Access Control Considerations - Red Hat DIRECTORY SERVER 7.1 - DEPLOYMENT Deployment Manual

Designing Your Directory Tree
After creating the initial structure of their directory tree, they create additional
branches as follows:
Both the enterprise and the hosting organization design their data hierarchies
based on information that is not likely to change often.

Access Control Considerations

Introducing hierarchy into your directory tree can be used to enable certain types
of access control. As with replication, it is easier to group together similar entries
and then administer them from a single branch.
You can also enable the distribution of administration through a hierarchical
directory tree. For example, if you want to give an administrator from the
marketing department access to the marketing entries and an administrator from
the sales department access to the sales entries, you can do so through your
directory tree design.
70 Red Hat Directory Server Deployment Guide • May 2005