1. Configure a soft-delete policy and global configuration as shown in “Configuring Soft Deletes as a Global Configuration”.
  2. Configure request criteria for soft deletes. The soft delete request criteria is configured for an external delete request from a member of the Internal Applications group matching an entry with object class "inetorgperson" with the request excluding the Soft Delete Request Control and the Hard Delete Request Control.
    $ bin/dsconfig create-request-criteria \             
      --criteria-name "Soft Deletes" \
      --type simple \ 
      --set "description:Requests for soft delete" \ 
      --set operation-type:delete \  
      --set operation-origin:external-request \ 
      --set "connection-criteria:Internal Applications" \ 
      --set not-all-included-request-control:1.3.6.1.4.1.30221.2.5.20 \
      --set "all-included-target-entry-filter:(objectClass=inetorgperson)" 
  3. In the soft delete policy created in step 1, set the auto-soft-delete-connection-criteria property to the simple criteria created in the previous step.
    $ bin/dsconfig create-soft-delete-policy \ 
      --policy-name default-soft-delete-policy \ 
      --set "auto-soft-delete-request-criteria:Soft Deletes"