---
title: Root DSE request criteria
description: Root DSE request criteria properties for matching requests that target the server root DSE, such as compare and base-object search operations.
component: pingdirectory
version: 10.2
page_id: pingdirectory:pingdirectory_security_guide:pd_sec_root_dse_request_criteria
canonical_url: https://docs.pingidentity.com/pingdirectory/11.1/pingdirectory_security_guide/pd_sec_request_criteria.html
llms_txt: https://docs.pingidentity.com/pingdirectory/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: 2023-09-13T00:00:00Z
---

# Root DSE request criteria

Use the root DSE request criteria type to match requests that target the server root DSE.

The root DSE request criteria type includes the following configuration property:

* `operation-type`

  Specifies the types of operations that matches the criteria. By default, only the compare and base-object-search types are included. Available values include:

  * `compare`: Indicates that the criteria matches compare requests that use the null DN.

  * `base-object-search`: Indicates that the criteria matches search requests that use a null base DN with a baseObject scope.

  * `single-level-search`: Indicates that the criteria matches search requests that use a null base DN with a singleLevel scope.

  * `whole-subtree-search`: Indicates that the criteria matches search requests that use a null base DN with a wholeSubtree scope.

  * `subordinate-subtree-search`: Indicates that the criteria matches search requests that use a null base DN with a subordinateSubtree scope.