To administer the Directory Server, the user profile you are using must have the following authority:
To manage directory objects (including access control lists, object ownership, and replicas), connect to the directory with either the administrator DN or another DN that has the proper LDAP authority. If authority integration is being used, an administrator can also be a projected user (see Operating system projected backend) that has authority to the Directory Server Administrator function ID. Most administrative tasks can also be performed by users in the administrative group (see Administrative access).
General administration tasks
Security Tasks
Directory content tasks
Publishing tasks