Administration Guide › Set Up Access Controls › Access Levels › Protected Items › Example: Protect an Entry

Previous Topic: Protecting Passwords

Next Topic: Example: Let a User Modify All Attributes in Their Own Entry Except "role"
Example: Protect an Entry

The command in this example could be used to hide some management information about a DSA definition stored within the directory.

set protected-items “hide-schema-from-employees” = {
 role	= “employees”
 entry = <c “AU”><o “Democorp”><ou “Schema”>
};

The specified entry is invisible to members of the employees role (unless a higher precedence access control rule grants them some access).