To determine whether access control instructions (ACIs) are suitable for use, the PingDirectory Server provides a validate-acis tool that you can use to examine content in an LDIF file or data in another directory server, such as a DSEE instance.
When migrating data from a DSEE deployment into a PingDirectory Server instance, use the validate-acis tool to determine whether ACIs contained in the data are acceptable. If any problems exist, update the data to redefine the ACIs so they are suitable for use in the PingDirectory Server.
For more information, see Validating ACIs Before Migrating Data.