Groups and roles

A group is a list, a collection of names. A group can be used in aclentry, ibm-filterAclEntry, and entryowner attributes to control access or in application-specific uses such as a mailing list; see Access control lists. Groups can be defined as either static, dynamic, or nested. For information about how to work with groups, see Manage users and groups.

Roles are similar to groups in that they are represented in the directory by an object. Additionally, roles contain a group of DNs.

See the following for more information:

• Static groups
• Dynamic groups
• Nested groups
• Hybrid groups
• Determining group membership
• Group object classes for nested and dynamic groups
• Group attribute types
• Roles