Setting an attribute to read-only
About this task
Beginning with Delegated Admin 3.5.0 and PingDirectory 7.3.0.1, you can set user access to standard and constructed attributes to read-only
and read/write
. You should restrict access to constructed attributes to read-only
. Read-only attributes do not appear on the UI pages that are associated with the creation of users groups and other objects.
Steps
-
Use the
dsconfig
tool to set a standard or constructed attribute asread-only
.Example:
dsconfig set-delegated-admin-attribute \ --type-name users \ --attribute-type modifyTimestamp \ --set mutability:read-only
Example:
The following example resets a standard or constructed attribute from
read-only
toread/write
:dsconfig set-delegated-admin-attribute \ --type-name users \ --attribute-type modifyTimestamp \ --reset mutability