Sun OpenSSO Enterprise 8.0 Administration Reference

LDAP Role Object Class

Defines the object classes for roles. When a role is created, the list of user object classes will be added to the role's attributes list