The PingDirectory Server does not support DSEE roles and does not support the use of the roleDN ACI bind rule. However, you can achieve the same behavior by converting the DSEE roles to standard groups and using the groupDN ACI bind rule.