IdStory Identity Manager

Indirect manager = my manager's manager, and recursively all their managers

1. see their (indirect) subordinates
2. request roles for their (indirect) subordinates.
   But only for the contracts, that are really subordinate contracts (#1146)
3. approve roles for their (indirect) subordinates
   Like the approval round "Approve by manager", there would be also "Approve by manager's manager"

1. The director of a whole branch is a direct manager only for the managers of the departments. The director wants to be able to manage all employees in his branch.
2. dtto
3. On some projects, the roles can be requested only by the managers. In this case, the approval round by manager is useless. The approval should be done by the manager's manager (i.e. the manager of the requester).