Both DSEE and PingDirectory Server support global ACIs, which can be used to define ACIs that apply throughout the server. In servers with multiple naming contexts, this feature allows you to define a rule once as a global ACI, rather than needing to maintain an identical rule in each naming context.
In DSEE, global ACIs are created by modifying the root DSE entry to add values of the
aci attribute. In the PingDirectory Server, global ACIs are
managed with dsconfig referenced in the
property of the Access Control Handler.