Looks like indirect CoS is what you want (http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Advanced_Entry_Management-Assigning_Class_of_Service.html#Assigning_Class_of_Service-About_CoS). The question is whether indirect CoS will work with the operational "virtual" attribute nsRole - try this out to be sure. You can use classic groups and memberOf attribute instead, basing your indirect CoS templates on the memberOf attribute... 2009/12/3 Emmanuel BILLOT <emmanuel.billot at ird.fr>: > Hi, > > Is it possible to "paste" a CoS on a Role ? > I mean when one use a Role definition to "group" several users and those > users may inherit attribut because they belong to this Role. > > BR, > > -- > 389 users mailing list > 389-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users >