Nested Groups

Static groups can be nested by specifying the DN of another group as a value for the member attribute or uniqueMember attribute.

The depth to which nested groups are supported by ACIs is controlled by the nsslapd-groupevalnestlevel configuration parameter.

Nested groups are not the most efficient grouping mechanism. Dynamic nested groups incur an even greater performance cost. To avoid these performance problems, use roles instead.