HP-UX Directory Server 8.1 administrator guide

NOTE:
The nsRoleDN attribute is an operational attribute and must be explicitly requested in the search
command in the list of search attributes. For example:
ldapsearch ... args ... “(uid=scarter)” \* nsRole nsRoleDN
The Console will automatically show the nsRoleDN attribute.
5.1.2.2 Creating a filtered role
Entries are assigned to a filtered role depending whether the entry possesses a specific attribute
defined in the role. The role definition specifies an LDAP filter for the target attributes. Entries
that match the filter possess (are members of) the role.
To create and add members to a filtered role:
1. In the Directory Server Console, select the Directory tab.
2. Browse the tree in the left navigation pane, and select the parent entry for the new role.
3. Go to the Object menu, and select New→Role.
Alternatively, right-click the entry and select New→Role.
4. Click General in the left pane. Type a name for the new role in the Role Name field. The
role name is required.
5.1 Using roles 171