(ED_nIw}ZYcd%n zNii{YAs`@iQDFr&1x`Zh|N4w9z}djmIv}zj{8T7mB1HK_$XLlpm>~ZeTLCmZiQhVn z4?C;Ds`Ef)WKl}T`d3@xr^w09IQae7T zV}VhE)85XXd4T`#@3Z`O>4(5Y?|ScsPx-gxugDh0r@%AdnP9tP<=y|s`s?(2_odez za0R#qOnS$BTmQy?H-4}F{^lVb6D#t*#dOC7rnQD z*6+&?%AevN`(OJH{oUWZ-7~<}@9mH8m%kSfVBs0)8E}_-tiJ+i{Bil}xo5e~-2oW> z+WJiTY(B@1{$AzQ=i>I}`m}l+e7pbH=j#vsH2IExj=t7D3Uuq={Jj0_e|J8Td_k7< zLiHB@R9?ZpBR&AGa~FHtepA2dK3YC*FZI)Us52m68LkL+1^m4Oym}vJ?+7-3Z3KG! z&OXWgF25IFLAP$_1!{g%ekwl)pMbvr@1t+G*948dJHPKP>b|ev9Ce8Iy=TAY0zH7} z-`pSP-`@@QyWV?&(ckpn@n6{A{}7p*2>|>C{IGljzHc9Q|65eQpkIog#Gjzg+4tRd zz@fnJ@BU}?3+$)u@8s6%^W~5F>03AMZTZAM({iK0^;E-@QP87^d){`^wEX25f6S|n z^nD8C%n2xxl-ykc(L>jzEU-^)ptA+71<^+Oc9=?9lSDM``Z-WMe4>J!)HB!ylHPu& z%@Z|pf2O_!2?B(zo;;$$VseVGa8sgTYByaq=y?D2q5|rNqi50`OO$Dr z&7pe+6{<{lCXy1|mG>QX%5pX4Z~U~T*bke99$)!|fjs`~abJ{!b0WUY`tgvBN z=bhcSl}~eAfD8tbvX5Ib&vq%_ky82k@*&@#_sAS&{L_TC)nW{$k8(dCRSn}J4YQgj z=vdZKqq%c49!?9x$7FT5U7f|ojL19}rB38~g93hmvEE#wX1{BWvuw1kxJHqG1d@k@nw)Cy{3RRUQvrvFQ8r&(>}GyRyH4POI~UOlwO zX9x{cwvCPVGyS0i2zhB!SGA;}VqRYQ3TL$2!u zzgQ~sR>R`hJ#5jeN<;%Dv1c}C=p|n2b1Od)gHdvgcd0H(gI2B{3~OF-6pmlV6w==+YsVCeQu<=@{9O28N-2%Z^=yg|aSkIuW+>4%P8k#+CzTIp5I;t6Q*V(0#sg2vi3*(GvJh zt1eRe`KD6hopl4e5PID7wH#mg!!!_s0$9>%SW=_J@_7kgxtw@|jicJ}7`ussM1%1@ z{DZ7ot3RF-0XEt*x68;c40gN8Q=DdIKwLvV!ghE9@3H{4uIT`_vZio70COSST!}m_hEbk0Zr#3hrM#Af{rzVE z>^msuOyUKw234f@Oi}(Xq{^Lo!m|ESdW|$>9KaK2?GgAM@ePA#L7fEbWe$~+ETn|} z3XHD=G(?t9LpL!LO(*M_-a7k&L~(wf-63PrJh@XV@nKHb!SE=~P|^}ofiOkFS_Wlt zE*Z8QLPe-iQBk3kL|3VUP^D23b@ESdsZ@TWYLo9xp=WTk>U0OOnDt@nI636WLvF z6BL=`RMK}G3@?RCT~Yo&5+S93s_(a|?&+t*M0@h^COgQ&ZP|*dxlt*Ws5WU-!Ez$o z^DFp@jovU)Kb6w89`8Ha%ws0?pmgohaUW4 z7;|wd6GV`;WPa~(_*m2S=`4zZG;F@7NjEgc^EeAKr22$sb&TcbR{w2%h1zgSX?``C z<-BO+f+WRFw`|<-RB$p_jUaV(@}S6Zh!BOy9O9Jx4xw`G6KODG1N6M;h^I!^&Hv(@ zM5i&vc*laRgW+s!P|zh*tTUh9TW(r#WLV?~@~E1dve`?L&DGv>B@1M_J)=5i>-D36 z2{4-Jwb_>w%Q|*F8yG~su$%XvD;fQdF=_m_&*Ld(#(U7@KG?ue&c^`PN=l>4sts%L zlK)eAb4~_wlKC)^fcJ3x(P{ zA11`q{Q(o2EhO>}^?#Z~JyX`4{@*eGZ#IOpQNVhX>Q$^7^{W3LWC&wS1t#euF%p?l z2_YsfO#knofWj!_Bd8lCv4hjVH^LtDJp31Z{xUOAf zAKrA3pQG_taSWC2GkDR%G~&)F|VgRX1ihFG?B5iZO>scmHTg17ZfaMb53=me1rKsNry%@)Waky z`M3YySNG~8Iu%B9Bzjl7zt7a}bJd(?X&InBrrE%7iw8jTtapE2XWC@$l7mK5-9^ld zd$l^4%P6HR8-#7p2ezgJmigy3w^_anA=E2!xCT};3RF;D22I>X-9xSG3^mvZ;Ct#K=) zVkTdWbZJqFTeWdOHQTQuYy$BK_O5|zopgMpf@meG3gHE$<1UtMl*oJcbjIO7eI~Ns zW_<*hS3x|;BDIxv4pq+mSN5pwdw1(=P*|3v973~Ni;z0fC8xV>OWB}(?y3&Dk;uDj z9@@JacHJRH$ubZXS55c1H-m38oUW)*F^q8o8= zj30jcy_alfbAJ>&EKqwh%jg7kE>9Ls58MzyO`|y|U3JYYe6r zkW7vZJ*!pR&rDO0=07K*G+XeQywx45aao20g9i^24rAw^=TaS<4jmV6#YE;-XSZr= zH3ATxmC^HHjUU({z2qH{%V&Qn%_qJGm@Mb!{jNVnsn4!JQA3*@UOu%@N~o}VK&19) zCuPTNM|<^_VlucjmNDphN@=`lJ974H3)$rJFlTwcQr|b0^4UM+JXv%&ZaJSO48KU_ zRmdRmNa5{6yoKbw+f&oWHRk6UwQ(QOM%7tlx!^k5#BA1J#u?zOb$=a|b;Sh}7>$65 zY%9>)menp)zSk(2t5JM*Os^jkTDSy)jdVMay9vv`Wg37Iv(QAdJVkuT|2!39liRS1 z#pLEBd42%trpBvVsRpeZ*G}^&`f%=jh|94Tp;=n?1bZ;`-O_ZAKUaG@ z=w%kE;v}QEdz+{_jSVm}tYg7$@j#%|Ue_UH>n+h$?V)?OWAO0X$iI9eQDj6u7W0KF zp5Idc1oLSRz=Pu|_q1f+m#tp^eSl}9NXD6x%Nme)Acv!+w=T*JH4bOB>b-O39RHh8e9EWgf~1y7JJIl3;C+9+RL+x=W|w~rwjBabONAJ zop?Zy>59^mA^%NS26$kSb4Zp&ly?({iXO%G;-j`jaI1ucloCFM0p>gWgJR+ft(d?q z_>n}UlrcAbl<%}T#XBqi)!J$rwRO&VigC{vh+$iV*%e-{kvmY$LE^iJ3Py>$a$MO-GFajz&jH456ju2A^$JgNsqh8KS^#4K>q3t~@TsVZ)oT{L>IxXof4;6kG;7gzh?c&V) zjJ&|V`s<&qvA3iODWzJPsv-u@0pfb4PRVMJNk$-zPaX>wj&=Ln3PlC|CQO^_B728D zw7r0yT?Cl#t)%)dUZdJATGwCU@LfCy7sC5nr6!{2`TcMvU``5&?HBZYg-Sw9Achh{ zKA;Z_uCVeUS_%>KBSbhtuL&!VI^WnHiX}R0kJlSeNdt;PdWf*qcbZRa$qme@bGq-a z;_nSnUz8aIY)l)KF58+GCLka%3U#-^3|ZvPh1lyf3vLOZKu4%xlORkQ)hk5gW)te< z=aBsD{limvu4C*=gTx1M#J%+QBv&FWp0w1t1qPSA&cQvPunBy?&Zx@Wkv#D&n$wgZ zSI}hsiRv6fje?p#eZ{QtgB#zwzseV$9ynRxyg(yIX6Q-h?E?t?cN~Z;M?m?QkW8u^nfhfFJ)|arb4IGck-J>%uOK05q6d zY@RxD-|qog{ee(n9BZj0@6fvgSICoYO&Js`?chBE?Tk(cHwBSiwPf%x6(1~OD(WObg zwnEr0ucVn<@SecxpM2r4x3|!jsWXTL~y&Em-4LB`8<*SJDFTYm>qz0WmAJmB4J%ss}#j7)lbblLg_h3H@ zgD@z_xlF1TlK!sdT25d3E11{*a28G0-+`Wm3srd|deH8nqix|G)ZLdv{;L_?J2(sI z3|NT~yC(4m0%vB~&*4_R2B)a=b*^FJ%7J}@F@!pCV8=r&)VPV5Eu-FVBQ~nxfDMpT^tv2Tl=t+7{N5LuME+~L^Jz!uW znl(@+g4XNZNm3LGVAS#xr%Toe&}<8a)!p(n;~|*?#U4u_8SFJ$OwvjFNPhYYP0~#x z7*9&li|m9Q5ss^tc%NokN<^bs%#Dniv{AMNSP=VLWAgXW0<;lyre`#NO}Ivuz@o3} z4;7LN4sJqU61Y)@+QNCjPY)+m{Dr9g0i(6h$|G!1eSu0yKCoMd?iP|cLP$mKPR@L( zM}^MDhr9+lQI=ID$Nd=4^hZ)q=6+s#C#TG0dIy6aGqKFgR4T^woJI;3ECwx;UnLN$ zYE#^rslSb*#VZ+Q7t^1$>xA%{fh}DsFF}y~iM;h$8n0D*kUen9yp(;o#c6bqe??n~ z2`2DxTDe@%tu0*=E^*nnq+Mxf8>+-fq)F7s)Yw*@6=I2(PC#1RCq^A|kKr!kk1ql| zO-*wD4vMBkDTqIbS6hbgHTm$73mxmEiDF~tS{>=tTqHT6AZLLN`(Q?pkdL6ROrcM` zW_Be-c-PC{vht;WD%xdr{CBgl9J_@%RQB2sVlgw$r_;7T$b0EE!+&qsm6x1>ipS5ntX+H7Av~1!cmXC+OG7< zpi-8I?n|Ku>1l~h395#Ga$9X9+TE5(yE^{96sm}U=_L<6sCkB5tu(g1l1gz}l~)kM zK+>3Zj?TC7Rn1|6pX5)JpTC#0!EMI>4 zpsu&*@f3Bb7ChdZ+ilhX7Uj6jXxmC6l5J!!GtJf;3cj-VHuR?ona>;={9F2~sMRQEJMg%;+H zJ!AU0Tz^39ZSAn5P{DQ>)F%reVQZ3{Mm2*Sw@EJ=Bl#!kV1e ziMS0;!32LK%Wq(7=q@su>~a^~!Wd1duV?Y}Ab89^S`A0q9IOQ>Ua(eyAM(il!6@tP ziv0uK$P)NLSk*J+Hw&Kh$`nrJ^z>?kx^T|Pazrw=CBH3i5GO+YH*K1EhhM?;k(7nx z?azH~Zg8DM5tMqlK8%)_?IU%(osdJvcFp+cY0JFqZp|G8a9Yvm>sl#p{ zzi(c8{tUb(Q4gF!(S%zPlWTazX{VU3%%?jg;XyGCRC{Ga?Yr^OinyLL95C4E*NY|Y z%~-2POGz|%_zpZb+M63{2+hv9Y*S{}3k`+*9gEGzYg?LA`GfDsGOTD2l1jx+H~VOO zvrU?r%-TW+y@KLW>d#Y9L=ETsQEze;P#sonhzkFel1NVqjb^g4KqB#RBJ`I4Kj6rd zh9+F;j}mZ8#2bHiY3EhsWDbInwvHE@kv{b|GSy{ZG~!e9?&=q$&rD!&W2Rg0F^N3& z&gy{(tHnmB&hcy0sj z>1`Yz-;OyshMK}6!&VAz6ax_W7+l0>+crK9(9X5G&*X7gce#K>Bwh*(LABm(t@7dV z?=Iqe6bDgo4a=vk9ai((7GiX%Ek6)O?VqpZ9_9zg)3!J0whOb^T{KU$*WE$0vCJ;Q z>K_AMQ1Ck&~!o<8ANT9U_*a|dZG!~67r4vX9(|K1;=9>tD%pvJc&jX z?(O_rR~b{VWqgQjOk6>-md1D%>``@O^8LKRXV6&$8w_@rVo|lm9k*n+mPzzgTGI9Q7vD;X_hrl+y4@I!eb3Bu}ibHsaBAT3dHb0x|whqikhLdwqA zzux9$@rQ&0;r$uft`%@zxN!D5J~P4(vV9e3Pp+w^E-pF^zC*ab|E%5|`bqxCM~|vx z34W`2#aPIgF9KmvcNO`f#x05i@I_UZ%Uz4_!a9^87kh`}l9TEO1`*sm_dSuU(pg(q z*$3qqYEjUts}?4dV}^p$Re{{WNKYY{>*lS8eS2nam;(T;aZ|`3n0(sXvl*~5JIoR*EM}<|bdOy0 zqUeqL@=h!P_TjZ>{5_D6uTtZBjR=o%ndKx4WQniKKuTDA7fh9@_>}rYux9>2zndyeAUFfD z_d*iAx1soTj5Cu-1t!GSXa12&rbkZOTAujHaYdY%F@WelOM~?1$G1EsIlgO%ATdmr z$bjV_8NA~?O-WaYHa<~TMu61!ydfnIP9Qrx=`6l{nS`%|aB>s!AV~%ANHH9@j#04g z`DMoe)S9&J4Hs^;@}lHmFfgK27vYLC-)Xdz2Q`?=JEYD_BVj+Wa%)7^7z}MO{>o_uSv7ftQq?P zG3aB{QZSjZFKu}k97?ABM(suS;P7b~CIabIYHy9(=f_VA!Zlq;LDnI3`)S-k=psg} zXsiGf6*-P?gCG;YF&vRDPqKHndjY0nkgx4QfZu^ST%5AC6qIBf`LyeJND)jFc>OwU z1`W_1#*S{F0nZZn>$opzi*)e!B-zy$4$d1|cmVZC)XDvuNpa9Y_Ta61g!S77jaiKz z{y7HEgoH4Kwswv-i9JVB(uoB$CZ89L$+8Dp-suHD4{skL>^?FM(gzZR4{=jeE=2#m zONe}*vTQnl!H^hw@}c!;@dUfgLoIH8j!i!&Y`3o7v=8trmIff-pSWz}ss8B0Kc*-2 z=)(qQlELn&=2BS$vD#vpK!`Eklkp!sRsKP#w%Q(fEoYOgqJ8_;)oS?ll~i>;{xdg( zq`%9MMPb!y9X^9gU~gsw{xSM0Q-dnk?WT_nsU-dUc`7NXKZ0B9I9)FeX({E=|AdW3 ztu%Snqen43vU_Le;=F1?JS4Y0P)wa0HOKR3^*LeXWo|W*#WcXznX^$cKXPj9z!Vk zBVAZKY1asDX%D$)HRx-f2@SuQRv0Ox;=esO0{9wE?1*4P-72{!Af#GOHozv358wV5 z)qTxlpgWy->ApffY?WUFIs6ALTZ$!dij3?Go_(CAhHNjgxBmSUxR$s=Z_JZg6Ncmx zGNPK`*n|_%}gO{1P0*O#ZY(W1qJI1aWVmcO*$)J_X|8S^Tej!|N`iOzje z35kXLnmw-cTSRZ>3YMSq5nu99QVvzhtDEg=$QrKSl+v=>LvU1YlpDQR5|P#h%z>1$ z@a(6i#rgT(o$-f^(J z(aS-2-IV?90VT;1ZFAZ*^`czacSCC<@sV}Of1#f%RAq7n-o7W8M*UH@S*(fEf;ZYX z=t$Woou5`R-^C}l8PN9kAI8S(3V=BnoNK*PCrFXME8`_zuSPpf)QWo8t6OF9RcYrS z(Yb);(+WiI5xBzhoOm*>MZ0x+)<|)C z*M1QLEp%X;^jP}PA9!-cM0fsCLBA|diFhsxch9TsXob$7*YF?LnKBkmij=)QX{d5* z#%%^t=GdkAs3o|Pq{_*i%IxKrkf==D!dRZ|KQcSVwy7gK0#a3nxZO7Ua8WQ5);Jy13m2ktl^)`{SBar<=)f?B zFGMe&ZY~vOLfV^@8uU>%(+S6OqeK#=or#Bv?&3cgdh{D;p`*2H%S?>iB)iJ zcow=geHPGukes99$R(o5APBvBp)ZpY}JJ&y8h+3&~I(>QqKtBDIlvT=le zROYvRnlIPzrxSud>an-!42Yoza(IKsk*1`SqhSg_o3RnvmRTmz1MrBNJRN1jb*LW2Dxr5dqsRosAdQi;~d2 z&no+TTKDa<-34n#9yK&QxyQ_CLq8H(Ut!<(xuE%*HY?2p7Y*(bq;sB{wvqg#wSmSH zRA|t7k;P%<+6Z%`F@w)4kWwWcs=e5bB-yIhv>K^sTEsP8$Z+Xp%45K})udZNxBH;p-;@#(!}-IhO?Ngvjn}+I_sY1ZojqLClY*#bn%Oiq8S7nis5s0XqzggCu}Ajp zZ~p74ItZlMgwR4I3z2pTszV-o_>*3PEQ(w#1nixl6#A)ox>$?S6PPu{QSWAIpe%o2 z{xNoLD_=evt{bO@>p~TTwskN&nuk0P;3!RZ4TE{(CMQ_X1W_`M3`&Vdk~b-?YWKE4 zc^B?*njm~o)$@uLM06_u-|_0}s>?BT5rqXt$B`|uwv0p41iqUp;i2qg)lfTv!ENWe ziI3DFm_A`lJ5>Ps`|P|$kgKi?Pqr)5$$Ad_QpBJ5e<1LqJ{jcNp6FAF3%aEFp?9{8E&lSpRL5f9PNha|pZoS>;dNIE$q1`#s;kdmKxPyxz6UXV@ z`t1;DUg$3%Hsc2`@E=k-e&g5bMVR~+@}XKqPXs%_AC%_5Pjd!%S*|YcNPh+&7pKni z)&CX~MiNio0x)*|X@n7AC5_?^)#lH@?E{0dW9Y=I*Sj;Q1p~GcV#OC|?%I8Mb~W^$ zq~7^)Rt`rjs`JEUWf@exCs3!oMgKK`Vwz)@$@N!{RSRRjXVq&$CDCp1K!=kW0Um&9(Q_1_kiDx*QR&6*s`FHpauC$ z$N0b-B>&asFvL%c_TOoUKNH6p{*OY0XZ67Lb{d%VwNJt7YEX?hc4$x0aAZGuU(0uG zdpHd~_*{)MBuf-K#+CZq?WKJqKwA1{bD&ME@leuSFlgdeF0&5G%zwDsMLN|oQ@P2! zt!Z334%r2^pH=nbDN@q;WXcSE&B2UY0kb}`_nw{AS81bs%e}&pS4;_e3~O*7;;|lz zplB9|Ib;rT2rApqg=SkT{`3cI1h%H%`WY4a`3xh{NX3*4$ESj2F93G1J^irrNH0;a z*mP0iLt`!v`rMI6WntMN1hl)+p0OhayNbXN^Tt+E+0e|&X&5VY;(rvpU3?fX>lWmz z6qpCss3Tg6y$H!~A%dxRHqE(MI#3O{o6bmPmZ5+KW zeI%eAVUL^OBAYKR5j{Q|w8{*_Ces_sjeXhkEw1)va(O3TcuOd;#c2qaS#if27&ZQI z(d$|>6BLmt};jkI^fTIO8$ z5|2!VedoKp^)++Kvqa%Uzv=_cWAk*Td4sQRx)>i6ekN^B(7Q(ng1LTVfNQ81(cXi% zXhXot!|>&JOe395i8)X^SDl@^=-orXjBwi26|dZ&++o8RRgZV|r69iR^~zj#JBI@{ zg#L|5VHN~qdJZ4gOkT|c2j(!_^~=|tEQN?1(r=VuakOi%BDTvufHWd9H-htE;RE42 zPL}3EwO^zw4(*ulxYPBb`Q#ZQvCDBn#^$>Ml~qJNl&DKYJdMm04ec^# zWVwWXfGr6f{IoWD)#F?P%NOAO&?-=rYDMN_d{{hwxF=CETXL1iGG28^ef%p|E&5*~ zkB_S@C9q%jLZr`d-TdN_B9>EqB@~;F!65S((}^jFuP0Ko5N#m5kUWA zq&_m_kt5=c^m=}lR6Y6tOc|feZ%kj5o-QQS#zoaQdt&v#k!fHL9QM|?olUMoD7Cxu zuhN!J+;*vS`3w_Ao)MRDU|_dKj6t-xWvwI$8#R#?c#t>`^#|JXpa9AEzfocpI|r6 zZ3R{)n5y`^WSADI-$T7^?AW&f`XJFvV~VIy;srhAJlnxhq+aSe+CgVGmfOw*%iuWG zhRasI*ALUB^F8I&z2^&Vl&gkG#CmgF7vka z*rO(7C$+=Cw|+bUfbDgw`+=-#xZ?t256>f2qz>%YmkIsD#^C+@zLOylBKRuxk7TWf z9}GT(id5UU{_{Q1e4$IWV{h4|AJVrvHE$3?Hy2cIOG^RIWz~xy?Q|adkoew$GNj9Y zUg~6c)H|~470qgv%HUgI&yPkpWMlKuPn_vFH(t}E9g$4Qavmwc^v;&0vh3?vP3&h2 z3p^|K&)l`RD;w`J+j!TKc(D3Wk7%)GKhxkVkWX>8N9}FATmv%|&tH#)MIFc_u$40q zQ7R%=dd`y3A-~o{8b=G#oxn221~eG1jHEGWjsV9O9ufXBHTAs-ks!&Z;Ry`~lu)#9 z{DA@gDhzcr(W2IUZU%xac$b??#z94h3qEob%xfgx0gF)Jo`Rt0*MSD|8OUcB)*D?f z;4i$bhE#0Z`Qh%50my#PF@^d(d*CHyBcd*ph5K$9;tlYz0EXi@S&~JCT5^`)Q|Ano zrY1vtj`MO8Bo!7>9XOz;ncxf&x5k9C5vV1$*{ zTu+Ik5p!|eybQVjOia1kH&s%aYMQ~y5&WXg@YleHisyg0_hDlsZgrpcvQ$CT;HAaY1ZvS4(% z*V%SA4Z(3QFTB|K4Ep+Lh;F~fzf6A_i_wz)d{u-~yYw?BB(Vh0ZAl@I6%ZPhuutf{O#!*wM zS72bRz|Ls(UV1rrlpZEcZBgfnQk_Kqwv`Lq^6RBOGK!|jHL>+aa<$dPo-t=1bbh7zz*tzNT1N!ht)YU>5cxGQ8wq^61YQhk>&f^9-WVarX~7F%$4*sH(lR*Y zn1nr^Oy1`dWpD`lE^j$zDb$z$eg(dLFma5mP#9!65j|w>D%VI7)#k40o5VedPjw7q zQSxy`Aj{nj{%kO&c&Xk-z+4tt6O9X}eyd9=Tp_3N)EoQQgZ?3K!NI46HYj%`fZv50 z@v*dCL?+?xn&-?OV{Nfv<<>1`upt@ZVyv|eFq}G_daLIwv!KYJ0nkH9n3rV0!8JmKpQ;jUh>NnANedyFFbs3l^w0oRep^p*+o z{jWmJMc^-i@Vw^{9808A%oH(KoBzC?Uh%+3#St^JYCr85Ch~-PIf9Oz_Zk(k9fV6W zXOWJIQ>22~AXu#-|C_zAmDv*PoadyOi8+~C;G`s1X?N=cu}zbJx!X*&j6B;?bbsYm zS3j5Vh*}>Ztjqkx0elY76oerK)+MFl3#O7P)k)vRT6{$;EsCdT;8&mZP_v#EeT!uX zZm&xgvQ6|+M^yn_o}g=yHU8h*ldNCe6z%h;fC4TQ^k2B}NKD7g-UDI9rk@Y~mRop; zfu1VE1$=?R%Y*C+7-DCdRlNgm8?x~Y2JBFKi}`>?o@u`EoW+Tq24~}hkYN{Y)FXWj z7xl^=jQ~TV)D6%9Kb1{O)mWm_J^0we8g$>VA1XG(G5Jf)Fv~MFk1(2f6)$Bx z?ieIzBHua?9(*#PBBqA##2-bFBRK`(ykOf15}&3APc&vWtV%mmnwagG!@1b*WfI$E z>3dauc0Cm%8^A^xnen8Nk_>DJx%koG`rExvU3&P!^L0db4Zo0UUw0;O$ZPO~sIb@bi{d5BBGa}c+A z6;`s`ld{FpjZ%A&`DWi`Y&72E*M5nmy)EWO~iTZn3b{kIm#>lNP zN?AI#!cew)pKVb5{tCh`?_Lw(91gQLMrIt*bc^bFg{jo&@6+z*#?!zj)^41xLLi3R zuJ%X@2*o6?N`xM(ZLK}5j*=Mw<5P)v=^=ROCQ?c&0G*)0qJ7{V0v&9Rpu89|CXMSY z|NU)7Y3raiqBWk`kmH(AL$$~?8HUZ1m`0wzk_lEueM@J zi1>#$B8qy!`cKALenCR}4tMao%X(wgh?^{7NHXgJrvis_&{vIQMZX1g z>WVm`GI@gX#9Cxi5ZaJucqZlaExus@H3HimOD8VNa7R*l$?K$WXxqOw0>o=-t=u^%Y^dzguFr8uyO7L@|{z9(; z$-%U+<4N*x4V)T}_fHQahcv)nb`zKCA3e7aj!!dFpicY9K1*)8x22WFb-^#H(EIc+ zQ#K^YKbKoF1@5ahd&u^X)SE_A&-JHqNaJZz(1~8WGI2y#VecUIjN>OH*4%D@D8X)6s`OFZ{QO&DgAYR{~yo>S?W?C`nZ8RL?zdQ=B zMrI#Pw={lCyAL$+OxZov3R)7_#tST0@e15qyt2To7kvIH_iNXy-WcH>2DV>C8hEUo z^Zus`j|;d_&)*G<+sM3!SB}g!XiQor5SZm|2?5aPRuy;=NhvfQOP^M zgGLMh0sGcnNN5Tqg%h-kxQMwpMA}bMzX9fty}qr~|E6?ZxdR3N<;&a~f^k0-EkeR5 z#dbmuBmy&@#Q-O5J5AKiP6*J)JT*{aW-1UaCvXD@w;5>Kt`y?v2uKdK;RxYyCZP`7 z^^5Tc$kPSN86uYoKjb3a8Ao6AMrWKTK|3!XYL3sbLVAJyOR&j2`!503BV5N6y}?4K z)kewwbb>`5w4}g}V36^3?kBF*gyl3DBPM_&x<$sdf!RO3Ls7>o@2X4gq(*=xuUCI} za!TUcD3co)O^s>smzb?rV*J-1h!#60wg-{}(X8T$8m{X5rx%_Q0&bbL_RWjqYZ^sk zzHboC4(Oal6AbVl7amX8DSgbtxsOU0dV{*(Pi_?@jcvYmhkAW`?vm2No2k}<^V&7P z+0m=%nh>t@<3&@f1BA6x7L&hf<86pj4)c@r!o!j}4=pl42a$by*}SboWo$$#alqH+ zAVK>n<6D#zR>329hfyoR_Gj_XLm22|N$qlusM4E{*;I4^H#WAL3|bMnn<1{Za?9RS zU{n3HppwF*pbwPZ%;?|?n1BtZaP>Gd6)D~3iU;lq1L*JbRtqHXw#(km(d zzONqNsE;)t6zGBOgii!&p(!9Bd?X>cH+aZ@p!Oz2tyGc#qd)jy<3bPVASC*es=3Bv zt#kqKe4B(KG>C{z(*-K4;gE)qYq^kL|5eHOvqtuzA{aXtAkkd_nU9Vvj?c$>IA55u zA06wNv28Whe3V5xb<{yo(EdjMpjU9YW&+uy|B%Of*^rWdkUR#JZI1xOce|Hl-Zlkw`Mf3jh+#%MCz*;L4ma7sbIojtKKN z1n`TIw3?s7`2~j^P;v$@$JgsVAI0q6B3Ltsb7m$+a9sIFt2X|eBi*@v_!Z@WfuMAEya|%2jF|BG!}tPS&2U>vAPYWeJHdeQTJtvXwp0(~Fk|S|{!?(2C*`m5 z#KUz*Or(M?zt6fiy-0eGp>F1Fx%u9Q$;z5+95-U!UM>8AsCaO#O9SJr0da`GP$h{9 zs=a5O3$ZSaZZxgF6Nq#9)9=k2!znBPi@nNTum;*XV$c6-0PVf+fS z!DfRNvZy8n*Tj2(*SZR-E1h;M{!oEnX`FIDKhR*WE=H~80Cd4O`iMM@P(ipe#F2>&Nl62YvVn%y={t|^@9LM>Ynur!+|UProoR2Y@9&Ge-$&6_*4pa z-Fu{1jMdU^CLf!vtgMl212+3Mn=i73woxf(ktp!nt^l=UA!6O1pWzejTm342@x@MB zZLI40XYj4oeNz*(`F5z|RvN|j<*NPzXB(o&Gq;j@fZIY+H~&Y79R_uvOj*-(R#V9D ziT_oSE3`XrdFvz@);-)?4q^o&$0^v%yb<;*akW-=_`L>j9!}$BrghJ*(egvbcv_k) zVjWb4^2XoVgr&q?8^}O)8wEcCMm>-0VlaEu{%XB>ChI7CSS@Nj)7M0gxO>J^8;Ha) z_W?}L0}b|qp>W$m-6|)mXG#40fFq*%h@0+Z?6J0~XHw!SBFi4@p6rR`4b;&VMp*e_ z0>rvcGoel;3UVILfRvV-vCy#$eGapP%vz?4XjmyMf8OJZrkhPQ4>4pXLkk(^d#l+M zhr=gap3jc8_5TFZ04)EIs^JkvOch-glr?+1M?{h-7;A=)-_il9GS{-pC_n_ao6ih0 zi)>Ac9vP}Sw)qy0jxG0o4y-Ai09GsnBuvB1VfPW(A29B_>5=ONmR}5}+rUpTTZV*` zpI}ciW!l=3w+4Pvfndi|(Pd1QpU7L_0000Ov@`T6Q~(<7qV1bOX<*E%t?=pRahg+@ zy&*WZ@Os|4ZAlv~IO#Gc;A4IA7z2D@d1e*0O6t6?03F2B?ic76?VSEM3Nh-l@Ne$5 VftKlh$J{<`)K=`HCDF=`d(Qs^saOL05BR<^7~M*qtxYeGO|Xc)PN(QVi_ zExBAjXA-#BaLid_{H5PY;599@(Y52CEc_gzW5X^%D<4rgHaZz$uIq#*Az=unftIjJ zLSy!1vmmad#P5E+TLIy$*1^kM1jRZCQPUCCeT085EPlRZ1@Zaew_+&1iZDWJ1UfMOsqC+?gs+8 zWN0VpKSxROy}l*UQXW)T@r0NDL*lnxpEM!kMp&N2KzdMwYot-y&?8i$sZ*>%9l=zC z)f)TjP|xb*NXRUT#G<0e0092}yB(gvo{M37QoE8$7t*mfTGNLGYOi7(;Br{} z3pn~rxazagG)6hL{-=|xJrzrD#clHG>)F{%D}HRq(PCg^N5DVbe}U4cBxyss{Hd+K z*cosRg$ae7P5z$j^LsxWM^8v*%^CX<;EM3l)dy7o21b@ep#iINac2fK(9830Xsw;8 z`w7dkIXwYRLl$vNYD;vS$CxT-C{)n#0cG8B&)oVw*u%?8<@{6&l!8 z00flh%p#w&B)afy%_`^0U>i!BB027vR!dJq*xk-PRbdf11ruRRid3XmDbAt<@u^qw8}Eny90COL?Z<4f(-!N{n^yv>CpAnhQ}mt$ zSTaxvu>IM86zt*-Zgij5*^{Q+szlOLiPvzyuVVO&o(3p?pEIho^ksh#k;o>oH+n&z z^YC-J4}@=ltVkk!E^BxUUn#-Ix)pxx3Mf?wJL0Tf+nUiN?u3(`f4+B5vp4C!41BND@2>uki(eL5jn;Ikd> zC+(!Vr>9k-C1vXtbC2E{FU^q6lsYTyOfb^Acis0<_JA88j?vTJnZu6@b%?|@nvIOI zex?Z{&B1|#_EwS;5nASywC6F21<&haFCSW~?e&hrEEZF78&H4c@2Xv*?-;3`_XL9) zBaJt2N`vVf9Y3TB5O_f?qrDB=%CSwp2A3fc(QULyVAyzsz5)6=swVJpG|AfY5cq?B zA$mUWzUr_a;=w39&tcFj>YLF0iE7}sWuclRJ~Xjv-eld*_6@x=i%ts|BA0a3ZkdCT z!|DdNC=p=Byt*gTX8kXuK&o-BN-vzqt*$rl(iAmH?jz>!oJwY`+kpBkLzf_uSBmp6 z1=ADqRF~GI*J|&8);-hL@hsk9NXcd9nyEfyQbxI^ykh==ZHenJx`$}1g@Uiz5y9bj)Li8bi8 zE;^DF*0-Mky)My6YOmxo(-I)BgT|BP^5Q3`YKoo!&%w#wd0?xKb0BT+u*PDAvt6I{C~ z#%1UC2FFif9<+xRi(gs50C>ahyb^WR9QR?ZJD%>PHJubmfjg}!YL6(?3hDo2In1TL5X zD?`#GI(N;{ov$_M$x&y68XZx zG9vzm`5JM{QpL!}>a{phhDW;%=O^DBXPbN}=8+{hswtjBvrzHe2Jz(X6I>kca(PVs zO$jqY0#1LiBynpha;n^ca!i&}=P$r^8p zFyJ|0S|g7UrEGGKdukA?hI(A}c33v~(!VtBVkaoNAU{?XW^QS@pC|C)-i>4Q6qxP@ z0l{Qg+*Go3v&<||3Vp=QZ!i`k?9eMBn)(5`p z-tC;Y7_-xVVUmpT_{)-Cy{2LN&}<)&CXbH$Qw+z?%^~ zOV3OGIm8pP5E>^hpa~67FWl3{>?cKl+n<%W@QfXy^Bx1>J$s%f2~CO9LX+mj7yF{= zp$Du>w11!3A24@>FJMZY>-@1e8rguqg<_b^5c?K;{m%Awe-d9YU_&t1;9Pn#$Y{>= zwBni;u-DWqn}8&3N9U!{d3YR!b1wLwH~hzp0~!$uweG9MYiKdRKNs`aR`dygD+ z&!T?KOsUTH(tz6p#RFCqR;=-B5wV5S4#5jx^r-?VpL(zc{}2zKxF~ zkLLuOoHhc60eloEoJeim@s4@}qCA{WVZ|rAfx77|0t?W0v$fRMV%FzD3E`6N8n6HW E0O|~M2mk;8 diff --git a/static/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp b/static/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp index 828b8207d9e65b62c4f58e0c0b97c530e1884a60..8fd1d048e9734ae9aaa1d5b33f8d47dd51deb389 100644 GIT binary patch literal 22584 zcmZs=W0WpDurAoPZQI7~-fbJZZQHhO+qP}nwr#uL`Odk2?wXlDNvc*-N~PASCrXlH zVod5lKx(2w3aScRL}dT1>*s)SfN3y6uYmZd(ZYp^3y4v0!Hls$f*ad>`D7lSr|W)# z-fs`KIX83&ykcMGQuy{RICmIHa@dcdXZLddwgUd%5z512>cNhS0TMv7&d*=VYQ*JU;?QBo%^c$;eXe=a?9XH1;~DD|3-YlzJkBk zJs_Uyt@!Ej7yPbxh5wFh3T6T-e_K9c?!hl0hx>{E>OWDxCtqFtE)8CV>2I*|pzy-yEQ@Z5ITJjrJ*B^>dD!lFFc+2_8#nf3 z0_*ZAlF89g4Ndy{l~gI;pT&x}*yc(tJ4fPonn>L}v|+cM#{ZEyo%oTc$0B_y={@nk zYPu}k!AJR41bcY3SLW~naX@Q(i$$^5XnGuU-;5%jo8hQ$lX9xxioiRA8^XZTNl_P> zuoL74(q$ZgZkRh31LfKkavQ+$O4^(r<C=SKLABdNm%Q411nZui4Okaz$nKKf@A%_0eKok5in(2WhnfrG_ z&6ePw74wgEj2>{J({bR+0Zt6nl+hhEe)?Fsf8+7uFV~ zUe7`;o{P*uL=2w)wf4mht<;aIN-}JwQ0Wl@`DQat3Li4j$py8T#ZqWLeP~--ub>Ta zN#~G$z21*?h@06UXE^fp-e|N#3i=7Dh&v8N*rs+ms#_0~Sh-S`2VzrxFKoB6jUw2h5`0^1Sz~T(soj(@*zzvi*S$%GP{At9XFAU?!wP z2$HAV|467unj%l#{}hh|$Ajj+r8KdHR&KjtUGyIiypWy79@ z0O8&ARZ-(w`KuZ~c?ci=v2S?S#2&OXlhb5Brsu0UYGtf72TB{VAcA@cf~5c3C<8MW zLv8aR5zvo7(PyC;$pN3vC4O?}7cRpJr z(ip2dZ&uAfzksj8ejsuxP&azw@vVpXT*1GJ!PYBzIH#31w zNJd%srUICQ*P|b>=MgOMmLidBS&cJ$QO+0HM6)--v6Jn%XBIIwkZ9ehT(`v&Fa<>d zn0|$V4ms9%Ion|)l|c*j5m3w@GQQVuEpf2o+C>0__~GKE-V@As(>w&*!(_e2Di@*Q zk>#Lfb=&AHd#qxAkQwo?KJd4sGm8OF+73a44GBCvXmYsRitfLZu-EPFrLw4|Xq!PH zfqjMuzaE|Qw_2>DrYxz{MqVeDhPhG|qk(JigTJ;Ytf(j8WHF5I>sQKOu26@7= z=JiSFE`)vH7aOS>SP%iv>U!GscDRFz3SZG>vJQK2lH&2HURk%C5o7?-^l|6OEU z;#cBrNt)Cjy(~-tSVy$(cUU#=u9k30_wS{66CSeGeuK8Nw`y5Pc)kJn8V`KSU52Za zVuNTw-$%sngCCbM!l$fG{lS<&v3fKxbf7`rVG-zlu+=ldllC(Be#Z-U-p|jY@`Jri zIFU(}Wb&c5Iw^3&HLq5ZVLi=jIod=ltL_rp;r|fkEfQe@ZM;wq{!Jt3#YGr(Yb*uX zjC~0Z@x~OFP;-7FN9en0-xLyLm_L)gOEN+8U_sIkemOAi-%Ez|KPzwWd(1m3|J}!% zz$p4RhU>ZhQE>2>vfBnO<{_2v!?%Zq2HUf8z~;HDrV@7!oRex=|LtT} zHNMJb9chtXfI0}-PV8&ipxL-cUY4Rz^Qo^oL?#V_z`nNQ+~@Ss>36T;4}tW_l{`k?X$KRMg^?1&y%bSk70XZ_1O7-Ld zh?cTzZW>ixPkaxj8%8_K=tGESTI#E&e!otkE-xiUz;a|1U>KYA)v_9@THC~vS5O~U z$G67gpy~T#{DWBj@cTep2@l>HzbkBi_x(7xy&yYCpyEI)HQN4Zjz%}ari z?c_+3kOyH#_0UvE(;Q~uxn_7qi9Gc21%No~OI<`Fjqa}71p4_r!Sb>b>6Z0wTD<#c z-^v2e!0j7K^7Rsh0(FY8AR2*>e~_bsq#DCwIl5eNjqE`w-)Gx;_GgB0m=+bj-huu? zm+5E~HKhGmjl5ch{NPWNzcWm^8G(FDuiEeXwvtsZ7m1BDnulVcGT`dTCm-7X+ zc7jwqu^&xeA;LY}sfq3%w87)B&Xa?I9tI*@GSyNq|FK(0HIa5lRnW6E@^wLoEJg6^ zR7`5iESh-d2$7oLRI=B(V~6xDS+VZ>?X@vnZ#uD1HO;xQf&dBJn{rBhc{q+h6i(uM zasrmRLC1AO#iS<4K3uZuE&jtn&kfR`_UWf7@)LvAR9`;Xd$SfFft`9{-vO5r?2x~k zFJk%a`6WBu+f?AxI@J!FQJx<{%EnqTFV9-<5`|xXl#13y+O8OCj@oEP>L`8oqDy3% zC)^ijvX!^X{PNO{-Y#bJSI!;{s5samJ*oc`pRfma{a8++iMBFL74(aH9I)xuWaIk< ze7~lDU={RT=6cTkwUohBgKo9gqtD9w2YPUXjFKFT492|`&!%}j*5do zjUKI5fr`h>3^U-1U;W%n+d8YOofA5OHGrJP+XBMI17Zz*0}UxdqjS4zu6jn+LW2jn zJIY(3@5XYYj~>zJH-QGp=at_hY=XjIec|f6<|ckUd}dpE4A$2e*{a| z*m$zFXwoXSF+qSW%$(7$D}rch<>OO$;NZ~W>;v5Ku0dp`H%!w4DE#&D%|9YEcm!eDxaTj3ME_crT4Be*Em#57AA28nTV4c3?~$C3 zYUHzr+_tx)=@UVB&;_yzh0R}Rj$fM?!S zz^61qbjUE0DtjQU*x$8l3Wq%=SPW;Ij$}Q6=&J0$Lsw^%uCLxm_&LH;WyE|Gb~&~q zr5U%7J^i4&xMh1lGQRF1{PB&|ZmDu2Dd;eI+Ka#xb3PY<@3rLSC-o5M3iwyx3n_DIy5B4{+&i7URM}>JBHu?d5_R!~Qj!tE`}PV`v96?=gZFrWT4#6boQs_| zJJqIiLFtIIzJIoOZR%SpRu7Ih6$M#DFE_?5pc+z|#pQq|_qow>h6qe_PA4IUZ5_gr z!#vA`fZrh5V=XR+uC)R)b`~$O*Y6F`_0 zhkP&&JY}4&$t{D1SK>Cb)|Eh%*BJAue%VQ}qwIj(x7vdRLCj9Q zp^c|Y*w}^!>qJkrY3rUGdG}U!WIMIAk;fx?c8i4Xg9-WR4~A^qj~WT>v4ks_{3^Gb zE3THfo$2C+PxPVZ=osr|Q=&(CkhNZAF1Qr*Ms~$tA+syRI~FLmuDbeH5%)s2O)jKs z<%8q;DoI^St=N1d%zYWQuXLKhEYV+A(P!s9OG=0cAhj3BJk`g(5hAdZ7K zt@KQ=3voG4o4}SQpuu!=U%-;&Xb+bWGy-E&tSMQu5>*8jh+vXiaa+cH zY3zQqGj4ccjMsJi@l2d(jf`x`=jKu>B_VD2@gEZstUX!P*CrKt(z`YyH95yEpz0oV zWO_XJj7{HjPp$Mkj(SDm@Vbl8ZM44LTIhbaQ@d!kIT2K(;(#6Y8jDjnXmFS9w?!co zUel#G@!TEi{<%9>?_u8?a@kG@fcPeYjHYNisJpw4={};J_ZQ~OMSB>AyA0J z@?Mb^7T&j-UeiJ6W_cSSqQ67ei(XnQ%l5_7yi@3YZA)JP(mSr4Dn?NUkIs!LnFO}L zkO&BZ4hRTnjHpMW#NQPoQ8Ke}`E>VKzspn`tbWoTcZc+9GpU;)fLl7|T}&<&P{&{ZO@wy%VJ99X!5@(0B=X_qz;* zbmxrjxouz-!x57&UYG8|92gbPd|ko=2Eu6^WY*@s{;ep4sw-A1=V>Bd(ov8Vbo zl8cOLz*$lwv6<$7!vr|Q&lG>!Y#hPJbPCSTIJT$e8v%9%RX$a6R{zhEq@&H=1r=q?GV3L9sI5H@QO|l_gcuiX?Z9T=(9|b`1rli zYUGuOg%hh3J!;amcMFrTH}WS7W^x!1ln!cjnaiwmh$vaW-n@G({5qu{W>BC@G!$RE z&yMahqDyM37hey@$$TwhoDjL_EQZ>`UWSGuJa{xB;d-m#kd9x_V5LM!-M?z6u(c0k~hq;*;umS(|?9OH|$~|Cq92FFOqY2>J8`ZsFx32SWE55Xlm%)hGvVcAm&sbi3pJ*zwXGUI07Y2QA zSRmjHlRyMS|NrU_5D*N!S?w5hG)$~~-8tHT!$Zx{)pzatukkqK(smy`{m-w^{&QYv z6T89t&*|+Zp#RN(QIVY>;h#2hzzhlGJefn<^AX+)3gZ5nyJ1FlkFEcbo^n>UNmq+x zWrI3_ChI>XnT{eDgxf#vi_!hsEzsI&32-!Ws;A*@el8YnJD$fo^$QE=fBVin2W-_# zyONE}^ltH!nGG2*flN@!a4i^eO2ZL^DcQlds_;4^dVV1N_Ed_&%fwsI`cn<{w1W@( z+hRAT`qs@<-ksmnFSmRj7)>^>d>%w;AaxrQ7X}pH!q8U1tw|K!?xD@)S&2p(jUzpk zZJcp{Egk!vA;3!&yqBXwmv{|PqZ+H%7uwha9TJF@vP+jLaN)<>UHN{KLuDkYnINU* z@FRAk@V(vGA_x%Q&!JB)4#Hh(JoJ2k&3ipN2nI2>IFL67mY(@hhrVt9Ww(@HRC-gR zXQ(4BQv~0Ax)9bb^CW{XuzcLy@8a@T3c>?>LxuG>tDJ6z-+G)l^C8R?oBE3}HJug6 zUFmT?NQ#l3lj;x#kz;>8rB&Wlg*0kd84%WjiQSlERIBh2ZzrI@$#m3`@2~ulr7MoA z^ku67hIFa}_XGvvwo|}Byq!V(*c(WS8SA(nqJGlw0*~CQ`QOl^WTQ>6X%7}MLhQx> zDcCHP#w?+<>y}yOC-_T!uaL@`3j})NOe4b?UL|n@GOB-5-Pz;$qjzS|wlAt*(d%2b zjfIzhQK0V3zRd(OGth8FeGxH28K83D$RJR^ozVQC`S6rm;pwu^gbdkow8;05xz2dT zUn>k1PezefYM5Q`pJb1l4jF>;FGb=Gb?Q5w$neVV0QaFyf99Z6#@u3+%z!n%Qf5~k zXRmZ|`fl@o5P{%GsrJV08kO`|S4l6MagBq!6lE<}Tug`@89}J$PtX)W4W1aO1sqR* z#6;jCJ6WbrfiITdi|sP8$>Yu?Rv@LPmsWoR!aSgL@yfCdfd_X$b}H(gD|7X7&JzOu z?JuDsqp*X(UPGUud-@=_eV2+1N$j^hGmh%0K?|ZLWwgii4d|o&a`Oi!o^h)HU!U_i zNn6?SOh)I_C-teIp$sDP8b#Cwj|G(*PqzC$CBtNd6wUOnEOYN~v3(HTxi_nz zm6|3J`*t6hwF(6qUKZ7?fx-}fuEBxsYLm_r&E+pNDaCx_i3 zDo&8J0B(cYZoo%EM(VQIw7o5qaF_85|6z!rSMMAB{;?PP7Z?Gw=ac)*|0^a&aT-%5 z4XYmYwrX;md1W%hKW*?8+rWh+dEUS!kyVcs|m>kDdlS#a6)?L58EO&^M`WVe#N1-3%=5lK@tV9AQ)pUeMZBb};K}p9w)8 zknHY1q+J<#sNF3|S~%aEhq0_iK1R`cyjHJx_dSm5yCP+eQsr#R8g+)Ur!`**9a5Y! z%Z%g^KaU1ScDE^)BiTTdcN>4$MfvxNUayN1V1LI3nhst3$DkG+@n;Bcm1D@Zn6by0E#d*vl0AOxbbJrRF$BM^j8AjO?LC9! zr6-1Y{5K!}>-sa>)R?bX8H%#pzup86>@(-NXlJh2UAtap!;%C2_vXL$C0cb11l?~6 zzPgaqTRA} z>jlFl$sh5}8ozB4v8RgHGV}nN;tgf(y6>;IrrKuwqeX4-D{C76M+?*Iw@Or)R}1N` z$s3epl)tmQhQvbuLJr5kLaz6;R6?f1v1d!Y4Ej|9Q5}7{I?6l^gZ)~x(JqaC;`CSk zq;X;DbRFRebOkDSE;p8rF2w^dS@D?6k=!j6QpQ;@@a_TDW>>G4+RERAfCt$5dUEh2 z_V_HYL=!L-J7r)e;8?TN+E8b)4zFya@bf&C>mE@C3k|917imcC!_(O|skUU^bWZ-w zBG~b_jTf$kXhGhZ<0ZYo-31u>A_Um}MM8iJrNVrY=Vxpxab4N-sKk;+Gcl8n)#|NC zbNtyF|1gV#5Zh<)5EMV}XYDnziR2?j-~p+g-aGU8wUy~IDOI`cfT_%dNsHSTL*Pl; z;&zC~+jn9YP1Q4L#KJH`!Da~ROrV(;jQj>-7$4)(^4f72f8ap7#~Xatw0UgkUtPH z;WgJOeZAOuS>f&Twih@{r3$1B5ND18zM?7(0tSm&0gPO(U}5bAsj!ed^(DNtZw0qTvHQ7Hw5;$@ zezb%`qVu%}K7^{aI-&KZY!af48H@QFpA&v}xTZ}usO|BA%0EXVeMH#l9F??$*aZ!X zI{Mrd+ET;|Pr|V7;KG$)pD>a`my=v3UT>^Qw!-W!*2WVOt@-1u^>-X3zWl2@lm+pX z*fJPn<5~VFst|k9xc_wqq7zP~Qm{cu*_6tgMnPkJf+Ljn+f;n(Mk&7jx}no@4CLhX zN`8Ovz5aHCb~!#G6O0Tuu{YKHg5m6(KinXyFT2j?i;dnj^9^ItdH;)Y`QA=pQ=+t?)LMu*SvP<&3l=7IWNDcZo`EYLfsu{lcSb zGF{O)x;i_-R^2`0K(yQ=98kQ?w~U8TreUBqw1hP9lzt?VuDkYFV$HE4Mq8amfQx(n zn7*T8b%eY#^V>^h71RyKE5zF{b}!mBxt9=9nbSa&OF=}#C;mBBwNSVeYhC>b36v_~ z+mJ|W)&!r-C0gkaMeE0w0;fe`8-v(r9DFlP^~SSG`N%MObbERYm|*ujSE1V|V4^mq z^+C}r3Eu+Ft{=1*-(#Eq^{9MX|2sr3AO?{hUC&V4lG!Cfiq3f~lY|d7NNVPEp%ML^ zqGk}=sq4h!XJ3cJ9`>gOg-fgxQM|~H!BmP{?Q~FuG#@5Zndtx?S&b#J56MKfW{gKz z?wFx^=)PsGQ0I);LZ^KA1-bQEkC4vXd@gn?f9F&vs_%@+FLc~a)793r>(f*;g^Z>- z-3nACvFp^7Ij8rykJ}zRpr>F1H%%mQ_Ulrq3P!U+-sAV#yGf%)2QIJTIBmw@w!U#V zypNZG_xO)((XkORnTh7#St37$ptB>!#)E5g?9t=nD0hT0uBGaUgMMktSBVgt2C=H6 zm^X4I+nTOD(nkA%WPtR8*9h?xQvU|L2K0Ee>ddOhNZFfK(UC{WrwZ_H&jeA>dP9}k zJ^`+F4r4EqSs!dDGo>yk*N)~Y<3u?Yx{AR#sQqO%Ngh?KKpp6D)xxR~q~Cq5E-CmC zC@z{G{`0MiFJ>H1tAnX^=tr`b?6WnE_}?h@%|k<~17JO^zxmDN05URPiqc3#+mrpwe^Von4xz#wLZNPOPMch=yFSt%dBS5+ubz4$5^(ZN~7g zC_n^Vy*`7Zn1-^ixw(Wi>s}2BV7+@@^;wL?Z-i=wu?uNqMMYRAeD0GSWU(?AlgJB zhV1*%(^Nwi<+-#cGro zgXPY~>rh(hXd6touwWZ+S@Wn9;6>OBAm#6q_J$lCkQuBbx0L{&_glZwXW;GFFWz(* z8*mmpOU^B8kPt)amVh_R%Qs?+3!ZszQs|Yyt=|sY zn;e3!@6X&w-9{B3r5hn%ST`3+h0Gidp|<9b61=Ff4ERf_=6ytB-Av-^Z57hNw-q=L}`;ZGYAzgFL3GHkO z&p`KIQ1qxCc0b^pHS)&!Dm7sDxH6pyw;>ay?PmG55iiOL53nPq2tZQD@C7)e=a`yE zY}q0A=+#j90ki8nQY5jS1g^y&5Hs4s5{0TyFJaTa&&$`z_3CzYPPRSiLEq^6v(z`L zUcsL_v?7`7s2`G$sG1e(2F?D6dJNNi>*$b95Nbia@YU#j9I@3(&qGXm&TLo5=~G?L zWvvt<06z-;_g8oK8*$LD!yvNU#<{`q{)`%+s##;cZ*E>)zg0_V*E%T?bnB<0>h^r1 zLcMk`g#nQG-nL^&rZk2oCr#JyA@4c_iP?OtZ($xC6jxSmeucNv2fqFs=p-BP zTlZbNKTeHk_tN+^)d2%iAwJ1VN{lNy>&VQ|*Ygd^#B8zaD`UwZ#uF$kl>y08WCVby zg{H#*=ZFLkq$vN~>B$&%RMJ1D_TE>6YBqGaEL<40EpwDK9&pDxP~S^C-D)NF^Z*TT zp{`>3>ux6W zC@38b>)pnLq2SGOpyX|L%jFR@&LJ*DXLWWVv?&_+f`iDQ(kX8D*F9Tl zsZ^|f^e~H3YNGo>Q0=*7x<117wu>4cBq~8Hro6tpmKq#Sv{N~&2gd*$5UL5ZTjT({ zHtO1BSJ%Af718&Z4w9{ejc0{PdD9$2g3jAUsc9A{3v2H_$-z*xf#=^y12ZffHD3KK z5Rzx`Iq-vqLDmpwL{eNKcEEzg^gL1Ls@2D_rC|}&I18F*O`30flDN2c2c<)xYyb=` zN#zigo^z6G`0j?SF8foektqE38vRyxBg!o(E{OuN3(#8(qh1l>S#?XSX zB6(DqkG67sSoXxRJYc=Jx3cq!t}G_4HkqG?e&rhI9A;)*lx1hOpLEHR%Cs?#m$0u_ zp_SnAXQ|vvh0#(r5-${sgo4SbM>JUkE0GtzD-zf95~FnE@|%(BvnzC>(N!ZIl>wsi zh5%t^%lZvIWpkU+7(G>NMvp)<2nM;Mn;81St?!SPL5gW`kwTG`=jETO7Bm;D8B_B$PbS>%A#Y9;^X!8EZ8qWx%NycSm+YVc1R;_dH29RM z|2D)}RGWAat8jaoX=R^THsXfl=fK6I^njpvhJiJwLJBd#fQ*pmy)L0gZmn8{P#Ytbhp#ao5;i+-+M0 z^jSGall@UT5Fba*g;B71+gM&@DwH*#*jXyc7%nQ^tt(20lq5@1bFNhUa-~y^a`{1@ zsG|j1Tp^pFa;=sjkq@o*1q^ixRhsm;tZWJXHuG2n;krwtP%71;?i`!^s3Ky&Wur_q z;^u_;8%SGnsRRFr0jqutvwXUnNJrIZAk2kwp?d0C*>q?(Unn3(cYj(jPb!iMZKM|_ zm)#^9+1P)ei@R;o7BbX+C@&$M|{G>}BxJPQc5?o$;?3xBQsCVqBDAZQ!xE@5Ob?KO!xnoXZ;?Ocu!D zv1(%=v_q%r1y`>1do>A;`Tg$8$`vKPw4iK~g?gu{(5lGd0mguw=}q7Y$07nDHr0_&1s0WLs}Bd^=R3Ut>o}T1o!2zKBZ6>P?%KB zkf6IA#c5w?ZS<~K3?+bHDW&21*2qKv%fvf@VvgV^Zsop30ow4~?`9bv==x%dw(gD^ zQBF@XnUzCl0lo|SASOhiWBK&D&%FMkLa%W<_XPp?@qhz!P;F0DAcN~9P@jfyW^hG$T=76PAdsmZgt zf$Yr{*{clm%eO??{h}tQ#_8TH>ay701jMdiB)}D<36`dCcs$_1D;{?BT(lh{C3<&b z7|5jB#!O^k+jJ#AH+xb&-_zC9A@=Q!MZ zL}6(*NPU!h&o-OIjf@*{oNbN12|^(CV_RfojmGIGTHxbw&_`(b%}o`oQuQl62j}M? zs?$g&B-7+>GP&mAe2#YuuqJw`PtaPJnDye!G@+#xFJ}#k1%{!{YO8d0hC0@E*)oQ9 z)wZtOLqD!BODy3So3tdF&4H^^&r?B*(`cpsYX4ABVtL-*)anrV1h9PsbMVOH(28K- zgzP3m52rO$gj2N$DX?pb=1QWU0(4of%^uJFRoWacu{P6nR>@8>=Q{ri$~vDjMFc5 zi#jt{@kJ|X`6^nOOof>#G&S5FNj=Q_$v(C(0A!=b-jj^QsP2j^LB31jpqn%+JYT5^ z=NTmp8F4!3`eK8+NlcJi%x-NA1upEjiQO;%ACCC!&^Nfg4=NN&6Q)F4cuq z*fd$E1hPZ{Di2Fu?Tfa<}%GLf~rd3p90)lKFl=1C+?Z5h+>K0-zqF+fh`w&mf|^j^ZDynp$#Q zVAMMkw{BPWzHU8>h13j0TjoYnf&O!me2R+o2@su;Y=2h=EFM-K#KzNo0V&PGc)-7* zbFndo!KbIq-w#dquV*fa136xW0NjToOzv7NP*g>9%Vr`C!o_BDirXCq9}M@C_!jLb zw8#k@+ftj8cqk4}1Q#dQf{Zu!Vv=mq>tdq> z@`iHWJcUGMIu<~JOmi}$b6}zFpd8np)D@K7YkESQ+BwNK!p$Hje1C{y z>$@UKIh76VqDG;g$b&7%oc^SJEccZ?7mH1HMfC(y;CRT=lk(!v4?Y7yMyS06pkTkb zP~qBGe;H%+c$>Pf7Zm6i@F5-!$39tJOFlK6_=g_$;=xALQHS>6b4W2}vxV|9ZI#S; zz-ZJJf=RcIIM%XBPnj#$Av|b0)Oz6vU1z>3L2{}M1SyxqP0f0)huXKb3O;TIPZm9p zqq<1E0^$5cJlwX2VCu4SBd~XlE%Z2;N55_H6}0WX;k?J1eb~zE+m#+`lQ*YF4Bop6k3+>Oad>c-fVXwDMDysvcy`kxp z;^P3*Y z&~ZJTPWBgtZ8Zvr+m9c2;a|}`xf-K)tO$$J_h4Qf(tiYoj{W$GG}0tDJ8F0vk$*!k zizPrQnleb$Lc?x+=lhG>4#sImO$a|AWi1)Kt=o?%bqCs{SdD=~d#D}eS`Xj}6sN5{ z8J_a5mPP(CoIaq_C#nleD0Rh@l@I6;!2{`YmP^Hc)x8##U=sW zlXd7UJLErUR3Ednqf<AE+3KOQ0lxdXi5v?0e8=l`~IUZe_Tuwuqo)$o+@vK-}??QJ2vB z3C+T;DF~*pF2`;5zSc&9n)b_Xv`gPCSmZ2kGo<&>5wTD-`aV8I6F}joa4)Ij7CQbw zW!dcYmoNgR^mpAJC%poA2(RZDZb@FKmaK-9fMBwY>)Tnh6!-e_ozkq*E5mRNb$u#HWDps^udRq<*Ki<`>7%kvK}O-aq?T8QH~D_CUdgC@h-0xtJFs@w^JdCy z4H)63eV0;0o-mVy@}`*x%XK0lw=Vq$C8#yELf-j+%T&77G16}|%;1vudmUlcySm>lKat?N%exIImqXsQz*B&^M7Pq8RI^m}f7=%GQdqmn) zK}ktbUNrgsBu`ed;rx?KBSop*)I?HN( z2D!?9q$Tv`_@b-_@>Uxy>im^#T{gSKIg zGInB%9cfS4Q)j~{Wb<$ZK0=7Ra>Z)LhAC+1qsz2&< zj)9hgNzwPktKT2NPttuJ`azwBShedrg&(QjSkk_J^qnOd6gVtm#^57NX3#IfhW#qa z$&$2&3=j%@^WgiAu%Kv zvhBmhdR6#J&P#}B`71eBCJxOv+wt{g8G)60;~+R>lz3o)nM97N8ocA#sj39G43%xu zslai)`eRyX?nV&i6J`0_Xy#8FNS5HcjsMc1?=-fW4l8+G&y7S11r<^vu!A8`h&O!k zA$Ao(G@naV+Wtg$PeFE!$n{EvzwP;d@s3_y3u=rl`j%o@_MOScui+jQX`ZPGL#Ug$X2d> z1@u3k`#XKL87+62$*7!}{xSLX_Q!{_HuEAVcB@kN8G^NsHh8!8ykxZ-82&Zm$p zKK|oz&L}ho7*%y-6muR?3Hly3?jz<{|m$e0s>D# z4jh#LyOR{Y``vy?-J~h;F9#N^6!{|20yuka>LU^K@M28ytSl(HReZijUQ=Gs;! zZJP{lb@bQ`>gN6l!97T(*p1S z0bya_N_j;2iC4!1gZga*Y#Z(pCbk+TKj5M=zinVv(o+a z#sFbAOq9T(%D&p|eH{Yg6Bg(PsZs1DMIAp*(keMN zuR>~23qj^=S(3HbUoGOe@z!3Qd5w1R7-F6V#6Vlb`^-0XoZXIE^^JKFnmCzT=Z3nN zb5s`2E-JHOZ)=&{L=D8&UgrZx{_A-L>p0%|*V0i1oU-)LwG_0H3_dL0hB%Gi>|vZ& zp~t2FPjDPjozQCQA6}^PkaGD{nQ5NP!pQhwgsfxcPT3)Xf*{rStR0ujWms#Zh3s}~ z)j=GaSM7|@TRgA&Y(yT1b!B?|lZ8L7pO^ybT_c!#oxbVkFAUy6tlJGyEE(OX&(Z&q zOMf_UbEY3C&zbp+kEY;;R(w*-Xzi4TFTakMQ%Xc)ipa%l{cavs`f$L%AKIMX>XT^a zjE(rg5z-bH6b}ENcFyW63c%6UDBTT1gF}aOcgKLlfI~_n-O`QpDBU0^J;(sk9U>zj zAPo`&5;BBzGjM!7_deav+OmT4+^`)?@PNDP@pCp$jn zJoStI(`e%$*kKMUvhvr&P-4GYHQbiqkc5R?oRFh z^QAoNT=Q_@eG9<#8;2mV(sDFI16}RfzjPZ^Ug!_%B0A8-p_4#v>zWremR9Mx#y`Ov zDc@K25*U`dYW#dW@W~U_#w~-($pD^G)Lz&{d7u9fjnPDtVpmWk*aLA&TO~O+^w7ru zT&~AaIVD@TiMr48SM2Fi&er-Vu6!9NYtngosOMabqH%8{kdu&Ev_UxLBACd}q~JDx z$PcQ<>>%ot3V{8MvrK+r)lT;IgtD{CDI5j5Xfbt0po9ct{jIt9V4;FP>~dSVaxbV(6RsrO|f#L(~5RDa}cz=YM`>>5Ibr z=Vvsvc#|AM(C39x7d?wQosh@@w^anARf1W(*ZyO<4HHnDJaT?5kl-(t9*y*YR%`=! z{1Ys}rP_4K@`v&<9??$EfF`lqJ(H2Y4c^%s1---4kB5p^X9=PUnR)GIxmGEXj+ky- zdne7#k;Xf&WCgC-vmEAOLdD}Emw~vrd>nXb*xb~9HvO*-PudeRI^9%h+Jg;w{}(C$ zCnKezXjNLJ5F=;;KjX-qmVPj|T>;*O5NeFqIzi2|V(VVUR8RCJ?pLlalOV1d^99E! zOfM+-tTQ}%ydwN`cxiqrPJb0dnroDemjW_-NK!alBgedx7ry_e=J>67`N6vy7R27Ip2?$2G$^kbnqH+ehZdn)%>!N`It)~Mc>gxaPAqTb6cvM&W!+|Tf+`fX;#4L-gD zJI0)xJ|+v<*qjUN?iA7!j>KU(=%;gI4VwrwAR5_JQAFN@0^f%(haNm+{qTdF>@SO& z1@pQKs2*&i&?*N83P@ud3T2(?6~TdHVwt+N{$_;hn3O~1-R@~{4n>CQ^3*n~aM=?7 zgYLqiKV{r${LeK))FJVfr0kyY`5ji(DdsaQ&Ccg%0^lJ9qOgypZrpzkT&ezdfQ7xnH(>R;3Yv6Pw@nB{&E?lWyujYeH zS3`@rL6u*vZI?gPY;$?+9i-YS?`?hE{X;%D^IDru<$*8ivA;g8BE*`LbtDdl{p?89 zFS>COV(UWO9r(I<1vY~$te0zczqX05`zn>;LX;#yH;3@d<`GIp_pZF^_KN~N*{Hdh z{T!Z1l1__>^S{i7 zHRy^o-a|lw31Xg!=w=h4Fpy8Cws{kCdJ95gglsuw)9auu)OIwRsWWa|V5~{yIvXGy zF)O>9Xkw|X{8_*XAj(S7y-vP+pxBj+3Z~i8CEi${d_F&6Yyam`O~qefPdls zk+JN;m|$t`&K72f#m_zO9g-Bc4AE%urMHCM9EJ8%-~zmLhMM`Pd;?Ve-|7~tgUQ}a zZH9Tak>}=qVtCJ63Lb*#^Qs3$h~k)Q9g*eiQ&Y(2+AB7hHY&;AVGX0StL&?vBwHu#AqFtgD0i%e;^tO4H|WNrD1w{`nIU7F}B&<;eFCjQBcHMXQF2f z#~;Ex`zQv6>LB^6?q3<#usaznH z*i8bzr6dZOPytnE;KH8QVN0#tv4Ulaxvt zeQ;y%gN_pt85P!EMD_&q_)`oRr)(8S;FauW%K5?Up(688c)))G)U4y1%z$* zXzCWH`ltYZwyKuWEj;|qSrKHRN)+*cLDYla!o&*W$lkx2cHf-8vgJitJ!01fGWrBC zInnjiKcq+bLub_=ErM70+R4RC|1>@$8PJzVhA~xsw0HCq#_eYnEx5vF6t6#iqdgS` z9G|_BY>i21end_%PQH3!x8YVG^AcfsJ6In2V3@+0o zBWhV&PS^4qr>U6Sjr5x?lVEHGD&!_E*Z6mAmZERA!w;~+u1G$2MH3(5Ld8{W;PrbA zT1Zm2k~WXLnx)BlcOGD-Ie0KT5~g{hZAZIDXFvWhq} z>-ac1I@38bnnbr^QjC8(rN&Hlk4r_>0{B_S37aRq&tA9)@yAuhuW6fih{sltiQxJO z8zY$+z(VPu%|!PvyuhP|Z~nxj+ffngiwrEcM&0+7=-Z`tfG>=nQP~!&dxKh@1o%1F zcTE`~#RQ}r7Db}hbUi80h|Z~>-#3JlG*c1hn0JxpQgx@oA2jd$^e+lGm3A5As?zMf zqkt5|(Rc-X(jFarw90vDulfk+q(-p>wc2eN0k!nJR!)Bknz6So6M75`oP-#6SjDuG z=qD9xEJ^0i^$y952_=A#GH2y^)Edz!~u97&Yl&d$mmYAMVUX|zHA-Q&1VyCNgFNpIVS1f7%9xnIzTT*}ARk+=j%HN2mX_evbT=NT@E`Ya zVN8YxciaduF7`Gz{akc)fJs@tXTRp7nt=K?L6jk#$CpDGCV&?=)Hx#f_L9|?-YH4L zT-^S@DC$3DWA~;*OT*iWMssBYkmt4O1V=rp!-eMPV&;G@__n5q~ zJ7^J6!1Hx}36yse&~)eQplH}}=}j?o5CytGGqskdmb{I7c(-{1rbm?z8M2f>adNpH zd|v%Jcplp4yoj4bo465Jz3r#dg_WfxsmNS5Bw35i;|p- zPM49na%pR3ow{3HFK(j4S{Y`xxT0(BP{iKq&tpZhEBLOb9O}wh%GjOZYAD=EzB&Hyfb|xeIi< z!vT|H-ob|U*=f$#GV!Fy=NXW2u`9mMv(nQh0}P0}W;5gvNeOQEvJhoSQ~e|ly{hV+$rlj`_ODWwpzgDnirj$Fweaa4Zr^!54_8 z{+li<#RR6Xcx7G`$v9cJr@9` zIhyy!m|Y}o8zAfy&UZY~aQ{S>=rzU*Evo?4FNX?;?S?Ux!CnYp4f~yWM)T^&WzHpo zQYXmsT?R;sA;%A`9q&q3$ejyUz)W^vqZgB1B)@EUd0}b&9A3gBbNhhGckT;%RE$xT z6BO8J=G{azs|y+?i*tF1XY;I;1~|DZL=)Wvc$S4)eObTq_~t89y_wy(wBaD>4Q&vc zCYR$(0Gk)CCY*n0wW*Vz9qZO!NSJ2PQoTjmzd3f~Kf>kFa4J$LZ6`;$3GS>G#S5V_O-W?xBedyD)R)g&>2oGzisC?7#-?`qaJ(j;s^llVTSmEr>rAqL=#W70 zLE?lT*?w0=9pIdig&u0$Ksj;nL-y#@EtzP1MzhUCik=vv&!@wNoWL5X3$Y62?Tk=$ z)b0pB7KhJUit9?68Qg$F(U#tolt}mxA{{iSDeQpbY6WJ@CiEiDnmciAwPeQmGTa~T zP~$rH$!pgQ?b4Nf8g(;R;&#GJ-us>IuPppK?^OUC`7Ke$>!l>@rlhNkipsmJB2A3xvj*A+An`$Wzh`C}tQ9E>b<%UC zuYnYG8?mlLUst-)J8+Up)uJ+*Tu7`(-E%0tGt!igz(=Qas9Sa8qM-b=It4C^w`G_qwtgX&ddNez5v;|wUkbGMYmpR-EBd9Y(+1(MzUqEq09UNJP6V<5 z@{|?U%x3Mh9gQe|)_3QDl`JJKUK>gb%Ab;9s?aeLHW<&2E;f+)jLEc9T0j z{hj`_$U|(6$TQjJ04ZZC%~Ba|zwIick~9TyMQ#VN$vv z-ld=lL-NiKOQ)2Z+LHx%mmBp^wi_L-cATw3=+{9JFXX(p&~x%R`b@fInb lGfP8CQRqf1dUrwVr*H-zTa?Ud7gMYE8p;0+EdS``zW{fSSJVIi literal 9350 zcmV;1BzfCXNk&F~Bme+cMM6+kP&il$0000G0001x0RZX%06|PpNEiSB009rs|A+_> z2tx3Gv;hVb(fg8J}c;zqo-SB_c`i0wv<{Qs9(kJ(=@eS#p z^7%D>e*Wv)&-%X%e;@is^E^1ZTg`v12$=tw{p-cQe}Cfth4uyfclj^-AMU=iUs>4) zsd<9?8TJnQU-`WV`vdF&{LlMe{jWzq&3HHcWBj-6r@#mGAMaoIf6)7{|8e_!=f~?` z+i!rbmHw24Y5qb&&ii3LLky+m{C{?n^bFg*gtKZ}gEMQUOm~3g!M4bk`}3l=3OI}I zs!e@p#_P<)zu80cw)ScxI|l$TAedP%x7}WB-|TSamV9%hXgJlE_tj+C{6)+0%Mmp~ zfeX*e(~7723nL6T<5MgQMLldL-QF*E82>IG5cD8GmAah@_&fgbAHj$~W}3tUYQ;TY`<}vcn(|}Y?jwdmu3JoaWRl=tclB2ok9UYx?QLF z^Y@f0Y$hKZK9IN;59D2lv`&lY{?#^3%+^qr)LT45RwLb&dnQ5RE3s|aJS?_oFz~4` zt!+gAE$>Tn*u?&XuZ`xnXETi96F<$bF7EfpZ*su41l_ z70Zg_*~be#r}oUs5HA__5kr2rCW_`xuWv=i#F(OnQHXrwzwA(Uwg|_(e0*lA7@W0z z21r$l1+U)#?eK5?a#Z*lV+%F}H4?sE5_{}vU4vm8ZJ#;97H*MFbJ1+0$=IeaKUtYa ziT-qxrx`=h$M!h`<}-@=fQVdI!O^DpH-5152UJx;@am}QME)b#!}Q115@JT#XI;|T zwRC!M4e5 zb)TJ!7iS+3pv}$%&70Cp1GOkX0RH+!`Kaks^_<_{9G;ukvGdGKo7Ble!PaR<;B(bo?c%C)zhT1c5P|^W=R6wDSn5KF%>|C-71ux%13`Of64 zq0aan$y<#W01xb&u>8x?3?G)narY_F9nd+`fhFH$=0=lq&#s~LS`B1+Z1 z%guZTO|kW^%uW`3XRZ$N!M$Ze7{meKW!HnehD^hZ#+)0Q2={6eJ}l(CVX%>Co_s8W z=(6^PfPybaJ&8m}2O?#27%npV&P?=SfcDUt_X!h2Mj^Svg7BCYVm^*Sp%gUJt>HBY zRZSUPT%ZVAgLP}%#=6uUS5|K}EGu_mrpt*-(T3&J8l}884?s1|T8%tmQrqq%GTFEs z5L`v0pGwp(%LX)g!OtUqIE+k&+$>x~KNd}=SP*{< zikWkS2^;+TmN~8*Z#f%sFb;giGmI$VFQGTX$pI=;z1I110Yiy;AmOgW`9rf&?%`lXc`USz_00obv zXQKihZ$8hT>jxVGj$OB?Z8ofT`(@u*+2&OUB~aaq*2UD{>UsbjTpw-3UgKXpuE5`6 zTCP`b*Fzi9)vx&#nc$C{N^v@6EpPmiw*I2FxJnUKizWFI24KSzYr1j=DKjjCe8TF) z+Utw8EWEhqSRHat6LJ8o4?`g52Lo7;w73d3OZw_S`{mhr`wZL6@?9x%z^TZ_)BK+U z{9R%JtH4=2D4L7$8PremA(FUeKb&uQ!w4uem3w1p{RHjOv~#HKziOJKTJfKyAi?R$ zmUrQWel5(12M-CTR5ZqW%(cIMm^M@(ZpqNlG=Jn@<>fTdg%0TM(4&NYx@k+}g_qRBEA%aN^*L0PrKCj| zV%+4A07HG%xZ$W|6mvFSqa4%Fx2Jc2CA7h)=K`%9*zZEC%7i#{0U2c@P_o5gZx-af z9nr!#-f@Q9HwoI=$s@M1lY!@REMk-)P~^PBKo>onVwJ z?CDPV!b!kkG7ed@juU|nwaV4Gl}121HOT0aZ|CFR(4;qqNk?ssW`o9@r|D38;(+XD z$m)NQEprAWCmV1JU8R#^v<>lPx}!DbIR0k_^x8%!+(zo$hE2ZdyJY7vrpp++ z?NidIvYZr6;65e5qa*{aG_88^=Az|MKHshOE=@5P1K5DE>bn#bm?(}?;LPs zKj9vd6N-#J?=?C2BKV=aVZ%hAuMX#Q52RX_?-IArR3jQ)y=D1H+n=vivkLK6Nj`F+ zQg9&U%2oZ>`87!|zJI#!qK*+`Hd~*Ugl?sltZ}h};tPLwI-acObysjgA)KRF#O>My z5rh>UFUcMd&EvU^mEl1PQ{fqcFNAe#td87I2xVHGkS$Jxh#|3aCW3J4tf&g~X~-|4 zS^(5|lt4NP>H54r`SW11&5IB%5TU+lFDAVGZrfZ?-K9I+OQtJ-d$ehR=WLN0kdxFt zB13>~44?#qHt~rANSlkI?gD%G^uUj?78Yx@e`o*%L#6i1*QSSCX#gukdWXodT}DC6 zgXdU_gxIPsA&Q}CrXKHNW4aPjdt$g54wFm_!f)5=$)T;lMsc7)1Ds1g9J4_+5WlH^ z>-D$zob_p>_`Xf=%@S{74%&2@U)U^eQe?6^??ulj~E@@y0)o z24T_tYV>Q1x?vtT?oIQKwDjQQdUUEO&Qkjz<>bKLh$UGagrG=H;6-O} zXJLF}T7`}~$EjXM+GFk4Rr5WX65)#$>D8Y|j0I`3!0;owg82Z!ehU?W zbPuN(pw`VNB`%CmQ@1vwmB`sUIdN4IsveV;^MtFj=?^L-W!Z;c&QbWR4-^*t@09Ka zM2@4}7=|NvEuTLBGh>;doD*tL=p77Q5-(`0GCHxhNGorqirNE6!GXLW2*t0X^lr|X zvawe26|(!VOziu0*7U;2YS3IUgiguz7>rYz)8fE=nkHBe(eGmI9+ z!V516qH;F9I5Q~-Y* z23%32;|gS=Rs#`Jp%jF(V5e<9gijx!zi*0$gJ7dIv)u?@^^8#Zfbt0!XTn}LJ_Yx2 z`KPVW92iU$u8V@of%F0Hd-rQqRuFKSc@=1)dp;5VvR_IS>JYZGJwbc8SJZ~T*Jwc^ zXKC<_!HDZUbKhgp)#$?NTv6*fIS+%#aMir)E?Spm76J1{WN6IQr2+Zcgm&9Ofd+VV zvx4G}f`t})8wcj~+sXQiUsHP@@=$w-WxJd|rIDdN>HCb(C3WNo=55J%&!7X$acU~I z;@f(=qX{#t2BAk3rR(@s;GS{#pa+Fiu9&aUTqM(jn`Jy9ZExPZfa}8%%Z;#)zUXQ+ z=|4x;V2^0*pBYvf@exf9>$*^Bw!+yL(uuI}rU?`zP3mkY<_blQT#u5LnjD2Od_yEj z-=}+J*veTnWt=>+KYz`(9s_f){lr;ZqrThj1u$W+2lSVX54}# z*79{$qdNRsn_!co7SM$YPhZz_t?Xy1i;lC0wm#5nW}1pl|vr4KKG9fxDc;p13l zWm^O^|8Q}PlUk6eq(vW7q9sK|G9X?)a0>&s7q;3z=9IA;*|rS}_hEK=<-(b7xVcwn zeoR^mgwO{KGGS={nB(840Iy6-mTS%jn;5^+I)i$Eb!8$d%>O*rkCu(V97gB#ho%uw zh}krfAQFQCHkaYkO}sGUx*URW0mgQ)6T%hdZv;b4%^It>b-dd_n9ip54w211KfWT_ z9~+Vg-xphK383p_Z>Y;67ezy{@wy|1?grb%?4S<#l0Zo1%#BNWSh#)~-LD%7%+A2Ko> z-gc}KF;tRMvK~DG4LQg%HiUeUXDO*N=;=4-4d=l#-dlFXYOxp*N%btz6X*C%Gr}W| za>(WVP@H`#k*=Ygt(P-@xggqG{Cm6tSDO~i<&_ins4k)pzKTM;?{E(@DiJe|H?#mQ= z2Lcz<^%+#`dWML}dTwJXFMv)@S-{;eJ*-MOW$6UddmrB=BFpH$>=K4zA9UifR|^32OxG^&s=kiZpObm&Lg` zTBEKdZy2OwJ&EFD*VASz>_8_-yc#tVmHo*k}{h!K$UMz zbZ|R3EejNK&(0a+^VB^{tVs+=almX-{J|3)afutxVdRt%*0brs!kstTJK7jug}^N< z9z>o7;(C#wC)yzIUQ|e6a@aN!$d}}yFXjTP`{l1e!G!ic-dWX3=IJ z)y;>5FT-on%p9XrykCQA6!T8r0|wpQM)(mV|EaWybKo&C1U{@2Z|{ZBAAr(uX5&NV@NoGpk}F@!-n{YUSVyL zav(Rr6pwqkSIOzuh$J(?9TY=aqyn$2?MOo`#_(;mI#>adJBbWQ%(W@QP(`Uv5UY2T zs_YVhcjfyWj)ysW1P8Z{{F;@WnmLpNPB$hQXSU26tU4-aBH|_u=ym|+>4L|d_4tG+ zcSKN235(lDAgEnRTOHFzEs!_@ua+T)i_Pv`bk`m`kd6>Kt=C*z8T=I`?ID0%$U&Ps z3SZmvwc@O;4A6~@*Es6M7gfmi5}#pFl7FL!DyyK1!iFC7x%qFFH6s=oE!m8 z`(P5RcfceS7maxvC4KJ&1eFCd$WU?S2%4VC@u<2@{XyLfksOJVxgq*5-62ZyeDpZ< z?dS6|T}>15nxy0&BOhr6h7cYT;bBbiAsl#?SOpd|v&fQn@u%%%1Zlo6jAywfzu<iVr8EPF0Y>ID_pE7#SnSdpwwa) zX;yD2h^C(b2!8fk4X#(}1Lc_;BS-;79e}Nz^#uXe{wgd56hBZJ$Voj)Ssyg@(2Cqr zG7Z1Q)7#Z#IN7L1IJyM!#y($YEWHb7{FRNpG2=<^1u$x8;6Tl4m%xSsRU=1Rn)f?X zOTli8FfaqdLZ zz?M}ROAq%oV?|?eG-~TzW>VZ~pMAasG#XBA3z;;UwQq+%rN)p?8_IikE=Z>3ccR*hFT9S?<>$D= zi0rG(rzOC>wp-*xg-|<=ObPQ6ZW-V?+iDoknX`rduyvLZpFaPO-So1q>bF@=?ru#< zIhw|Okk&hst7%}lk);*50bovAuz+^OLbH468OqrK2SE zP*@|JU-qKUcfj$udC_3@!~qFWEn zXnqXr-YCvy2Uj8=<5lPO9amxo0wEub9tB6Lnv_75Xxu$Eklh6mhM6Lw^Ybgbz_}d?_85GH> zA&hhP%^OAN&v{FOPk4cWnmK)XJbL*;VH^{fz*k4$fc|<1iMBi(pM>S%Hu>DXHK08^ zpSc@PTW6_%x<-JBCATfYF=a%jpSxq~3C_zGG5~z22-b>4k9cP<+YJ^l=f6b#yp~zA zfT@Zz3cbqVjwKrH^AHvm+`uBL<3B*;Eccz{@ulpUBFRYvM&IcKTrJLE8UfVINLYr^ zRhqvHjq1A{UF{b*w z%)OKY0*53>&hn37V1_T^O>DJ4A%py9UFnrSf);p5<2&80tR(g_zu&>I*Uxe zwnwov!Sd`NDdRyQe=nH5GVg%l*{l5g7Ki3sSb4G%`+^;Yal-mtmXxKfaz{z%Gpz2R zSBs$KUgNcB5NDCn9Qh9su}%>v+KmctWgfT7rs99s0Lk) zia8;FbQkLg9mXgVzMK6LQPLTb(4N}6S9!~f3u!(Lk~f5hCC$!$=Z?Sl4j z+z6E`6OOd;qx69fUxBXT{B%UGm;lriB{I1XVRLUXTpE@_r6w?PYwe_R&oas%u(#yh zY-E3b*P=uEeB3Qu8Beic#J*%N*-NK|>&z)F)37@f9Fxk+Hd&se9b>yTwfv^p!UvRj zK6V>7-Q_w<%F7Z1%}>ecB5UaBcY{3EQEy%Q4r`{@O5o;km}e%QF3lnU&BX3)36c=G zZf3WNp^1R|@LEjyircLRc|6MjF{m9sS@W(l*YEWoturmLxO(JR^D!=+selhf3waIU zm;yWGi^PerU(G3=iKpu*Ah?r4bsfng|3+$l`gx-`T1z2Q4m@WN(ulnb0zZ*=L>fjw zl5(TG1|iq<$NV)6%VmoyM88)1Z@>iS6U#EUP|ieJr*I84bks$I)cZ#JacjZLx>!1L zmJF(nZ?d`#F)x41HfAhDs~?Ta0aCCI?cK$$n z^OQyAOn*MRTFbJnnN#xtMx*;x)6=l-7f2y1xpe}ucBu7E4B6P@_$$(%FYS#K&kh@) zkVAdW##XW`s*sVJr*vwKwp&Ug@SCOdOZ8PN;R`?X?HtIqc^+~O{_FBXDA{;wQsyyc z_P(Ca6_a$d`9v4X@i|Z>FfEwMf1azwKY0pv25Ciu(JoDdZa2^P$lg{pTOF|EfBx5t z#DQdP>wn72J&%%j1gmoo#$HYQttfS6VH{4Agx-F7Z)pH>FGMD@fKih4HA+j7k5bE%XMU{2|Y(FVcD zd6)W{IPn*PjE;u#mjF1Kpl`FD2ZDJ;7JK2h^NnmMUq#7*HYeTL>3m=NbeTtt2*oLLhis~g@8Gp{KV;XZ`4K#~uk)1A2zFjXrhc_d)JCv<2_g9yI^Sn|e zRZa$eg&iY{gPd-f3#$EA`KrVllN=(tDOUqws>W60Ni~?1Cvu!d#Wz#i+fEg<{*gns z_)ukX&@Z)3!J@sUUD&x%Lz+_7Ca$5P)gAL}ZEC>`XWV)LrL4&L0)Vdt>xavRs%Jkn zw+glkE);sjiWnFee?u^oxIjeka`!uPu)7Z}A*vb-P)p{OXZ|t`I=I@S!WH~5wUX~)PA1F<}6z7QimCs`X>sQ)QL37cVoJC))s0@dk(|Ww)wjPDMJw z{6kYi5I5-K7G9&)zHD7eZz{&~kq+Nx%*{UHlU_I>Z>R00Vz}Ih-Bx2f66<3je%&2G zrU{D=Zhgu^S7b=_zT{gW-->lCuT<{qP)okc8Um;R0W`g~^d}&sT5PKR>A&+_BT%bG zJd03%Zh-koWYKIxO}?Ox7pXh-cJ7GiSTy9Amj}et5+?Zwa|?-Pfk0Iw!TjBM6srw5&75rpKq~IWvw^)iD*&)WR(VLXCk$ZcQp&=IWuZWdjcA zZgw)!5ryS+qO3}s)s)1;lg-h0$%QG(g@L_R0L|%8}U0C!G>c(1&h(ld>H|-sT`7A>jJ_)ycyVOOMyhJZIXAk9`R7YqXFin&~S z5GcTa=;$keZmzO!F#w+s#D(BTa-IJroD|a958Fs17p-aJLv5$pH`sqE|6DIg@xCE4 zZNksEHNsMU4#)6H{Nu3!?3w(Sm$}cpGvhm5yC6@yP~4H5Lqv0A5hU?Ef{eeJ4Qe)=3ItvO1H2~+c+fEvdmKmJ;frR_J=!9GqECJ z1|`=M*r%Wfj79&n{sv<1lWK#X3w?BBz|&gZyAUX0(P$4Iya6TN000000000001_D* AD*ylh diff --git a/static/images/directorymanager/11.1/admincenter/workflow/pa_template_message.webp b/static/images/directorymanager/11.1/admincenter/workflow/pa_template_message.webp index 6d807fc31ff29b4f88937b8afef3bd543cae6aa1..fed52846a0fbafaf9de384b433118223e9806cf4 100644 GIT binary patch literal 7658 zcmVl^;p*pK?>`+xub;Qz9on!mXJ3P0Yz=YH;d1^O(G>W9)PJe}a{Z3}sr#GokN6MC zUpM|EerxIl_`mSa>Yt2X)cflk(f=gAfIo?U z9{#KOGyW(4*Uw+-ycmAD{sa97xEJyN=D*`VxBlOMjQ{`tqwzcT&+eb)f5Lz1{{!t4 z^3Uww=s&xD>i?Vn|M&^~cllrV5A8qWzuSLu|NsAI?+@3f?8mYP>p%SO&rzN$-`3H;_4)f~%Q`D!G_~s=$`z zj@v&ar%dNJJu5Kl{bn{=X|@dM!hFBgXX>T+BgL%)}L3%rvP& z0vZxs42#838dNe6FjhGS`0zTbPZL>#DC@|m3GvKz{%Gg^TtO(mkAj8>!fEbH{lWty z`COQ&nt#B^V*bbZsy}C4#O?p^>bS9sX|&ssNWPlgwFxJ`kuH|~$I)NJK54&7yWHl@ z&(Ttf*2D2?N!2L3ezf)Xyqq}?fBqfBa`-DCl#IyanZeD9lr_L_R}AHK1TS$rz?_Z_ z54AIZ;ZV*)@PCkG3^u7w_=@-k+G*sdta13G59+Qj_JCiigYPZdWjdH-w>|Q47lk1A z>cw7DgWszac}@RVpt}zORp~s> z@ahsdSakg*$Zzhn(AkK;qmvFkr@>g`zIC5B5W`^MiOZLZ8TtzH2(B7K9&n!zsj4!& zSi8(8E(XyGF2(uPsj~cYp!?L2V z?0nC3kS8d=0K+xH1I>EHkZ^eG{=A=Z85#R$Js_Qx6^=pvL6CuhvBz>hm|YuT%I=Dj zSzjcnEN_xjmN&^NOB>{sC5`e*lE(Q1jXa#ZKr7~+Q-j~D6?sk%eymmHI6eBYSCruP zzBT~<{|cMWsz`|o{9)0}ry5-lveljvI`!1yd9NP)Fx_VHny(kq)+>xC02o~9uM+RY z%?RyGiF+f93F&wuq*Mg~ThR=l%-=#Jpxky`L{=ZHmA3O?px%7FW_nhYM{Zwf000=U zQ-*$SaFx`}UC`akd^Ppui8+21vyI>+axgU#Ofv!F(3UIt*r@<5O)5F!P`RlS$(wtU z^mSFlFQ|F|oPC`R<|LM!c#C0XmKn}VXI^rZfEWMrv!4*uoDb!}nmgS3J2dr;9s@E@ za9jib|AJ%O*Nd=i()s#gIB1;5S<{<_CUFnr-M0w&lVo=oXzj*$25#)YRK$FSoK>jM z+?_f7v2V8x9uuR+~czsx}QQL#ac+I2bT)O4-De}GZi-sRAatgT6HLfZuJHh|bdfDIifk|IK zYL>BlF=(TVw@rAjlX+eg9F?fVv(|dFW;ruav&)TpZDxKk`c{{W?hF9N8~qK^*xtNX z<6-NwpRXb9A)Kx9>+A+M>VQ2BzuUY^_KP6qE;PoO!jmc&R^F_dkCoTqADVb;f zgh6)cBMB1)AHPg)BeF0H#~ck^Xf-_Cu8Eg;&f@`CmHv_~gzox##T9xG1&wJ z%lW>+$yw@k32L5LAn~9U+Ozym7f1^rA2FL!&^&45G3NkcT5A$o8g=ZtV~ExG0sN8_1p~V#=Mn z&*&}aSIU_l`5>&@6uAoo6izbTo`~+`8*lZ_3RllN`)>0UUxtmghYA!Bra=2HDH-R3 z&h&E$yLlxT6Oh5B*$V*6az4qK>yE!fW2>DLLmlbabinQLka|(^)^f4>)7#B;{_Gm* zu682={rW*h>*V~K@a#SaN8r*)Y9K1By#eH8X9#Fo-(eRD8L8n(%+{Mn7raQI3hxJ~ zhh2Eq*@A6apZ51U`cOk5eYp`+$8Il>p-F|+pUsV@>6Jl4XdM4KfCNBU-o+%8$xc4 zjvwi=qP;c6VDj<30}j;_5j$ca1#G-+2NlI0hKvIeRvO1KN7(&G{BIl>sMz;j3cc_b z{y9OLA=Ic}qE{^ws{M7lHGILII~1wQVsIe4Lzbulf28OJk!vq0ki@ z8W2LwR)jH0`OK;oQr>qXh~kf{2Q&9nC!yU#Eh;keP|W<{_3IJ#1%m`|~%IM|+U^b{OQfQ4e7{y8sa(mO)2C zg728~o`q=xUHbxc7i@Stdd0j=lZvX#%SX)N; z4YBdt6$pJlW?A@7s2;ZvuPg9b!4gp^90#u5cT@k81*N^_uI znoPIOm}pQ&`ja>PVI|NG#j2?`-BrhD%oCw(8KG1mP!Ya9!wz}*>-L;7GBEx#4Oj1` z!j!{jWq2|eYIVT*sIYeF0zmDlwJ|`!4n1v`pq9*rwU0;n%dh62ZPg@$v@wJgURL2h z4aFw$J`J*rB$dI&7Vl}gzjRG2(FuE!!8&ZlG{Sko^es1*%oWB=Jg2fleWw6_MuaMD zLR0TJ8r7!vou@v}`fj^rQ`h-uG&4?jU{F14pc%Ke#I}mbO5y!zxurZ2lE(e`}a~Cam&kd)oP<4XN&G zvf%DCGo@5*+rZo-72WCjDCht7M#|ARo%-qDoqr`k9bF&d5w_vA?nM5L1}SFuTv?7V z_N=MejGxZCK|cwDV*h9Nv*b|Y+M^bRy9{pGreo??nT*TUA!ezIr;)?CH%Q%nf{!?& zsDhm{o@nG2^p23f*R#mR`7tj<;YCBOY;oQ;UsTYy1n!D(Ja2!3e6*4Kf`?Y=KlQA7 z6#n$Z)aS@Po5Zm7k?54xS@B9`U($3*(b5YFQ$M|Dp z#`^Bm2M|%StKUEfU7`|YEcHZXEq^d8e2(t+bdBb3J6F<|_*G{Apl&#m=WF@>lW7OXQx|MhCXm$siv%fHl{ytQx#GrSd1u;clckvi z#^+jGWOO_UU8dhZS|~AD$e!gos(+M)fn)1WI=)PwUj`X^%^I3ph@wbrY%YfGllXVWt0*{Mj3TW{v- zyrqAqe4y%bLw`*5Ip`fRB963NVFCuvcC;Gv+26!KdgiuYMtzb19H&u7p$7p} zlMdU$P~OR$FggkJ4^*G*yowJTR=$m~uw;7(JdT|;izO4PdMy~&6Q45zpOC(RRn$eAJReV^Gx-b(PG$O{|hPE5J;T{ zMrTzd+`67b;k#dz-HJ~x5!Qk3TQyP>R7bg1`tAyPeJ|1TXEYxS(^=7LWPG0I`k>~E zxS< zogiNk#Ipv(JE~{`NgcpI@&VymN8chJhxI#G%jIZZ_~acHxTcv|C=LUHUR{mv$m~7` zKzX2nYvXsekjRS!1*-g96{5bao$Fy&$CfNnAgPWf0LYj(I8IMC%|v#F{oIG(xk)wk zd2z7pI5lM>y@L8N_D&CZd<#8Xe#I!t(Jw3CUqMd5LUS)2h;3JVTeN+OsGRt2M>Zue z@4Ixac-C+6t2rlNn>tI_tPwW9y+Ft&s`#PJ>OfL4I!9&eo@k4mZQsz;3|JeYtIn1q z9Xk^8GlNMhS)N|&&cs&>00F{A>=XCNTg5aE0eP*IM$RgAXZ;ln#w1D0jPVB%|B5qb&rozNU zHt?cjbb5q(aiq2XDr9yEzqk7^4adox*^(SAbmc&oiiHQjkfPcUhb7;P2EtLjHRFs% z!BZBk!LLtq{h|32y8XQ*`T9APZ76|9igg+njRV-q0>Su&_zOI?5kqDR0~L7TP*jN{ zE8+KE&GR#7JPq^uK_Ppd7NcW>?4P%M!v zcpZc*d(qXcwIYHLAh6DLLC3spuHx*i`P3=adU%#*AO8ViGQUvzVQVBZ(0{eIiYbPF zkHwnu{P*u%6&ZqtSexk)J&GH0Z|tH^RNn_dm_j(NvRA$4R?H{WJ}48uO17ylVL^xo zBW{TN_GG1qIICpRl)$$zPCJD4aa?H5tmG3h@(Y9`rJxL{BmO%M5qnLQ;DLK&E`Mm+ z=i&bVW<-ixNW5!rIvVym<Z8Mm&FQkFWMhCHXvy+PA7bciIa{*w z=CQ2qP*e&~9N94XAh5LZFhRj2yDuFA6B0Or330bwDqyNB~YocB`aqA$1 zDQ?{Q5lP0ZGZEbKf5Vq=!~_qPgFctHAkrVCqlo6%zPZ~GK4*K~s;9Td#Xcb7eBi{~ z1Cvf~nOsrUz|2r!b2*e2qR&D1*FjaZ8ts$2e{Kz+sSD7-O6U@&7parw)pF)~tB$1p zx;;EcTst{Ty=BK(!#OE9-6vd=YOF_;P;`k)$y;r|F>0pxEBZ4*2g*K4 zH@AYXrbLY3_}Tjmu0bF@Z9GQsERakC_`%kGv8vn01cFwC^zJ)DineyUc{sC`!RTs% zov0!GX9XTLY3?vU;rsVJ;zudyorO+*c!_uwqD`G(Kiv?N4?FwRxFd=TASNluIk;6A zZyG|*F!dyNAJmWl0000000rD_0{(=#p%JyRS><}9gxBjI0?YXelL*;qn}7qQeLmxA z9pZoi?@@}EKYLhk-OTjgCSmvZKl@#sqQ%rk1AU?u^8W3Z4NhN;ljCIg**-xMf_GV7 z37IVU&pfzMWoN<{Kjx+13Zl?>hf4w;w#cy)(-~d~nJoFwJh)M1XTldh<}>G(CrmJt zU!!rQ7^6}CIHQe1wfKiKOpzKO?72TuY?FWh0PwYsf@i?>P?RQfU}S{8Dv>E` z#={b`mxMB)D251(!zOVOF?xy`EU$;2Y6?^ADL+d6jZx6(HsW)kxi~eA!~YAE;Hp~+ z2yWqmKipG~_6RFF$cz+`Xc!b^{7&opy_&s4TmXu(3|ehYzlmu!xlX3|w@t|C^Bv7a z_j=>7f!PHVj!m1DFz_Ue`c@AJBILThzu7YbKTDIX$IGyu_4Lr#8ssU;aGEVmmdgGS z;5}=RRhGq_8+wF%6;J)+13r@iF&VRm7F5=bB(R9;#qLKG`|wim9e~zbb6dXPRsjUd z|A(DfO~!D{D%XO6N6IIfDBK%Oxp&Uh;_grYW-hYXL|Xl!(St#yTr_fcWF*9uq>C9i zWDVBETpSvYBB}fRJC-l4mj8eM z91v@~1~7$GC0F&hsIjrN+ymtZE(v4!{Wmg6(Cn0-XX7*wL=X`029uJ6@!{ zx)gW@2IFbs8kl%7J^HK`e80L2VW+`Lalv_O?e6R@>9Fv3w`u)^MZLPJ>L@dv4c+T; z_sT!oGxgotJK^ZVK%3`I#NHRIzt=-v1@LA)`!bUwRgzt!xF_R-1;!W}ut|-o37*(+ zsK>|2lWNjh4Y=?S;tIDN>jf{2LCpQ4Aqp7oCS_T0Qt<8g-ctx3c`fh0RHiXY(R3~|nw2M4)CU@etxsCP8m75aMuXmNH2om; z{ZGJ8+L!ZW+?HcXGf@b8Mt!<=$s~<_4rH}3qH0o+uV)ta&@j-7>)9Z^1_gPK>i>kS z674u{5M^|Y*<_^vDqEtNo79%Hkn0QK3g;d2_?D+`R*fYp0kcG!=6h5NQ)*lDmxZG%+^YnpQby`%3_AvVIW0{<36s20$O6$#IFxzsu%6vd*9=MVheyW~lo(oeWl>CmGF9o5l)XMQ zvMElf)~)+w%hgMco|)Ia8VTKvZS*XoQ4(&6czUw8LIKvZ&10a^}e2OY#e6z zTNCXrTI>g)w)4VL4S=+&{8}m)L0`$4-1DirTyn2=E!qQcPE)uah+j|8zcQ47wOA>D z1Yr*~aN6HI-s?<4*mDh3*4$)|5#>0d1Qh>G5g(S-e!%q|b)8OS@;2hHES5H7B=Lnq z25l|fh2qNm*`in^rmUOHT-3Hac$&*_jG>F*4MT=5+1Nc&o__*fZzw?xOk1A|Ss4>S zx&KrC`sh<`&K^K~k;iQuKw?ukO4J*n7VG~*yw#fZseKrghK6YVif-fKjTU-y(PIO>UG{f{3oipmm>PUf1kirgVD3Bd;YnysyqW+IxJm57CIgcx zdH}Ql-Zs#YANA%UZZnoY@rI^<$TV3T@$@7Wdcb!*TM`#`gk3$0-T*5?<6rI%M-=_# zcs4GLG199e?UITRP@nqCOfD7Wb2Z+|p8A1|xpE?bIC?uFECHK-E&cR(`ps2?ehz!j zPX1&a$C><$6wcI!Lf5Lnb*e-PIHdp(1t}Kv39eBGhs2n+HcF=;q$Q~l_Xn2}aHfaA{@!EoR&v0Q&Al#k(R#tctR zk{%6+GtMBWV_6WcVRb=6QxH5*@~l;w^ewcSfB*s6Dmz03q80rjt!%O&&QL}q9*(|M z(rKC(+ycAKkC=Q>_VOGePjh*utCz&o_xM*~f$UTk0jJA?{q|>uDIlNZ8GWoR1ye{K zR~hUioV((*xD`rWa$kSS#n^`R)F4-GdbQp4V*RTL`6rD#L-$TR3%phXzyJV+JLv(Y zMHo14xvoOhDgt;T4rQnV@4-%61Al@%)r#Oc)BB8;Ff}z1lJ4C{x`hpFDK?XlXvz+- z1@73=^Ts?=09{#K5{&CVjO*`{_hz!YREON>Z0D=I3vOO;jWQk7nR*y@u@ocV!D}Y% zuLwOj3spyd$9-Hu%(L+CQhx9gPgte-yguNlAx2SS6@GX@JAzABRNI<&(=NjeN#-qr zt_p%o389UulY6velzQUB=NINLzuA`6oZAdY&9l+XOj`Z(I0G<#oYybcN literal 1906 zcmV-&2aWhrNk&F$2LJ$9MM6+kP&go72LJ%DEC8JWD&qi`06uLtmq(-{A|WSR$e@4? ziD_=}AQirrsr+OA=2AOvrv9jZUG10sA8@an{~PT6czOC`zmV?r|Gn}vy2b!MGybFA zhp9JtxmUaazNh{#_5d~oLd+i zo)IUhi>Q*V@H~o+WEn>3uEkFa$|9HV3SEX!x^XXX=5=uy>sIx((V0}CM87}9V`Ck> z#`-UT>6tdh9ZCwZ7nI!RsXYQqg%WG{h_am=Qgx*tc&JW*6lKkR=@2^3b7ZI+~>dlPBVX9t56f+Mb3$qkZUNV=j6ragc?#71L; zf8!Rokr4|{oqN2<_5?3cSQH7Tx`$Tu6;GW|0092~OF#fE0!%2QyaeHKU4aK_-4wyW z$Lz*Po`yVpmxQ@$oP#&r+8)=oUiQW2jEUYWovXmzH;r@JHQr!zY-f?PAu6cycX;*O zhJttvGov2LuJVP49oNmL4WUkcinfdG>>N?^Vz~oVhN5bN(w)mOUsfvlRSbf0YbRk} zFU{{oVLyq+KI6z`^INEWRSEwf&Egdwcd6;2PhZgByOEP#v1TVT^}q-a}yjFyoNc z0?vSdk^+@rxsElqjW~O$CDH)V}4h^7}>l{(^!m%u%n(n6`EA z>gc*Q_KWUyF-21I0v>e=2G(kr0Gp^Kc;01|HlSs4jY@hM0KCD=tN{QQ$oW>f@2AADTGrU49pvUDo2fJ8*$wpwi zH$%GnU^rgO5*5Y+mMx^4cSjnOTcaF+TQ;n-=57VPomBj97W0wgr66}*fog_A`cD}* zE$ErMGInz*a_82&U_@3Z09XHkm#mZW$fcuZEUg^QdAI+|4$qdplT#vJFK{$99#}H> z4!i#KPu8cei|9W0>qa)_zgae`A6X~S&WhbL*_rmEbz zXF5gXf^2`4AGI<(y+0_)Z;&%v@$N6sqm!3RL61|t1CpPZ99&irLkR(PyFPJ)r;l( zo1kf^hgx=#Dm}oG@qV9cC$=~u!0WwcG+zjEYx7?R40n@7vbzC7N=lp=kmm(n;>@h& zqY!}>B*lzJW~mT>7_W0A5|uTEqZo39Wwh^=N4w`+JRxpWOUQJIVni6aVWWnY#Rhyz s6(c@vD^G(Q4^)wl7LL+!STNN&VaG3Wi_6luFA8tR532wHIUoQ401nK)E&u=k From fccf47f14678893706d5d952988e11b6249d08fc Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Mon, 27 Apr 2026 14:46:08 +0000 Subject: [PATCH 2/7] fix(vale): auto-fix substitutions and removals --- .../directorymanager/11.1/admincenter/workflow/integrate.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/integrate.md index 783b08ae18..3db086ddee 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/integrate.md @@ -26,7 +26,7 @@ Consequently, when the identity store workflow is triggered, the linked flow is :::note When the flow is approved in Power Automate, the identity store workflow request is auto -approved. However, if the identity store workflow request is approved first, the flow would not be +approved. However, if the identity store workflow request is approved first, the flow wouldn't be auto approved. ::: @@ -34,9 +34,9 @@ auto approved. ### Pre-steps before configuring connection to Power Automate 1. Check your certificate and ensure that it is valid. -2. Make sure the Directory Manager server is deployed on a machine that is exposed over the +2. ensure the Directory Manager server is deployed on a machine that is exposed over the Internet, as Power Automate needs to communicate with the Directory Manager server for processing - requests. Power Automate cannot communicate with a server deployed on a machine behind NAT. + requests. Power Automate can't communicate with a server deployed on a machine behind NAT. ### Connect an Identity Store to Power Automate From de244dca4a7454e6e2baa30dbcd152456b047890 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Mon, 27 Apr 2026 14:49:03 +0000 Subject: [PATCH 3/7] fix(dale): auto-fix documentation issues (AI-assisted) --- .../11.1/admincenter/workflow/integrate.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/integrate.md index 3db086ddee..1ab814b1fb 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/integrate.md @@ -9,8 +9,8 @@ sidebar_position: 40 You can link an identity store in Directory Manager to Power Automate to achieve the following: - **Trigger a flow from** Directory Manager - To achieve this, you have to link a workflow in an - identity store to a Power Automate flow. When the Directory Manager workflow is triggered, the - linked flow is auto triggered. + identity store to a Power Automate flow. When the Directory Manager workflow triggers, the + linked flow triggers automatically. ## Trigger a Flow from Directory Manager @@ -22,7 +22,7 @@ be linked to flows. - Link a workflow to a flow by providing the URL of that flow in the workflow .See the Link an Identity Store Workflow to a Flow topic. -Consequently, when the identity store workflow is triggered, the linked flow is auto triggered. +Consequently, when the identity store workflow triggers, the linked flow triggers automatically. :::note When the flow is approved in Power Automate, the identity store workflow request is auto @@ -33,7 +33,7 @@ auto approved. ### Pre-steps before configuring connection to Power Automate -1. Check your certificate and ensure that it is valid. +1. Check your certificate and ensure it is valid. 2. ensure the Directory Manager server is deployed on a machine that is exposed over the Internet, as Power Automate needs to communicate with the Directory Manager server for processing requests. Power Automate can't communicate with a server deployed on a machine behind NAT. @@ -68,7 +68,7 @@ service and the Power Automate platform. registered it in Microsoft Entra Admin Center. - **Client Secret** - the client secret value to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - - **Redirect URI** - the URL of the endpoint which is used for authorization in Power Automate + - **Redirect URI** - the URL of the endpoint that Power Automate uses for authorization `https:///AdminCenter/api/MsFlow/OAuthCallback`. For example: https://powerautomate-netwrix1.msappproxy.net/AdminCenter/api/MsFlow/OAuthCallback @@ -85,8 +85,8 @@ service and the Power Automate platform. ### Link an Identity Store Workflow to a Flow To link an identity store workflow to a Power Automate flow, generate a flow template from an -identity store workflow and provide the URL of the flow in workflow settings. When the workflow is -triggered, the linked flow is auto triggered. +identity store workflow and provide the URL of the flow in workflow settings. When the workflow +triggers, the linked flow triggers automatically. **To link a workflow to a flow:** From 53b3e0a0c82875a56af233f2ee5817341ca81a03 Mon Sep 17 00:00:00 2001 From: "ivan.zamkovyi" Date: Tue, 9 Jun 2026 14:15:45 +0300 Subject: [PATCH 4/7] update documentation with latest changes --- .../11.1/admincenter/workflow/integrate.md | 45 ++++++++----------- 1 file changed, 19 insertions(+), 26 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/integrate.md index 1ab814b1fb..3d42483852 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/integrate.md @@ -31,10 +31,10 @@ auto approved. ::: -### Pre-steps before configuring connection to Power Automate +### Before you begin -1. Check your certificate and ensure it is valid. -2. ensure the Directory Manager server is deployed on a machine that is exposed over the +1. Check the SSL certificate for the Directory Manager server and ensure it is valid. If the certificate is invalid, replace it before proceeding. +2. Ensure the Directory Manager server is deployed on a machine that is exposed over the Internet, as Power Automate needs to communicate with the Directory Manager server for processing requests. Power Automate can't communicate with a server deployed on a machine behind NAT. @@ -56,22 +56,18 @@ service and the Power Automate platform. 6. Enter the following information: - **Organization Code** - the unique name for the environment that stores your flows in Power - Automate (the first part before dot). + Automate (the segment before the first period; for example, myorg in myorg.crm.dynamics.com). - **Region** - the location of your environment. - - **Directory Manager Data Service URL** - the URL of the Data service. Requests from Power - Automate will communicate with the Data service endpoint. The URL is as: - `https:///AdminCenter` For example: - https://powerautomate-netwrix1.msappproxy.net/AdminCenter - **Tenant ID** - the tenant ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - **Client ID** - the application ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - **Client Secret** - the client secret value to the Directory Manager application when you - registered it in Microsoft Entra Admin Center. - - **Redirect URI** - the URL of the endpoint that Power Automate uses for authorization - `https:///AdminCenter/api/MsFlow/OAuthCallback`. For example: - https://powerautomate-netwrix1.msappproxy.net/AdminCenter/api/MsFlow/OAuthCallback - + registered it in Microsoft Entra Admin Center. + - **Proxy Callback URL** - the URL of the Reverse Proxy. Requests from Power Automate will communicate + with the Reverse Proxy which will redirect request to Data service endpoint. The URL is as: + `https://:` For example: https://powerautomate-proxy:5555 + :::note The Directory Manager application in Microsoft Entra Admin Center must have the following permissions for Power Automate: @@ -97,10 +93,7 @@ triggers, the linked flow triggers automatically. 4. On the **Configure Workflows** tab of the **Workflows** page, click the ellipsis button for a workflow and select **Edit**. 5. On the **Edit Workflow** page, click **Power Automate Settings** in the top right corner. -6. In the dialog box click **Authorize with Power Automate** button. A pop-up will open — - sign in with your corporate account and complete MFA. The pop-up will close automatically - after a successful login. -7. Click **Create Template**. Directory Manager creates a basic flow in Power Automate with the same +6. Click **Create Template**. Directory Manager creates a basic flow in Power Automate with the same name as the workflow, and displays the following message: ![pa_template_message](/images/directorymanager/11.1/admincenter/workflow/pa_template_message.webp) @@ -108,23 +101,23 @@ triggers, the linked flow triggers automatically. 8. The next step is to copy the flow URL from Power Automate and provide it here. To copy the URL, do the following: - 1. Launch Power Automate, choose your environment and navigate to **My Flows**. This page displays the + 1. Launch Power Automate, choose your environment, and navigate to **My Flows**. This page displays the flow you created in Power Automate from the Directory Manager workflow. 2. Hover the mouse over the flow to display the ellipsis button. Click it and select **Edit**. ![connections_area](/images/directorymanager/11.1/admincenter/workflow/connections_area.webp) - 3. Expand the **Manual** area and set up **Who can trigger the flow"** - 4. Expand the **Start and wait for an approval** area and set up new connection field. Click **Save**. - 5. Navigate back to **Edit** window. Expand the **Manual** area and copy the URL displayed for **HTTP - URL**. + 3. Expand the **Manual** area and set **Who can trigger the flow**. + 4. Expand the **Start and wait for an approval** area and set up a new connection field, signing in with your Microsoft account when prompted. Click **Save**. + 5. Navigate back to the **Edit** window. Expand the **Manual** area and copy the URL displayed for **HTTP URL**. 9. In Directory Manager, return to the workflow being linked to the flow, and click **Configure a Request URL** on the **Power Automate Settings** dialog box. -10. Enter the copied HTTP POST URL in the **Request URL** box. Then close dialog box. -11. Click **Update Workflow** on the **Edit Workflow** page to save the settings. -12. Click **Save** on the **Workflows** page. -13. Next, enable the linked flow in Power Automate. To do so: +10. Enter the copied HTTP URL in the **Request URL** box. +11. Close the **Power Automate Settings** dialog box. +12. Click **Update Workflow** on the **Edit Workflow** page to save the settings. +13. Click **Save** on the **Workflows** page. +14. Next, enable the linked flow in Power Automate. To do so: 1. In Power Automate, choose your environment and navigate to **My Flows**. This page displays the flow you created in Power Automate from the Directory Manager workflow. From b402385912148da902cd8d7b44d5a7dea1ad8f3f Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Tue, 9 Jun 2026 11:19:14 +0000 Subject: [PATCH 5/7] fix(vale): auto-fix style issues (Vale + Dale) --- .../11.1/admincenter/workflow/integrate.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/integrate.md index 3d42483852..59517f8aaf 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/integrate.md @@ -14,8 +14,8 @@ You can link an identity store in Directory Manager to Power Automate to achieve ## Trigger a Flow from Directory Manager -You can link a workflow in an identity store to a flow. Both system and user-defined workflows can -be linked to flows. +You can link a workflow in an identity store to a flow. You can link both system and user-defined +workflows to flows. - As a one-time process, connect your identity store to Microsoft Power Automate. See the Connect an Identity Store to Power Automate topic. @@ -25,9 +25,9 @@ be linked to flows. Consequently, when the identity store workflow triggers, the linked flow triggers automatically. :::note -When the flow is approved in Power Automate, the identity store workflow request is auto -approved. However, if the identity store workflow request is approved first, the flow wouldn't be -auto approved. +When you approve the flow in Power Automate, Directory Manager automatically approves the +identity store workflow request. However, if you approve the identity store workflow request +first, Power Automate does not automatically approve the flow. ::: @@ -111,7 +111,7 @@ triggers, the linked flow triggers automatically. 4. Expand the **Start and wait for an approval** area and set up a new connection field, signing in with your Microsoft account when prompted. Click **Save**. 5. Navigate back to the **Edit** window. Expand the **Manual** area and copy the URL displayed for **HTTP URL**. -9. In Directory Manager, return to the workflow being linked to the flow, and click +9. In Directory Manager, return to the workflow you are linking to the flow, and click **Configure a Request URL** on the **Power Automate Settings** dialog box. 10. Enter the copied HTTP URL in the **Request URL** box. 11. Close the **Power Automate Settings** dialog box. From f87197225f9bdc24cd01f2bfc1d7dea4a54c9230 Mon Sep 17 00:00:00 2001 From: "ivan.zamkovyi" Date: Fri, 3 Jul 2026 16:37:35 +0300 Subject: [PATCH 6/7] update pa documentation --- .../admincenter/workflow/advancedsettings.md | 2 +- .../11.1/admincenter/workflow/implement.md | 4 +- .../workflow/powerautomate/_category_.json | 10 ++ .../workflow/powerautomate/installproxy.md | 156 ++++++++++++++++++ .../workflow/{ => powerautomate}/integrate.md | 52 +++--- .../admincenter/workflow/pa_permissions.webp | Bin 22584 -> 0 bytes 6 files changed, 191 insertions(+), 33 deletions(-) create mode 100644 docs/directorymanager/11.1/admincenter/workflow/powerautomate/_category_.json create mode 100644 docs/directorymanager/11.1/admincenter/workflow/powerautomate/installproxy.md rename docs/directorymanager/11.1/admincenter/workflow/{ => powerautomate}/integrate.md (73%) delete mode 100644 static/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp diff --git a/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md b/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md index 1d14203ec6..27a8bca6ae 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md +++ b/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md @@ -92,4 +92,4 @@ example, you can delete the ‘denied’ requests that are old by 30 days or mor ## Integrate with Microsoft Power Automate You can also link your Power Automate flows to Directory Manager workflows. For details, see the -[Integrate with Power Automate](/docs/directorymanager/11.1/admincenter/workflow/integrate.md) topic. +[Integrate with Power Automate](/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md) topic. diff --git a/docs/directorymanager/11.1/admincenter/workflow/implement.md b/docs/directorymanager/11.1/admincenter/workflow/implement.md index 75d3ca1818..1713240e18 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/implement.md +++ b/docs/directorymanager/11.1/admincenter/workflow/implement.md @@ -211,8 +211,8 @@ approver acceleration, and link it to a Power Automate flow. update the required information. 6. To link this workflow to a Power Automate flow, click **Power Automate Settings** in the top right corner; the **Power Automate Settings** dialog box is displayed. Follow step - [6](/docs/directorymanager/11.1/admincenter/workflow/integrate.md) and onwards in the - [Link an Identity Store Workflow to a Flow](integrate.md#link-an-identity-store-workflow-to-a-flow) + [6](/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md) and onwards in the + [Link an Identity Store Workflow to a Flow](powerautomate/integrate.md#link-an-identity-store-workflow-to-a-flow) topic to complete the task. 7. After making the required changes, click **Update Workflow** on the **Edit Workflow** page to save the settings. diff --git a/docs/directorymanager/11.1/admincenter/workflow/powerautomate/_category_.json b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/_category_.json new file mode 100644 index 0000000000..f5ebca4cc0 --- /dev/null +++ b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/_category_.json @@ -0,0 +1,10 @@ +{ + "label": "Integrate with Power Automate", + "position": 40, + "collapsed": true, + "collapsible": true, + "link": { + "type": "doc", + "id": "integrate" + } +} \ No newline at end of file diff --git a/docs/directorymanager/11.1/admincenter/workflow/powerautomate/installproxy.md b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/installproxy.md new file mode 100644 index 0000000000..e97d23e504 --- /dev/null +++ b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/installproxy.md @@ -0,0 +1,156 @@ +--- +title: "Install Reverse Proxy for Power Automate" +description: "Install Reverse Proxy for Power Automate" +sidebar_position: 10 +--- + +# Power Automate Reverse Proxy — Installation Guide + +## Overview + +The **Power Automate Reverse Proxy** is a required component for the Netwrix Directory Manager (NDM) +integration with Microsoft Power Automate. When a Power Automate workflow needs to approve or deny a +directory request, it calls back into your NDM environment to deliver the decision. +Because Power Automate runs in Microsoft's cloud, your NDM DataService must be reachable over the public internet. + +The reverse proxy is a lightweight service you install on your NDM server. +It sits in front of the DataService and acts as a hardened entry point. + +## Prerequisites + +Before running the installer, ensure the following are in place: + +| Requirement | Details | +|-------------|---------| +| Administrator access | The installer must be run as Administrator | +| NDM DataService running | The proxy forwards to it; it must be reachable on the same machine or network | +| NDM Security Token Service (STS) running | Used for internal authentication | +| SQL Server access | The installer registers the proxy in the NDM database. Windows Authentication is recommended; SQL login is also supported | +| A publicly trusted TLS certificate | See **TLS Certificate Requirements** | +| An available public-facing port | A TCP port that is reachable from the internet and not used by another service | + +### TLS Certificate Requirements + +Power Automate runs in Microsoft's cloud and validates your proxy's TLS certificate against the **Microsoft Trusted Root Program**. +It silently rejects certificates issued by internal or private certificate authorities — you must obtain a certificate from a publicly trusted CA. + +The certificate must be issued for the **public DNS hostname** your proxy will be reachable at. +The installer derives this hostname automatically from the certificate's Subject Alternative Name (SAN) +and uses it for all bindings and URLs. + +The installer expects two PEM files: + +| File | Content | +|------|---------| +| Certificate file (`--cert-path`) | The leaf certificate, followed by any intermediate CA certificates (full-chain PEM) | +| Private key file (`--key-path`) | The RSA or EC private key corresponding to the certificate | + +## Installation + +### 1. Obtain the installer package + +Extract the archive — it contains the proxy binaries and `Imanami.PowerAutomateProxy.Installer.exe`. + +### 2. Run the installer + +Open **PowerShell 7 as Administrator** on the target server and run: + +```powershell +.\Imanami.PowerAutomateProxy.Installer.exe ` + --cert-path "C:\certs\fullchain.pem" ` + --key-path "C:\certs\privkey.pem" ` + --port 443 ` + --sql-server localhost +``` + +If Windows Authentication isn't available for the NDM database, add `--sql-user ` — the password will be prompted interactively. + +#### All parameters + +| Parameter | Required | Description | +|-----------|----------|-------------| +| `--cert-path` | Yes | Path to the full-chain PEM certificate file | +| `--key-path` | Yes | Path to the PEM private key file | +| `--port` | Yes | HTTPS port the proxy will listen on. Must be reachable from the internet | +| `--sql-server` | Yes | SQL Server hostname or instance (e.g. `localhost` or `SERVER\SQLEXPRESS`) | +| `--zip-path` | No | Path to the proxy zip archive. Defaults to `PowerAutomateProxy.zip` next to the installer | +| `--sql-database` | No | NDM database name. Defaults to `GroupID` | +| `--sql-user` | No | SQL login name. Omit to use Windows Authentication (recommended) | +| `--sql-trust-server-certificate` | No | Flag. Skip SQL Server TLS validation. Use only if SQL Server uses a self-signed certificate | +| `--sts-authority` | No | NDM STS base URL. Auto-discovered from the database when omitted | +| `--data-service-url` | No | NDM DataService base URL. Auto-discovered from the database when omitted | +| `--known-proxies` | No | Comma-separated IP addresses of load balancers in front of the proxy, if any (e.g. `10.0.0.1`) | +| `--known-networks` | No | Comma-separated trusted upstream CIDR ranges, if any (e.g. `10.0.0.0/8`) | + +:::note +The installer doesn't roll back on failure. If it stops midway, see [Manual cleanup](#manual-cleanup-after-a-failed-install) before retrying. +::: + +## Verification + +The installer runs tests automatically at the end of installation. If the tests pass, Power Automate Proxy is ready for use. + +## Reinstalling or upgrading + +Re-run the installer with the same parameters. It safely handles existing installations: + +- If the proxy is already registered in the NDM database, the installer reuses the existing registration. +- If the IIS site and app pool already exist, the installer preserves them and only updates the binaries. +- The installer always replaces the proxy binaries with the contents of the new zip archive. + +## Manual cleanup after a failed install + +If the installer stopped partway through, remove the components that were created before retrying: + +1. **Remove the HTTP.sys certificate binding** (PowerShell): + ```powershell + netsh http delete sslcert ipport=0.0.0.0: + ``` +2. **Remove the IIS site**: IIS Manager → Sites → right-click **PAProxy** → Remove. +3. **Remove the IIS application pool**: IIS Manager → Application Pools → right-click **DirectoryManager_PowerAutomateReverseProxy** → Remove. +4. **Remove the publish directory**: + ``` + C:\Program Files\Imanami\GroupID 11.0\PowerAutomateProxy\Web\PowerAutomateProxy + ``` +5. **Remove the firewall rule**: Windows Defender Firewall with Advanced Security → Inbound Rules → find `DirectoryManager-PowerAutomateReverseProxy-` → Delete. + +## Troubleshooting + +### Power Automate can't reach the proxy + +- Confirm the proxy port is open in both Windows Firewall and any network firewall or NAT rules between the internet and the server. +- Confirm the DNS record for your proxy hostname points to the server's public IP address. +- Test connectivity from an external machine: `Invoke-WebRequest https://:/health` + +### Power Automate returns a TLS certificate error + +- Confirm the certificate was issued by a publicly trusted CA (not an internal CA or self-signed). +- Confirm the certificate's hostname matches the DNS name Power Automate is calling. +- If using a CDN or reverse proxy in front (e.g. Cloudflare), ensure it is configured in **DNS-only** mode — proxied/orange-cloud mode changes the TLS certificate and breaks the trust chain. + +### `Certificate chain validation failed` during installation + +The installer validates the certificate chain before proceeding. Common causes: + +- The PEM file contains only the leaf certificate, not the full chain — use the full-chain file (e.g. `fullchain.pem` from Let's Encrypt, not `cert.pem`). +- The certificate was issued by an internal or private CA. Power Automate will also reject it — a publicly trusted certificate is required. + +### `STS token request failed: invalid_client` at runtime + +The proxy's `appsettings.json` has a missing or blank client ID. This typically happens when the proxy binaries were redeployed (e.g. during an upgrade) without re-running the installer. Always run `Imanami.PowerAutomateProxy.Installer.exe` after replacing the proxy zip — it updates `appsettings.json` in place. + +### IIS site fails to start (HTTP 503) + +- Check the `DirectoryManager_PowerAutomateReverseProxy` application pool is started in IIS Manager. +- Check that the `logs\` directory under the publish path exists and the app pool identity has write access to it. + +### STS or DataService URL auto-discovery failed + +The installer looks up the NDM service URLs from the database automatically. If your server hosts multiple NDM deployments or the URLs aren't registered, provide them explicitly: + +```powershell +.\Imanami.PowerAutomateProxy.Installer.exe ` + --sts-authority https://:/GroupIDSecurityService ` + --data-service-url https://:/GroupIDDataService ` + ... (other parameters) +``` \ No newline at end of file diff --git a/docs/directorymanager/11.1/admincenter/workflow/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md similarity index 73% rename from docs/directorymanager/11.1/admincenter/workflow/integrate.md rename to docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md index 59517f8aaf..60f206bac9 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md @@ -17,26 +17,28 @@ You can link an identity store in Directory Manager to Power Automate to achieve You can link a workflow in an identity store to a flow. You can link both system and user-defined workflows to flows. -- As a one-time process, connect your identity store to Microsoft Power Automate. See the Connect an - Identity Store to Power Automate topic. -- Link a workflow to a flow by providing the URL of that flow in the workflow .See the Link an - Identity Store Workflow to a Flow topic. +- As a one-time process, connect your identity store to Microsoft Power Automate. See the + [Connect an Identity Store to Power Automate](#connect-an-identity-store-to-power-automate) topic. +- Link a workflow to a flow by providing the URL of that flow in the workflow. See the + [Link an Identity Store Workflow to a Flow](#link-an-identity-store-workflow-to-a-flow) topic. Consequently, when the identity store workflow triggers, the linked flow triggers automatically. :::note When you approve the flow in Power Automate, Directory Manager automatically approves the identity store workflow request. However, if you approve the identity store workflow request -first, Power Automate does not automatically approve the flow. +first, Power Automate doesn't automatically approve the flow. ::: ### Before you begin -1. Check the SSL certificate for the Directory Manager server and ensure it is valid. If the certificate is invalid, replace it before proceeding. -2. Ensure the Directory Manager server is deployed on a machine that is exposed over the - Internet, as Power Automate needs to communicate with the Directory Manager server for processing - requests. Power Automate can't communicate with a server deployed on a machine behind NAT. +1. Check the SSL certificate for the Directory Manager server and ensure it is valid and issued by a + publicly trusted CA, as Power Automate runs in Microsoft's cloud and validates the proxy's TLS + certificate against the Microsoft Trusted Root Program. Power Automate silently rejects + certificates from internal or private CAs. +2. Ensure that Power Automate Reverse Proxy is deployed on the same machine as Directory Manager. If + not, [install Reverse Proxy](installproxy.md) before proceeding. ### Connect an Identity Store to Power Automate @@ -57,24 +59,14 @@ service and the Power Automate platform. - **Organization Code** - the unique name for the environment that stores your flows in Power Automate (the segment before the first period; for example, myorg in myorg.crm.dynamics.com). - - **Region** - the location of your environment. + - **Region** - the location of your environment (the segment before the second period; + for example, crm in myorg.crm.dynamics.com). - **Tenant ID** - the tenant ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - **Client ID** - the application ID assigned to the Directory Manager application when you registered it in Microsoft Entra Admin Center. - **Client Secret** - the client secret value to the Directory Manager application when you - registered it in Microsoft Entra Admin Center. - - **Proxy Callback URL** - the URL of the Reverse Proxy. Requests from Power Automate will communicate - with the Reverse Proxy which will redirect request to Data service endpoint. The URL is as: - `https://:` For example: https://powerautomate-proxy:5555 - - :::note - The Directory Manager application in Microsoft Entra Admin Center must have the following - permissions for Power Automate: - - ![pa_permissions](/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp) - ::: - + registered it in Microsoft Entra Admin Center. 7. Click **Save** on the **Advanced Workflow Settings** page. @@ -98,11 +90,11 @@ triggers, the linked flow triggers automatically. ![pa_template_message](/images/directorymanager/11.1/admincenter/workflow/pa_template_message.webp) -8. The next step is to copy the flow URL from Power Automate and provide it here. To copy the URL, +7. The next step is to copy the flow URL from Power Automate and provide it here. To copy the URL, do the following: 1. Launch Power Automate, choose your environment, and navigate to **My Flows**. This page displays the - flow you created in Power Automate from the Directory Manager workflow. + flow you created in Power Automate from the Directory Manager workflow. 2. Hover the mouse over the flow to display the ellipsis button. Click it and select **Edit**. ![connections_area](/images/directorymanager/11.1/admincenter/workflow/connections_area.webp) @@ -111,13 +103,13 @@ triggers, the linked flow triggers automatically. 4. Expand the **Start and wait for an approval** area and set up a new connection field, signing in with your Microsoft account when prompted. Click **Save**. 5. Navigate back to the **Edit** window. Expand the **Manual** area and copy the URL displayed for **HTTP URL**. -9. In Directory Manager, return to the workflow you are linking to the flow, and click +8. In Directory Manager, return to the workflow you are linking to the flow, and click **Configure a Request URL** on the **Power Automate Settings** dialog box. -10. Enter the copied HTTP URL in the **Request URL** box. -11. Close the **Power Automate Settings** dialog box. -12. Click **Update Workflow** on the **Edit Workflow** page to save the settings. -13. Click **Save** on the **Workflows** page. -14. Next, enable the linked flow in Power Automate. To do so: +9. Enter the copied HTTP URL in the **Request URL** box. +10. Close the **Power Automate Settings** dialog box. +11. Click **Update Workflow** on the **Edit Workflow** page to save the settings. +12. Click **Save** on the **Workflows** page. +13. Next, enable the linked flow in Power Automate. To do so: 1. In Power Automate, choose your environment and navigate to **My Flows**. This page displays the flow you created in Power Automate from the Directory Manager workflow. diff --git a/static/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp b/static/images/directorymanager/11.1/admincenter/workflow/pa_permissions.webp deleted file mode 100644 index 8fd1d048e9734ae9aaa1d5b33f8d47dd51deb389..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 22584 zcmZs=W0WpDurAoPZQI7~-fbJZZQHhO+qP}nwr#uL`Odk2?wXlDNvc*-N~PASCrXlH zVod5lKx(2w3aScRL}dT1>*s)SfN3y6uYmZd(ZYp^3y4v0!Hls$f*ad>`D7lSr|W)# z-fs`KIX83&ykcMGQuy{RICmIHa@dcdXZLddwgUd%5z512>cNhS0TMv7&d*=VYQ*JU;?QBo%^c$;eXe=a?9XH1;~DD|3-YlzJkBk zJs_Uyt@!Ej7yPbxh5wFh3T6T-e_K9c?!hl0hx>{E>OWDxCtqFtE)8CV>2I*|pzy-yEQ@Z5ITJjrJ*B^>dD!lFFc+2_8#nf3 z0_*ZAlF89g4Ndy{l~gI;pT&x}*yc(tJ4fPonn>L}v|+cM#{ZEyo%oTc$0B_y={@nk zYPu}k!AJR41bcY3SLW~naX@Q(i$$^5XnGuU-;5%jo8hQ$lX9xxioiRA8^XZTNl_P> zuoL74(q$ZgZkRh31LfKkavQ+$O4^(r<C=SKLABdNm%Q411nZui4Okaz$nKKf@A%_0eKok5in(2WhnfrG_ z&6ePw74wgEj2>{J({bR+0Zt6nl+hhEe)?Fsf8+7uFV~ zUe7`;o{P*uL=2w)wf4mht<;aIN-}JwQ0Wl@`DQat3Li4j$py8T#ZqWLeP~--ub>Ta zN#~G$z21*?h@06UXE^fp-e|N#3i=7Dh&v8N*rs+ms#_0~Sh-S`2VzrxFKoB6jUw2h5`0^1Sz~T(soj(@*zzvi*S$%GP{At9XFAU?!wP z2$HAV|467unj%l#{}hh|$Ajj+r8KdHR&KjtUGyIiypWy79@ z0O8&ARZ-(w`KuZ~c?ci=v2S?S#2&OXlhb5Brsu0UYGtf72TB{VAcA@cf~5c3C<8MW zLv8aR5zvo7(PyC;$pN3vC4O?}7cRpJr z(ip2dZ&uAfzksj8ejsuxP&azw@vVpXT*1GJ!PYBzIH#31w zNJd%srUICQ*P|b>=MgOMmLidBS&cJ$QO+0HM6)--v6Jn%XBIIwkZ9ehT(`v&Fa<>d zn0|$V4ms9%Ion|)l|c*j5m3w@GQQVuEpf2o+C>0__~GKE-V@As(>w&*!(_e2Di@*Q zk>#Lfb=&AHd#qxAkQwo?KJd4sGm8OF+73a44GBCvXmYsRitfLZu-EPFrLw4|Xq!PH zfqjMuzaE|Qw_2>DrYxz{MqVeDhPhG|qk(JigTJ;Ytf(j8WHF5I>sQKOu26@7= z=JiSFE`)vH7aOS>SP%iv>U!GscDRFz3SZG>vJQK2lH&2HURk%C5o7?-^l|6OEU z;#cBrNt)Cjy(~-tSVy$(cUU#=u9k30_wS{66CSeGeuK8Nw`y5Pc)kJn8V`KSU52Za zVuNTw-$%sngCCbM!l$fG{lS<&v3fKxbf7`rVG-zlu+=ldllC(Be#Z-U-p|jY@`Jri zIFU(}Wb&c5Iw^3&HLq5ZVLi=jIod=ltL_rp;r|fkEfQe@ZM;wq{!Jt3#YGr(Yb*uX zjC~0Z@x~OFP;-7FN9en0-xLyLm_L)gOEN+8U_sIkemOAi-%Ez|KPzwWd(1m3|J}!% zz$p4RhU>ZhQE>2>vfBnO<{_2v!?%Zq2HUf8z~;HDrV@7!oRex=|LtT} zHNMJb9chtXfI0}-PV8&ipxL-cUY4Rz^Qo^oL?#V_z`nNQ+~@Ss>36T;4}tW_l{`k?X$KRMg^?1&y%bSk70XZ_1O7-Ld zh?cTzZW>ixPkaxj8%8_K=tGESTI#E&e!otkE-xiUz;a|1U>KYA)v_9@THC~vS5O~U z$G67gpy~T#{DWBj@cTep2@l>HzbkBi_x(7xy&yYCpyEI)HQN4Zjz%}ari z?c_+3kOyH#_0UvE(;Q~uxn_7qi9Gc21%No~OI<`Fjqa}71p4_r!Sb>b>6Z0wTD<#c z-^v2e!0j7K^7Rsh0(FY8AR2*>e~_bsq#DCwIl5eNjqE`w-)Gx;_GgB0m=+bj-huu? zm+5E~HKhGmjl5ch{NPWNzcWm^8G(FDuiEeXwvtsZ7m1BDnulVcGT`dTCm-7X+ zc7jwqu^&xeA;LY}sfq3%w87)B&Xa?I9tI*@GSyNq|FK(0HIa5lRnW6E@^wLoEJg6^ zR7`5iESh-d2$7oLRI=B(V~6xDS+VZ>?X@vnZ#uD1HO;xQf&dBJn{rBhc{q+h6i(uM zasrmRLC1AO#iS<4K3uZuE&jtn&kfR`_UWf7@)LvAR9`;Xd$SfFft`9{-vO5r?2x~k zFJk%a`6WBu+f?AxI@J!FQJx<{%EnqTFV9-<5`|xXl#13y+O8OCj@oEP>L`8oqDy3% zC)^ijvX!^X{PNO{-Y#bJSI!;{s5samJ*oc`pRfma{a8++iMBFL74(aH9I)xuWaIk< ze7~lDU={RT=6cTkwUohBgKo9gqtD9w2YPUXjFKFT492|`&!%}j*5do zjUKI5fr`h>3^U-1U;W%n+d8YOofA5OHGrJP+XBMI17Zz*0}UxdqjS4zu6jn+LW2jn zJIY(3@5XYYj~>zJH-QGp=at_hY=XjIec|f6<|ckUd}dpE4A$2e*{a| z*m$zFXwoXSF+qSW%$(7$D}rch<>OO$;NZ~W>;v5Ku0dp`H%!w4DE#&D%|9YEcm!eDxaTj3ME_crT4Be*Em#57AA28nTV4c3?~$C3 zYUHzr+_tx)=@UVB&;_yzh0R}Rj$fM?!S zz^61qbjUE0DtjQU*x$8l3Wq%=SPW;Ij$}Q6=&J0$Lsw^%uCLxm_&LH;WyE|Gb~&~q zr5U%7J^i4&xMh1lGQRF1{PB&|ZmDu2Dd;eI+Ka#xb3PY<@3rLSC-o5M3iwyx3n_DIy5B4{+&i7URM}>JBHu?d5_R!~Qj!tE`}PV`v96?=gZFrWT4#6boQs_| zJJqIiLFtIIzJIoOZR%SpRu7Ih6$M#DFE_?5pc+z|#pQq|_qow>h6qe_PA4IUZ5_gr z!#vA`fZrh5V=XR+uC)R)b`~$O*Y6F`_0 zhkP&&JY}4&$t{D1SK>Cb)|Eh%*BJAue%VQ}qwIj(x7vdRLCj9Q zp^c|Y*w}^!>qJkrY3rUGdG}U!WIMIAk;fx?c8i4Xg9-WR4~A^qj~WT>v4ks_{3^Gb zE3THfo$2C+PxPVZ=osr|Q=&(CkhNZAF1Qr*Ms~$tA+syRI~FLmuDbeH5%)s2O)jKs z<%8q;DoI^St=N1d%zYWQuXLKhEYV+A(P!s9OG=0cAhj3BJk`g(5hAdZ7K zt@KQ=3voG4o4}SQpuu!=U%-;&Xb+bWGy-E&tSMQu5>*8jh+vXiaa+cH zY3zQqGj4ccjMsJi@l2d(jf`x`=jKu>B_VD2@gEZstUX!P*CrKt(z`YyH95yEpz0oV zWO_XJj7{HjPp$Mkj(SDm@Vbl8ZM44LTIhbaQ@d!kIT2K(;(#6Y8jDjnXmFS9w?!co zUel#G@!TEi{<%9>?_u8?a@kG@fcPeYjHYNisJpw4={};J_ZQ~OMSB>AyA0J z@?Mb^7T&j-UeiJ6W_cSSqQ67ei(XnQ%l5_7yi@3YZA)JP(mSr4Dn?NUkIs!LnFO}L zkO&BZ4hRTnjHpMW#NQPoQ8Ke}`E>VKzspn`tbWoTcZc+9GpU;)fLl7|T}&<&P{&{ZO@wy%VJ99X!5@(0B=X_qz;* zbmxrjxouz-!x57&UYG8|92gbPd|ko=2Eu6^WY*@s{;ep4sw-A1=V>Bd(ov8Vbo zl8cOLz*$lwv6<$7!vr|Q&lG>!Y#hPJbPCSTIJT$e8v%9%RX$a6R{zhEq@&H=1r=q?GV3L9sI5H@QO|l_gcuiX?Z9T=(9|b`1rli zYUGuOg%hh3J!;amcMFrTH}WS7W^x!1ln!cjnaiwmh$vaW-n@G({5qu{W>BC@G!$RE z&yMahqDyM37hey@$$TwhoDjL_EQZ>`UWSGuJa{xB;d-m#kd9x_V5LM!-M?z6u(c0k~hq;*;umS(|?9OH|$~|Cq92FFOqY2>J8`ZsFx32SWE55Xlm%)hGvVcAm&sbi3pJ*zwXGUI07Y2QA zSRmjHlRyMS|NrU_5D*N!S?w5hG)$~~-8tHT!$Zx{)pzatukkqK(smy`{m-w^{&QYv z6T89t&*|+Zp#RN(QIVY>;h#2hzzhlGJefn<^AX+)3gZ5nyJ1FlkFEcbo^n>UNmq+x zWrI3_ChI>XnT{eDgxf#vi_!hsEzsI&32-!Ws;A*@el8YnJD$fo^$QE=fBVin2W-_# zyONE}^ltH!nGG2*flN@!a4i^eO2ZL^DcQlds_;4^dVV1N_Ed_&%fwsI`cn<{w1W@( z+hRAT`qs@<-ksmnFSmRj7)>^>d>%w;AaxrQ7X}pH!q8U1tw|K!?xD@)S&2p(jUzpk zZJcp{Egk!vA;3!&yqBXwmv{|PqZ+H%7uwha9TJF@vP+jLaN)<>UHN{KLuDkYnINU* z@FRAk@V(vGA_x%Q&!JB)4#Hh(JoJ2k&3ipN2nI2>IFL67mY(@hhrVt9Ww(@HRC-gR zXQ(4BQv~0Ax)9bb^CW{XuzcLy@8a@T3c>?>LxuG>tDJ6z-+G)l^C8R?oBE3}HJug6 zUFmT?NQ#l3lj;x#kz;>8rB&Wlg*0kd84%WjiQSlERIBh2ZzrI@$#m3`@2~ulr7MoA z^ku67hIFa}_XGvvwo|}Byq!V(*c(WS8SA(nqJGlw0*~CQ`QOl^WTQ>6X%7}MLhQx> zDcCHP#w?+<>y}yOC-_T!uaL@`3j})NOe4b?UL|n@GOB-5-Pz;$qjzS|wlAt*(d%2b zjfIzhQK0V3zRd(OGth8FeGxH28K83D$RJR^ozVQC`S6rm;pwu^gbdkow8;05xz2dT zUn>k1PezefYM5Q`pJb1l4jF>;FGb=Gb?Q5w$neVV0QaFyf99Z6#@u3+%z!n%Qf5~k zXRmZ|`fl@o5P{%GsrJV08kO`|S4l6MagBq!6lE<}Tug`@89}J$PtX)W4W1aO1sqR* z#6;jCJ6WbrfiITdi|sP8$>Yu?Rv@LPmsWoR!aSgL@yfCdfd_X$b}H(gD|7X7&JzOu z?JuDsqp*X(UPGUud-@=_eV2+1N$j^hGmh%0K?|ZLWwgii4d|o&a`Oi!o^h)HU!U_i zNn6?SOh)I_C-teIp$sDP8b#Cwj|G(*PqzC$CBtNd6wUOnEOYN~v3(HTxi_nz zm6|3J`*t6hwF(6qUKZ7?fx-}fuEBxsYLm_r&E+pNDaCx_i3 zDo&8J0B(cYZoo%EM(VQIw7o5qaF_85|6z!rSMMAB{;?PP7Z?Gw=ac)*|0^a&aT-%5 z4XYmYwrX;md1W%hKW*?8+rWh+dEUS!kyVcs|m>kDdlS#a6)?L58EO&^M`WVe#N1-3%=5lK@tV9AQ)pUeMZBb};K}p9w)8 zknHY1q+J<#sNF3|S~%aEhq0_iK1R`cyjHJx_dSm5yCP+eQsr#R8g+)Ur!`**9a5Y! z%Z%g^KaU1ScDE^)BiTTdcN>4$MfvxNUayN1V1LI3nhst3$DkG+@n;Bcm1D@Zn6by0E#d*vl0AOxbbJrRF$BM^j8AjO?LC9! zr6-1Y{5K!}>-sa>)R?bX8H%#pzup86>@(-NXlJh2UAtap!;%C2_vXL$C0cb11l?~6 zzPgaqTRA} z>jlFl$sh5}8ozB4v8RgHGV}nN;tgf(y6>;IrrKuwqeX4-D{C76M+?*Iw@Or)R}1N` z$s3epl)tmQhQvbuLJr5kLaz6;R6?f1v1d!Y4Ej|9Q5}7{I?6l^gZ)~x(JqaC;`CSk zq;X;DbRFRebOkDSE;p8rF2w^dS@D?6k=!j6QpQ;@@a_TDW>>G4+RERAfCt$5dUEh2 z_V_HYL=!L-J7r)e;8?TN+E8b)4zFya@bf&C>mE@C3k|917imcC!_(O|skUU^bWZ-w zBG~b_jTf$kXhGhZ<0ZYo-31u>A_Um}MM8iJrNVrY=Vxpxab4N-sKk;+Gcl8n)#|NC zbNtyF|1gV#5Zh<)5EMV}XYDnziR2?j-~p+g-aGU8wUy~IDOI`cfT_%dNsHSTL*Pl; z;&zC~+jn9YP1Q4L#KJH`!Da~ROrV(;jQj>-7$4)(^4f72f8ap7#~Xatw0UgkUtPH z;WgJOeZAOuS>f&Twih@{r3$1B5ND18zM?7(0tSm&0gPO(U}5bAsj!ed^(DNtZw0qTvHQ7Hw5;$@ zezb%`qVu%}K7^{aI-&KZY!af48H@QFpA&v}xTZ}usO|BA%0EXVeMH#l9F??$*aZ!X zI{Mrd+ET;|Pr|V7;KG$)pD>a`my=v3UT>^Qw!-W!*2WVOt@-1u^>-X3zWl2@lm+pX z*fJPn<5~VFst|k9xc_wqq7zP~Qm{cu*_6tgMnPkJf+Ljn+f;n(Mk&7jx}no@4CLhX zN`8Ovz5aHCb~!#G6O0Tuu{YKHg5m6(KinXyFT2j?i;dnj^9^ItdH;)Y`QA=pQ=+t?)LMu*SvP<&3l=7IWNDcZo`EYLfsu{lcSb zGF{O)x;i_-R^2`0K(yQ=98kQ?w~U8TreUBqw1hP9lzt?VuDkYFV$HE4Mq8amfQx(n zn7*T8b%eY#^V>^h71RyKE5zF{b}!mBxt9=9nbSa&OF=}#C;mBBwNSVeYhC>b36v_~ z+mJ|W)&!r-C0gkaMeE0w0;fe`8-v(r9DFlP^~SSG`N%MObbERYm|*ujSE1V|V4^mq z^+C}r3Eu+Ft{=1*-(#Eq^{9MX|2sr3AO?{hUC&V4lG!Cfiq3f~lY|d7NNVPEp%ML^ zqGk}=sq4h!XJ3cJ9`>gOg-fgxQM|~H!BmP{?Q~FuG#@5Zndtx?S&b#J56MKfW{gKz z?wFx^=)PsGQ0I);LZ^KA1-bQEkC4vXd@gn?f9F&vs_%@+FLc~a)793r>(f*;g^Z>- z-3nACvFp^7Ij8rykJ}zRpr>F1H%%mQ_Ulrq3P!U+-sAV#yGf%)2QIJTIBmw@w!U#V zypNZG_xO)((XkORnTh7#St37$ptB>!#)E5g?9t=nD0hT0uBGaUgMMktSBVgt2C=H6 zm^X4I+nTOD(nkA%WPtR8*9h?xQvU|L2K0Ee>ddOhNZFfK(UC{WrwZ_H&jeA>dP9}k zJ^`+F4r4EqSs!dDGo>yk*N)~Y<3u?Yx{AR#sQqO%Ngh?KKpp6D)xxR~q~Cq5E-CmC zC@z{G{`0MiFJ>H1tAnX^=tr`b?6WnE_}?h@%|k<~17JO^zxmDN05URPiqc3#+mrpwe^Von4xz#wLZNPOPMch=yFSt%dBS5+ubz4$5^(ZN~7g zC_n^Vy*`7Zn1-^ixw(Wi>s}2BV7+@@^;wL?Z-i=wu?uNqMMYRAeD0GSWU(?AlgJB zhV1*%(^Nwi<+-#cGro zgXPY~>rh(hXd6touwWZ+S@Wn9;6>OBAm#6q_J$lCkQuBbx0L{&_glZwXW;GFFWz(* z8*mmpOU^B8kPt)amVh_R%Qs?+3!ZszQs|Yyt=|sY zn;e3!@6X&w-9{B3r5hn%ST`3+h0Gidp|<9b61=Ff4ERf_=6ytB-Av-^Z57hNw-q=L}`;ZGYAzgFL3GHkO z&p`KIQ1qxCc0b^pHS)&!Dm7sDxH6pyw;>ay?PmG55iiOL53nPq2tZQD@C7)e=a`yE zY}q0A=+#j90ki8nQY5jS1g^y&5Hs4s5{0TyFJaTa&&$`z_3CzYPPRSiLEq^6v(z`L zUcsL_v?7`7s2`G$sG1e(2F?D6dJNNi>*$b95Nbia@YU#j9I@3(&qGXm&TLo5=~G?L zWvvt<06z-;_g8oK8*$LD!yvNU#<{`q{)`%+s##;cZ*E>)zg0_V*E%T?bnB<0>h^r1 zLcMk`g#nQG-nL^&rZk2oCr#JyA@4c_iP?OtZ($xC6jxSmeucNv2fqFs=p-BP zTlZbNKTeHk_tN+^)d2%iAwJ1VN{lNy>&VQ|*Ygd^#B8zaD`UwZ#uF$kl>y08WCVby zg{H#*=ZFLkq$vN~>B$&%RMJ1D_TE>6YBqGaEL<40EpwDK9&pDxP~S^C-D)NF^Z*TT zp{`>3>ux6W zC@38b>)pnLq2SGOpyX|L%jFR@&LJ*DXLWWVv?&_+f`iDQ(kX8D*F9Tl zsZ^|f^e~H3YNGo>Q0=*7x<117wu>4cBq~8Hro6tpmKq#Sv{N~&2gd*$5UL5ZTjT({ zHtO1BSJ%Af718&Z4w9{ejc0{PdD9$2g3jAUsc9A{3v2H_$-z*xf#=^y12ZffHD3KK z5Rzx`Iq-vqLDmpwL{eNKcEEzg^gL1Ls@2D_rC|}&I18F*O`30flDN2c2c<)xYyb=` zN#zigo^z6G`0j?SF8foektqE38vRyxBg!o(E{OuN3(#8(qh1l>S#?XSX zB6(DqkG67sSoXxRJYc=Jx3cq!t}G_4HkqG?e&rhI9A;)*lx1hOpLEHR%Cs?#m$0u_ zp_SnAXQ|vvh0#(r5-${sgo4SbM>JUkE0GtzD-zf95~FnE@|%(BvnzC>(N!ZIl>wsi zh5%t^%lZvIWpkU+7(G>NMvp)<2nM;Mn;81St?!SPL5gW`kwTG`=jETO7Bm;D8B_B$PbS>%A#Y9;^X!8EZ8qWx%NycSm+YVc1R;_dH29RM z|2D)}RGWAat8jaoX=R^THsXfl=fK6I^njpvhJiJwLJBd#fQ*pmy)L0gZmn8{P#Ytbhp#ao5;i+-+M0 z^jSGall@UT5Fba*g;B71+gM&@DwH*#*jXyc7%nQ^tt(20lq5@1bFNhUa-~y^a`{1@ zsG|j1Tp^pFa;=sjkq@o*1q^ixRhsm;tZWJXHuG2n;krwtP%71;?i`!^s3Ky&Wur_q z;^u_;8%SGnsRRFr0jqutvwXUnNJrIZAk2kwp?d0C*>q?(Unn3(cYj(jPb!iMZKM|_ zm)#^9+1P)ei@R;o7BbX+C@&$M|{G>}BxJPQc5?o$;?3xBQsCVqBDAZQ!xE@5Ob?KO!xnoXZ;?Ocu!D zv1(%=v_q%r1y`>1do>A;`Tg$8$`vKPw4iK~g?gu{(5lGd0mguw=}q7Y$07nDHr0_&1s0WLs}Bd^=R3Ut>o}T1o!2zKBZ6>P?%KB zkf6IA#c5w?ZS<~K3?+bHDW&21*2qKv%fvf@VvgV^Zsop30ow4~?`9bv==x%dw(gD^ zQBF@XnUzCl0lo|SASOhiWBK&D&%FMkLa%W<_XPp?@qhz!P;F0DAcN~9P@jfyW^hG$T=76PAdsmZgt zf$Yr{*{clm%eO??{h}tQ#_8TH>ay701jMdiB)}D<36`dCcs$_1D;{?BT(lh{C3<&b z7|5jB#!O^k+jJ#AH+xb&-_zC9A@=Q!MZ zL}6(*NPU!h&o-OIjf@*{oNbN12|^(CV_RfojmGIGTHxbw&_`(b%}o`oQuQl62j}M? zs?$g&B-7+>GP&mAe2#YuuqJw`PtaPJnDye!G@+#xFJ}#k1%{!{YO8d0hC0@E*)oQ9 z)wZtOLqD!BODy3So3tdF&4H^^&r?B*(`cpsYX4ABVtL-*)anrV1h9PsbMVOH(28K- zgzP3m52rO$gj2N$DX?pb=1QWU0(4of%^uJFRoWacu{P6nR>@8>=Q{ri$~vDjMFc5 zi#jt{@kJ|X`6^nOOof>#G&S5FNj=Q_$v(C(0A!=b-jj^QsP2j^LB31jpqn%+JYT5^ z=NTmp8F4!3`eK8+NlcJi%x-NA1upEjiQO;%ACCC!&^Nfg4=NN&6Q)F4cuq z*fd$E1hPZ{Di2Fu?Tfa<}%GLf~rd3p90)lKFl=1C+?Z5h+>K0-zqF+fh`w&mf|^j^ZDynp$#Q zVAMMkw{BPWzHU8>h13j0TjoYnf&O!me2R+o2@su;Y=2h=EFM-K#KzNo0V&PGc)-7* zbFndo!KbIq-w#dquV*fa136xW0NjToOzv7NP*g>9%Vr`C!o_BDirXCq9}M@C_!jLb zw8#k@+ftj8cqk4}1Q#dQf{Zu!Vv=mq>tdq> z@`iHWJcUGMIu<~JOmi}$b6}zFpd8np)D@K7YkESQ+BwNK!p$Hje1C{y z>$@UKIh76VqDG;g$b&7%oc^SJEccZ?7mH1HMfC(y;CRT=lk(!v4?Y7yMyS06pkTkb zP~qBGe;H%+c$>Pf7Zm6i@F5-!$39tJOFlK6_=g_$;=xALQHS>6b4W2}vxV|9ZI#S; zz-ZJJf=RcIIM%XBPnj#$Av|b0)Oz6vU1z>3L2{}M1SyxqP0f0)huXKb3O;TIPZm9p zqq<1E0^$5cJlwX2VCu4SBd~XlE%Z2;N55_H6}0WX;k?J1eb~zE+m#+`lQ*YF4Bop6k3+>Oad>c-fVXwDMDysvcy`kxp z;^P3*Y z&~ZJTPWBgtZ8Zvr+m9c2;a|}`xf-K)tO$$J_h4Qf(tiYoj{W$GG}0tDJ8F0vk$*!k zizPrQnleb$Lc?x+=lhG>4#sImO$a|AWi1)Kt=o?%bqCs{SdD=~d#D}eS`Xj}6sN5{ z8J_a5mPP(CoIaq_C#nleD0Rh@l@I6;!2{`YmP^Hc)x8##U=sW zlXd7UJLErUR3Ednqf<AE+3KOQ0lxdXi5v?0e8=l`~IUZe_Tuwuqo)$o+@vK-}??QJ2vB z3C+T;DF~*pF2`;5zSc&9n)b_Xv`gPCSmZ2kGo<&>5wTD-`aV8I6F}joa4)Ij7CQbw zW!dcYmoNgR^mpAJC%poA2(RZDZb@FKmaK-9fMBwY>)Tnh6!-e_ozkq*E5mRNb$u#HWDps^udRq<*Ki<`>7%kvK}O-aq?T8QH~D_CUdgC@h-0xtJFs@w^JdCy z4H)63eV0;0o-mVy@}`*x%XK0lw=Vq$C8#yELf-j+%T&77G16}|%;1vudmUlcySm>lKat?N%exIImqXsQz*B&^M7Pq8RI^m}f7=%GQdqmn) zK}ktbUNrgsBu`ed;rx?KBSop*)I?HN( z2D!?9q$Tv`_@b-_@>Uxy>im^#T{gSKIg zGInB%9cfS4Q)j~{Wb<$ZK0=7Ra>Z)LhAC+1qsz2&< zj)9hgNzwPktKT2NPttuJ`azwBShedrg&(QjSkk_J^qnOd6gVtm#^57NX3#IfhW#qa z$&$2&3=j%@^WgiAu%Kv zvhBmhdR6#J&P#}B`71eBCJxOv+wt{g8G)60;~+R>lz3o)nM97N8ocA#sj39G43%xu zslai)`eRyX?nV&i6J`0_Xy#8FNS5HcjsMc1?=-fW4l8+G&y7S11r<^vu!A8`h&O!k zA$Ao(G@naV+Wtg$PeFE!$n{EvzwP;d@s3_y3u=rl`j%o@_MOScui+jQX`ZPGL#Ug$X2d> z1@u3k`#XKL87+62$*7!}{xSLX_Q!{_HuEAVcB@kN8G^NsHh8!8ykxZ-82&Zm$p zKK|oz&L}ho7*%y-6muR?3Hly3?jz<{|m$e0s>D# z4jh#LyOR{Y``vy?-J~h;F9#N^6!{|20yuka>LU^K@M28ytSl(HReZijUQ=Gs;! zZJP{lb@bQ`>gN6l!97T(*p1S z0bya_N_j;2iC4!1gZga*Y#Z(pCbk+TKj5M=zinVv(o+a z#sFbAOq9T(%D&p|eH{Yg6Bg(PsZs1DMIAp*(keMN zuR>~23qj^=S(3HbUoGOe@z!3Qd5w1R7-F6V#6Vlb`^-0XoZXIE^^JKFnmCzT=Z3nN zb5s`2E-JHOZ)=&{L=D8&UgrZx{_A-L>p0%|*V0i1oU-)LwG_0H3_dL0hB%Gi>|vZ& zp~t2FPjDPjozQCQA6}^PkaGD{nQ5NP!pQhwgsfxcPT3)Xf*{rStR0ujWms#Zh3s}~ z)j=GaSM7|@TRgA&Y(yT1b!B?|lZ8L7pO^ybT_c!#oxbVkFAUy6tlJGyEE(OX&(Z&q zOMf_UbEY3C&zbp+kEY;;R(w*-Xzi4TFTakMQ%Xc)ipa%l{cavs`f$L%AKIMX>XT^a zjE(rg5z-bH6b}ENcFyW63c%6UDBTT1gF}aOcgKLlfI~_n-O`QpDBU0^J;(sk9U>zj zAPo`&5;BBzGjM!7_deav+OmT4+^`)?@PNDP@pCp$jn zJoStI(`e%$*kKMUvhvr&P-4GYHQbiqkc5R?oRFh z^QAoNT=Q_@eG9<#8;2mV(sDFI16}RfzjPZ^Ug!_%B0A8-p_4#v>zWremR9Mx#y`Ov zDc@K25*U`dYW#dW@W~U_#w~-($pD^G)Lz&{d7u9fjnPDtVpmWk*aLA&TO~O+^w7ru zT&~AaIVD@TiMr48SM2Fi&er-Vu6!9NYtngosOMabqH%8{kdu&Ev_UxLBACd}q~JDx z$PcQ<>>%ot3V{8MvrK+r)lT;IgtD{CDI5j5Xfbt0po9ct{jIt9V4;FP>~dSVaxbV(6RsrO|f#L(~5RDa}cz=YM`>>5Ibr z=Vvsvc#|AM(C39x7d?wQosh@@w^anARf1W(*ZyO<4HHnDJaT?5kl-(t9*y*YR%`=! z{1Ys}rP_4K@`v&<9??$EfF`lqJ(H2Y4c^%s1---4kB5p^X9=PUnR)GIxmGEXj+ky- zdne7#k;Xf&WCgC-vmEAOLdD}Emw~vrd>nXb*xb~9HvO*-PudeRI^9%h+Jg;w{}(C$ zCnKezXjNLJ5F=;;KjX-qmVPj|T>;*O5NeFqIzi2|V(VVUR8RCJ?pLlalOV1d^99E! zOfM+-tTQ}%ydwN`cxiqrPJb0dnroDemjW_-NK!alBgedx7ry_e=J>67`N6vy7R27Ip2?$2G$^kbnqH+ehZdn)%>!N`It)~Mc>gxaPAqTb6cvM&W!+|Tf+`fX;#4L-gD zJI0)xJ|+v<*qjUN?iA7!j>KU(=%;gI4VwrwAR5_JQAFN@0^f%(haNm+{qTdF>@SO& z1@pQKs2*&i&?*N83P@ud3T2(?6~TdHVwt+N{$_;hn3O~1-R@~{4n>CQ^3*n~aM=?7 zgYLqiKV{r${LeK))FJVfr0kyY`5ji(DdsaQ&Ccg%0^lJ9qOgypZrpzkT&ezdfQ7xnH(>R;3Yv6Pw@nB{&E?lWyujYeH zS3`@rL6u*vZI?gPY;$?+9i-YS?`?hE{X;%D^IDru<$*8ivA;g8BE*`LbtDdl{p?89 zFS>COV(UWO9r(I<1vY~$te0zczqX05`zn>;LX;#yH;3@d<`GIp_pZF^_KN~N*{Hdh z{T!Z1l1__>^S{i7 zHRy^o-a|lw31Xg!=w=h4Fpy8Cws{kCdJ95gglsuw)9auu)OIwRsWWa|V5~{yIvXGy zF)O>9Xkw|X{8_*XAj(S7y-vP+pxBj+3Z~i8CEi${d_F&6Yyam`O~qefPdls zk+JN;m|$t`&K72f#m_zO9g-Bc4AE%urMHCM9EJ8%-~zmLhMM`Pd;?Ve-|7~tgUQ}a zZH9Tak>}=qVtCJ63Lb*#^Qs3$h~k)Q9g*eiQ&Y(2+AB7hHY&;AVGX0StL&?vBwHu#AqFtgD0i%e;^tO4H|WNrD1w{`nIU7F}B&<;eFCjQBcHMXQF2f z#~;Ex`zQv6>LB^6?q3<#usaznH z*i8bzr6dZOPytnE;KH8QVN0#tv4Ulaxvt zeQ;y%gN_pt85P!EMD_&q_)`oRr)(8S;FauW%K5?Up(688c)))G)U4y1%z$* zXzCWH`ltYZwyKuWEj;|qSrKHRN)+*cLDYla!o&*W$lkx2cHf-8vgJitJ!01fGWrBC zInnjiKcq+bLub_=ErM70+R4RC|1>@$8PJzVhA~xsw0HCq#_eYnEx5vF6t6#iqdgS` z9G|_BY>i21end_%PQH3!x8YVG^AcfsJ6In2V3@+0o zBWhV&PS^4qr>U6Sjr5x?lVEHGD&!_E*Z6mAmZERA!w;~+u1G$2MH3(5Ld8{W;PrbA zT1Zm2k~WXLnx)BlcOGD-Ie0KT5~g{hZAZIDXFvWhq} z>-ac1I@38bnnbr^QjC8(rN&Hlk4r_>0{B_S37aRq&tA9)@yAuhuW6fih{sltiQxJO z8zY$+z(VPu%|!PvyuhP|Z~nxj+ffngiwrEcM&0+7=-Z`tfG>=nQP~!&dxKh@1o%1F zcTE`~#RQ}r7Db}hbUi80h|Z~>-#3JlG*c1hn0JxpQgx@oA2jd$^e+lGm3A5As?zMf zqkt5|(Rc-X(jFarw90vDulfk+q(-p>wc2eN0k!nJR!)Bknz6So6M75`oP-#6SjDuG z=qD9xEJ^0i^$y952_=A#GH2y^)Edz!~u97&Yl&d$mmYAMVUX|zHA-Q&1VyCNgFNpIVS1f7%9xnIzTT*}ARk+=j%HN2mX_evbT=NT@E`Ya zVN8YxciaduF7`Gz{akc)fJs@tXTRp7nt=K?L6jk#$CpDGCV&?=)Hx#f_L9|?-YH4L zT-^S@DC$3DWA~;*OT*iWMssBYkmt4O1V=rp!-eMPV&;G@__n5q~ zJ7^J6!1Hx}36yse&~)eQplH}}=}j?o5CytGGqskdmb{I7c(-{1rbm?z8M2f>adNpH zd|v%Jcplp4yoj4bo465Jz3r#dg_WfxsmNS5Bw35i;|p- zPM49na%pR3ow{3HFK(j4S{Y`xxT0(BP{iKq&tpZhEBLOb9O}wh%GjOZYAD=EzB&Hyfb|xeIi< z!vT|H-ob|U*=f$#GV!Fy=NXW2u`9mMv(nQh0}P0}W;5gvNeOQEvJhoSQ~e|ly{hV+$rlj`_ODWwpzgDnirj$Fweaa4Zr^!54_8 z{+li<#RR6Xcx7G`$v9cJr@9` zIhyy!m|Y}o8zAfy&UZY~aQ{S>=rzU*Evo?4FNX?;?S?Ux!CnYp4f~yWM)T^&WzHpo zQYXmsT?R;sA;%A`9q&q3$ejyUz)W^vqZgB1B)@EUd0}b&9A3gBbNhhGckT;%RE$xT z6BO8J=G{azs|y+?i*tF1XY;I;1~|DZL=)Wvc$S4)eObTq_~t89y_wy(wBaD>4Q&vc zCYR$(0Gk)CCY*n0wW*Vz9qZO!NSJ2PQoTjmzd3f~Kf>kFa4J$LZ6`;$3GS>G#S5V_O-W?xBedyD)R)g&>2oGzisC?7#-?`qaJ(j;s^llVTSmEr>rAqL=#W70 zLE?lT*?w0=9pIdig&u0$Ksj;nL-y#@EtzP1MzhUCik=vv&!@wNoWL5X3$Y62?Tk=$ z)b0pB7KhJUit9?68Qg$F(U#tolt}mxA{{iSDeQpbY6WJ@CiEiDnmciAwPeQmGTa~T zP~$rH$!pgQ?b4Nf8g(;R;&#GJ-us>IuPppK?^OUC`7Ke$>!l>@rlhNkipsmJB2A3xvj*A+An`$Wzh`C}tQ9E>b<%UC zuYnYG8?mlLUst-)J8+Up)uJ+*Tu7`(-E%0tGt!igz(=Qas9Sa8qM-b=It4C^w`G_qwtgX&ddNez5v;|wUkbGMYmpR-EBd9Y(+1(MzUqEq09UNJP6V<5 z@{|?U%x3Mh9gQe|)_3QDl`JJKUK>gb%Ab;9s?aeLHW<&2E;f+)jLEc9T0j z{hj`_$U|(6$TQjJ04ZZC%~Ba|zwIick~9TyMQ#VN$vv z-ld=lL-NiKOQ)2Z+LHx%mmBp^wi_L-cATw3=+{9JFXX(p&~x%R`b@fInb lGfP8CQRqf1dUrwVr*H-zTa?Ud7gMYE8p;0+EdS``zW{fSSJVIi From eab7ec8089e2dc2c582be916ea64e3e46ec4d12c Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Fri, 3 Jul 2026 13:42:07 +0000 Subject: [PATCH 7/7] fix(vale): auto-fix style issues (Vale + Dale) --- .../admincenter/workflow/advancedsettings.md | 14 ++--- .../11.1/admincenter/workflow/implement.md | 58 +++++++++---------- .../workflow/powerautomate/integrate.md | 2 +- 3 files changed, 37 insertions(+), 37 deletions(-) diff --git a/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md b/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md index 27a8bca6ae..84192d9889 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md +++ b/docs/directorymanager/11.1/admincenter/workflow/advancedsettings.md @@ -17,17 +17,17 @@ Functions discussed in this topic are licensed under different add-ons. See the ## Specify a Default Approver -You can designate a recipient as the default approver for workflow requests. Requests are routed to -this recipient based on the following rules: +You can designate a recipient as the default approver for workflow requests. Directory Manager routes +requests to this recipient based on the following rules: -- When approver acceleration is not enabled, the applicable rules are discussed in the +- When approver acceleration isn't enabled, the applicable rules are discussed in the [Workflow Approval Scenarios](overview.md#workflow-approval-scenarios) topic. - When approver acceleration is enabled: - - A request is sent to the default approver when the last approver in the acceleration chain - does not approve or deny it within the specific number of days. - - A request is routed to the default approver when the hierarchy breaks at any point in the - acceleration chain. For example, if the maximum acceleration level is set to 3 but there is no + - Directory Manager sends a request to the default approver when the last approver in the + acceleration chain doesn't approve or deny it within the specific number of days. + - Directory Manager routes a request to the default approver when the hierarchy breaks at any + point in the acceleration chain. For example, if the maximum acceleration level is set to 3 but there is no recipient to accelerate the request after second level acceleration, the request goes to the default approver. diff --git a/docs/directorymanager/11.1/admincenter/workflow/implement.md b/docs/directorymanager/11.1/admincenter/workflow/implement.md index 1713240e18..13271bafe6 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/implement.md +++ b/docs/directorymanager/11.1/admincenter/workflow/implement.md @@ -8,8 +8,8 @@ sidebar_position: 10 To create a workflow, you have to specify the following: -- **Object** - the object(s) - user, contact, group - to apply the workflow to. -- **Event** - a create, edit, or delete event that, when performed for the object(s), would trigger +- **Object** - the objects - user, contact, group - to apply the workflow to. +- **Event** - a create, edit, or delete event that, when performed for the objects, would trigger the workflow. - **Field** - one or more fields (attributes) that the workflow would apply to. When the values of these attributes change for the object, an approval request is triggered. @@ -43,7 +43,7 @@ But if you add a filter as: | employee Type | Not Equals | manager | It implies that when a manager edits the value of the _criteria_ attribute, the change is effective -immediately and this workflow does not apply. When a non-manager user changes the value of the +immediately and this workflow doesn't apply. When a non-manager user changes the value of the attribute, it triggers the workflow. ## View the Workflows @@ -59,8 +59,8 @@ attribute, it triggers the workflow. | Enable | Shows whether a workflow is enabled or disabled Use the toggle button next to a workflow to enable or disable it. | | Type | A workflow has one of these types:
  • **System:** workflows that are defined by default for an identity store.
  • **User Defined:** workflows that are defined by users for an identity store.
| | Name | A descriptive name for a workflow that identifies the action the workflow audits | - | Object(s) | The directory object(s) the workflow applies to | - | Approver(s) | The approver(s) specified for a workflow. Approver(s) are responsible for approving or denying the requests generated for the workflow. | + | Objects | The directory objects the workflow applies to | + | Approvers | The approvers specified for a workflow. Approvers are responsible for approving or denying the requests generated for the workflow. | | Event | The event that triggers a workflow | 4. You can perform the following actions: @@ -79,7 +79,7 @@ attribute, it triggers the workflow. right corner. 5. On the **Create Workflow** page, enter a name for the workflow In the **Name** box. 6. Select one or more objects (User, Contact, Group) to apply the workflow to. -7. In the **Events** drop-down list, select the event (Create, Edit, Delete) that will trigger the +7. In the **Events** dropdown list, select the event (Create, Edit, Delete) that will trigger the workflow. :::note @@ -89,31 +89,31 @@ attribute, it triggers the workflow. ::: -8. Select the **Mail Approval** check box to enable the approver to approve or deny a workflow +8. Select the **Mail Approval** checkbox to enable the approver to approve or deny a workflow request from within the workflow email notification. These notifications contain the **Accept** and **Deny** buttons. On clicking any of these, the approver is redirected and auto-authenticated on the Directory Manager portal, where he or she can approve or deny the request. - When this check box is not selected, the **Accept** and **Deny** buttons are not available in the + When this checkbox isn't selected, the **Accept** and **Deny** buttons aren't available in the email notifications. Approvers have to sign into the Directory Manager portal to manage workflow requests. -9. The **Approver Acceleration** check box applies if approver acceleration is enabled for the +9. The **Approver Acceleration** checkbox applies if approver acceleration is enabled for the identity store. See the [Apply Approver Acceleration](approveracceleration.md#apply-approver-acceleration) topic. - To apply approver acceleration to this workflow, select the **Approver Acceleration** check box. - - To exempt this workflow from approver acceleration, clear this check box. + - To exempt this workflow from approver acceleration, clear this checkbox. 10. Enter a brief description for the workflow in the **Description** box. -11. In the **Portal URL** drop-down list, select a Directory Manager portal URL to include in the +11. In the **Portal URL** dropdown list, select a Directory Manager portal URL to include in the workflow email notifications. The URL will redirect the recipients to the portal for taking action on a request, such as approve or deny it. The list contains URLs of Directory Manager portals linked with the identity store. -12. Click **Add Approver(s)** in the **Approver(s)** section to select the users and groups to - approve the requests generated for this workflow: The **Add Approver(s)** dialog box is +12. Click **Add Approvers** in the **Approvers** section to select the users and groups to + approve the requests generated for this workflow: The **Add Approvers** dialog box is displayed. - 1. Fields on the **Add Approver(s)** dialog box vary, depending on the object and event + 1. Fields on the **Add Approvers** dialog box vary, depending on the object and event selected. Then select one or more of the available options: | Option | Available For | Description | @@ -122,9 +122,9 @@ attribute, it triggers the workflow. | Owner and Additional Owner of the Group | _Edit_ and _delete_ events of the _Group_ object | Select it to specify the group’s primary and additional owners as the request approvers. | | Manager of User | _Edit_ and _Delete_ events of the _User_ and _Contact_ objects | Select it to specify the user’s or contact’s primary manager as the request approver. | | Manager and Additional Manager of User | _Edit_ and _Delete_ events of the _User_ and _Contact_ objects | Select it to specify the user’s/contact’s primary and additional managers as the request approvers. | - | Search Container Include Sub-Containers Search box | For all objects and events | You can specify one or more users and groups as approvers. In case of a group, all its members are set as approvers. Specify a container to search for the desired object(s); then perform a search to locate and select the object.
  • Click the down arrow in the **Search Container** box and select a container to limit the search scope to it.
  • Select the **Include Sub-Containers** check box to include the sub-containers within the selected container to search for the object.
  • Enter a search string in the search box; objects starting with the string are displayed as you type. Click **Add** for an object to select it.
    You can also perform an advanced search to locate the object. Click **Advanced** in the search box and use the search fields to enter a search string. On clicking **Search**, objects matching the string are displayed. Select the user or group you want to add as approver.
| + | Search Container Include Sub-Containers Search box | For all objects and events | You can specify one or more users and groups as approvers. In case of a group, all its members are set as approvers. Specify a container to search for the objects you want; then perform a search to locate and select the object.
  • Click the down arrow in the **Search Container** box and select a container to limit the search scope to it.
  • Select the **Include Sub-Containers** checkbox to include the sub-containers within the selected container to search for the object.
  • Enter a search string in the search box; objects starting with the string are displayed as you type. Click **Add** for an object to select it.
    You can also perform an advanced search to locate the object. Click **Advanced** in the search box and use the search fields to enter a search string. On clicking **Search**, objects matching the string are displayed. Select the user or group you want to add as approver.
| - 2. Click **Add** to close the **Add Approver(s)** dialog box. + 2. Click **Add** to close the **Add Approvers** dialog box. 13. Use the **Filters** section to specify a criterion; anything beyond that criterion will not trigger the workflow. For example, when you define the following filter: @@ -135,23 +135,23 @@ attribute, it triggers the workflow. This workflow will trigger when a security group is deleted. However, when a group object with type other than ‘Security’ is deleted, this workflow will not trigger. - 1. In the **Filter(s)** section, click **Add Filter(s)**. The **Add Filter** dialog box is + 1. In the **Filters** section, click **Add Filters**. The **Add Filter** dialog box is displayed. 2. Select a schema attribute from the _field_ list. 3. Select an operator to evaluate the attribute from the _operator_ list. - **Present** - returns objects that have a value specified for the attribute. - - **Not Present** - returns objects that do not have a value specified for the attribute. + - **Not Present** - returns objects that don't have a value specified for the attribute. - **Equals** - returns objects when the attribute value exactly matches the text you specify in the value box. - - **Not Equals** - returns objects when the attribute value does not match the text you + - **Not Equals** - returns objects when the attribute value doesn't match the text you specify in the value box. - 4. Enter a value in the _value_ box (not case-sensitive). This box is not available for the - _Present_ and _Not Present_ operators, which are not comparison operators. + 4. Enter a value in the _value_ box (not case-sensitive). This box isn't available for the + _Present_ and _Not Present_ operators, which aren't comparison operators. 5. Click **Add** to close the **Add Filter** dialog box. -14. Use the **Field(s)** section to specify the fields (attributes) that you want to apply the +14. Use the **Fields** section to specify the fields (attributes) that you want to apply the workflow to. For example, when you define a workflow as: Object: User @@ -159,17 +159,17 @@ attribute, it triggers the workflow. Filter: Department = IT Field: Email This workflow will trigger when the Email field for a user object with department set to IT is - edited. It will not be triggered when the Email field is edited for a user that does not belong + edited. It will not be triggered when the Email field is edited for a user that doesn't belong to the IT department, or when a field other than Email is edited for a user in the IT department. - 1. To add a field, click **Add Field(s)** in the **Field(s)** section. - 2. On the **Add Fields** dialog box, select the check box for a field to add it to the workflow + 1. To add a field, click **Add Fields** in the **Fields** section. + 2. On the **Add Fields** dialog box, select the checkbox for a field to add it to the workflow and click **Add**. :::note - The **Field(s)** section is not available when _Create_ is selected in the **Events** - drop-down list. + The **Fields** section isn't available when _Create_ is selected in the **Events** + dropdown list. ::: @@ -183,7 +183,7 @@ attribute, it triggers the workflow. You can define Power-Automate settings for a workflow to link that workflow to a Power Automate flow. -These settings enable you to connect to Power Automate from within a workflow (say Workflow1) and +Use these settings to connect to Power Automate from within a workflow (say Workflow1) and create a basic flow template there. On providing the URL of the flow template in Workflow1, the two are linked. As a result, the flow auto triggers when the Directory Manager workflow is triggered. @@ -249,7 +249,7 @@ You can enable or disable a workflow in any of the following ways. ## Delete a User-defined Workflow Workflows in an identity store can have their type as _System_ or _User Defined_. You can delete -user-defined workflows; system workflows cannot be deleted. +user-defined workflows; system workflows can't be deleted. **To delete a workflow:** diff --git a/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md index 60f206bac9..a18aa57a0b 100644 --- a/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md +++ b/docs/directorymanager/11.1/admincenter/workflow/powerautomate/integrate.md @@ -90,7 +90,7 @@ triggers, the linked flow triggers automatically. ![pa_template_message](/images/directorymanager/11.1/admincenter/workflow/pa_template_message.webp) -7. The next step is to copy the flow URL from Power Automate and provide it here. To copy the URL, +7. Next, copy the flow URL from Power Automate and provide it here. To copy the URL, do the following: 1. Launch Power Automate, choose your environment, and navigate to **My Flows**. This page displays the