PingDirectory

Setting an attribute to read-only

About this task

You can set user access to standard and constructed attributes to read-only and read/write. You should restrict access to constructed attributes to read-only. Read-only attributes do not appear on the UI pages that are associated with the creation of users groups and other objects.

Steps

  • Use the dsconfig tool to set a standard or constructed attribute as read-only.

    Example:

    dsconfig set-delegated-admin-attribute \
  --type-name users  \
  --attribute-type modifyTimestamp  \
  --set mutability:read-only

    Example:

    The following example resets a standard or constructed attribute from read-only to read/write:

    dsconfig set-delegated-admin-attribute \
  --type-name users  \
  --attribute-type modifyTimestamp  \
  --reset mutability