Note: this component is designated "advanced", which means that objects of this type are not expected to be created or altered in most environments. If you believe that such a change is necessary, you may want to contact UnboundID support in order to understand the potential impact of that change.
Root DN Users are administrative users whose accounts exist in the server configuration. Root DN Users may automatically inherit a set of privileges defined in the root DN configuration, which can be used to give them special capabilities that are not automatically granted to non-root users.
↓Relations From this Component
↓Properties
↓dsconfig Usage
The following components have a direct composition relation to Root DN Users:
The properties supported by this managed object are as follows:
| Basic Properties: | Advanced Properties: |
|---|---|
| ↓ alternate-bind-dn | None |
| ↓ inherit-default-root-privileges |
| Description | Specifies one or more alternate DNs that can be used to bind to the server as this Root DN User. |
| Default Value | This root user is allowed to bind only using the DN of the associated configuration entry. |
| Allowed Values | A valid DN. |
| Multi-Valued | Yes |
| Required | No |
| Admin Action Required | None. Modification requires no further action |
inherit-default-root-privileges
| Description | Indicates whether this Root DN User should be automatically granted the set of privileges defined in the default-root-privilege-name property of the root DN configuration object. If this is false, then this Root DN User will not have any privileges by default, but may be explicitly granted one or more privileges by including the names of those privileges in the ds-privilege-name attribute. |
| Default Value | true |
| Allowed Values | true false |
| Multi-Valued | No |
| Required | Yes |
| Admin Action Required | None. Modification requires no further action |
To list the configured Root DN Users:
dsconfig list-root-dn-users
[--property {propertyName}] ...
To view the configuration for an existing Root DN User:
dsconfig get-root-dn-user-prop
--user-name {name}
[--tab-delimited]
[--script-friendly]
[--property {propertyName}] ...
To update the configuration for an existing Root DN User:
dsconfig set-root-dn-user-prop
--user-name {name}
(--set|--add|--remove) {propertyName}:{propertyValue}
[(--set|--add|--remove) {propertyName}:{propertyValue}] ...