Sun OpenSSO Enterprise 8.0 Administration Reference

LDAP Roles Attributes

Defines the list of attributes associated with a role. Any attempt to read/write agent attributes that are not on this list is not allowed. The attributes are case-sensitive. The object classes and attribute schema must be defined in Directory Server before you define the object classes and attribute schema here.