To add, modify, or remove access control instructions (ACIs), submit a request through the service request form, accessible from the Support Portal.
Global ACIs are a set of ACIs that can apply to entries anywhere in the server, but they can also be scoped so that they only apply to a specific set of entries. These ACIs work in conjunction with access control rules stored in user data and provide a convenient way to define ACIs that span disparate portions of the DIT (Directory Information Tree).
Access Control Components | Description | Syntax |
---|---|---|
targets |
Specifies the set of entries and/or attributes to which an access control rule applies. |
Syntax: |
name |
Specifies the name of the ACI. |
|
permissions |
Specifies the type of operations to which an access control rule might apply. |
Syntax: |
bind rules |
Specifies the criteria that indicate whether an access control rule should apply to a given requestor. |
Syntax: The bind rule syntax requires that it be terminated with a ";". |
For additional information, see Defining global ACIs in the PingDirectory Server Administration Guide.