See the following:
Protecting Files With ACLs (Task Map) in System Administration Guide: Security Services
nfsmapid Daemon