To use the nsmanageddisabledrole LDAP role to disable and enable accounts, configure the LDAP resource as follows:
