All,

 

Here is the goal I am trying to accomplish:

 

I am trying to create an administrative user that has access to the 389 Management Console that has access to a single OU and can only modify objects within that OU. This user should not be able to modify anything outside of this OU, nothing in netscaperoot, nothing under schema, monitor or Config, and shouldn’t be able to do anything on the Configuration or Tasks tab.

 

If this is not possible then that’s fine, I just need to know either way, so far I have been messing with ACIs and targetfilters etc... trying to get something working and I’m not having much success, any help with this is greatly appreciated.

 

Regards,
Daniel Bright