Scripting and Programming Guides › Developer's Guide for Java › Delegated Management Services API › Attribute-based Delegation › Configure Attribute-based Delegation

Configure Attribute-based Delegation

You specify the attributes that enable attribute-based delegation in the SmDmsConfig constructor. Three attributes are required to identify the following information:

• A user as an organization administrator. This attribute can be any attribute in your LDAP directory that you are not using to store other information—for example, o.

  You specify a user as an organization administrator through the constructor’s OrgAdminSubDn parameter, as in the following example:

  OrgAdminSubDn="(title=OrgAdmin)";

• The organization(s) that an organization administrator can manage. By default, DMS uses the departmentnumber attribute to store managed organizations.

  You specify this attribute through the constructor’s OrgAdminOrgs parameter—for example:

  OrgAdminOrgs="departmentnumber";

• The organization to which a user belongs. By default, DMS uses the ou attribute.

  You specify this attribute through the constructor’s DnOrgs parameter—for example:

  DnOrgs="ou";