After applying the respective patch, you can configure roles and filtered roles for the LDAPv3 plug-in, if the data is stored in Sun Java System Directory Server (fixes problem ID 6349959). In the Access Manager 7.1 Administration console, in LDAPv3 configuration for the “LDAPv3 Plug-in Supported Types and Operations” field, enter the values as:
role: read,edit,create,delete filteredrole: read,edit,create,delete
You can enter one or both of the above entries, depending on the roles and filtered roles you plan to use in your LDAPv3 configuration.