Analysis of the Existing ACIs
2
Select the Service Configuration tab. By default, the Administration configuration page is displayed.
3
In the right side of the console, scroll down to Dynamic Administrative Role ACIs.
4
Select and delete all ACIs in the text box for Dynamic Administrative Role ACIs.
5
Save the edited settings.
Analysis of the Existing ACIs The listing in this section shows the ACIs installed in the directory when you install Access Manager and Messaging Server. It also describes the function of each ACI and recommends whether an ACI can be retained, consolidated, or discarded. The ACIs are divided into the following categories: ■ ■ ■ ■ ■ ■ ■ ■ ■ ■ ■ ■
“Root Suffix” on page 211 “Access Manager” on page 213 “Top-level Help Desk Admin Role” on page 216 “Top-level Policy Admin Role” on page 216 “AM Self” on page 218 “AM Anonymous” on page 220 “AM Deny Write Access” on page 221 “AM Container Admin Role” on page 222 “Organization Help Desk” on page 223 “AM Organization Admin Role” on page 224 “AM Miscellaneous” on page 226 “Messaging Server” on page 227
Root Suffix ------------------------------------------------------------------------------------------------------------dn: $rootSuffix # # consolidate # aci: (targetattr != “nsroledn || aci || nsLookThroughLimit || nsSizeLimit || nsTimeLimit || nsIdleTimeout || passwordPolicySubentry || passwordExpirationTime || passwordExpWarned || passwordRetryCount || retryCountResetTime Appendix E • Consolidating ACIs for Directory Server Performance
211