User guide

Role Configuration
B-7
The role configuration can also be a role set that contains multiple roles. An example of role set
configuration is shown below.
Table B-5 Object class and Description
Object class Description
top Basic LDAP object class
ssoRoleSet SSO role set information
Table B-6 Role set configuration
Attribute Explanation Description Example of registration
cn Name Specifies a role set name.
(*1) (*2) (*3)
AdminSet
ssoRoleName Role name Specifies the names of the roles
contained in the role set.
Another role set can be specified
as a role included in the specified
role set. (*1) (*4) (*5) (*6)
Admin
*1 Set values are not case sensitive.
*2 The role name must not include a comma (,).
*3 This attribute must always be unique.
*4 Duplicated roles or role sets are invalid.
*5 If a role set that causes a loop of configurations is set, the looped portion of configuration is invalid.
*6 Non-existent roles or role sets must not be specified.