The file that installs Delegated Admin also specifies the following values:

  • Object class of user entries through structural-ldap-objectclass:inetOrgPerson
  • Number of user attributes to expose
    Note: Delegated Admin supports the following attribute types:
    • Boolean
    • Integer
    • String
    • DateTime
    • Custom attributes
    • Constructed attributes
  1. If necessary, change the attribute that is designated as the primary attribute.
    $ bin/dsconfig set-rest-resource-type-prop \
      --type-name users \
      --set primary-display-attribute-type:mail
  2. Configure any additional user attributes to appear in Delegated Admin by specifying the LDAP attribute type to expose and by providing a display name for it.
    $ bin/dsconfig create-delegated-admin-attribute \
      --type-name users \
      --attribute-type customAttr
      --set "display-name:My custom attribute"
  3. Use the following command to set the search filter, where %% represents the search text entered in the web application:
    $ bin/dsconfig set-rest-resource-type-prop \
      --type-name users \
      --set 'search-filter-pattern:(|(cn=*%%*)(mail=%%*)(uid=%%*))'
    When search text is entered in Delegated Admin, the property search-filter-pattern specifies which attributes to search in PingDirectory Server. To satisfy the query, define the appropriate attribute indexes for PingDirectory Server. For more information, refer to PingDirectory Server Administration Guide.
  4. To manage users whose profiles feature a large number of attributes, place the attributes in logical groupings, called attribute categories, and give them a specific display order.
    The following commands create attribute categories and specify their display order:
    $ bin/dsconfig create-delegated-admin-attribute-category \
      --display-name "Basic Information" \
      --set display-order-index:1
      
    $ bin/dsconfig create-delegated-admin-attribute-category \
      --display-name "Contact Information" \
      --set display-order-index:2
      
    $ bin/dsconfig create-delegated-admin-attribute-category \
      --display-name "Other Attributes" \
      --set display-order-index:3
  5. The following example commands assign attributes to a category and specify the display order of each attribute within its category.
    $ bin/dsconfig set-delegated-admin-attribute-prop \
      --type-name users \
      --attribute-type cn \
      --set "attribute-category:Basic Information" \
      --set display-order-index:1
      
    $ bin/dsconfig set-delegated-admin-attribute-prop \
      --type-name users \
      --attribute-type sn \
      --set "attribute-category:Basic Information" \
      --set display-order-index:2
    Unassigned attributes are displayed in a miscellaneous category.