Access Manager
dn, multi-valued
This attribute lists the role-dn of the administrator who has access rights to modify this user entry. By default, the value is set to the role-dn of the administrator who created the account.
For native mode (with domain nodes on the organization tree):
iplanet-am-modifiable-by: cn:Top-level Admin Role, o=sesta.com
For compatibility mode (with domain nodes on the DC Tree):
iplanet-am-modifiable-by: cn=Top-level Admin Role, dc=sesta, dc=com
2.16.840.1.113730.3.1.1094