Setting up a DN reference attribute - PingDirectory

Page created: 26 Jul 2021 |

Page updated: 14 Jan 2022

| 1 min read

9.0 Product PingDirectory System Administrator Administrator Audience IT Administrator Configuration User task

A REST resource type can reference or edit other REST resource types based on a distinguished name (DN) without the full DN value. The following task, performed by the system admin, grants the Delegated Admin this ability.

In this task, the Delegated Admin attribute used for reference must be in DN syntax, such as manager , entryDN, or seeAlso.

To use a resource type for DN reference, either:
- Use an existing REST resource type.
- Create a new REST resource type.

To add a reference delegated admin attribute, run dsconfig with the create-delegated-admin-attribute option using the following syntax.

dsconfig create-delegated-admin-attribute \
    --type-name users  \
    --attribute-type <attribute of DN syntax> \
    --set "display-name:<display name>"  \
    --set display-order-index: <>  \
    --set reference-resource-type:<rest-resource-type>

The following example uses the values from Creating and configuring a new REST resource type.

dsconfig create-delegated-admin-attribute \
    --type-name users  \
    --attribute-type manager  \
    --set "display-name:Select Manager"  \
    --set display-order-index:4  \
    --set reference-resource-type:Managers