Example

For native mode (with domain nodes on the organization tree):

iplanet-am-modifiable-by: cn:Top-level Admin Role, o=sesta.com

For compatibility mode (with domain nodes on the DC Tree):

iplanet-am-modifiable-by: cn=Top-level Admin Role, dc=sesta, dc=com