What are ACIs?
An Access Control Instruction or ACI is a set of rules placed on the directory or a subset of the directory. The rules are evaluated by the server and either allow or deny permissions to a client request. Permissions are for instance read, write, search and compare. ACIs can also be placed on individual entries in the directory, or on configuration and other administrative tasks. An ACI consists of three parts: • A target, specifying for what object, object attribute(s), or group of objects and attributes the access is being controlled. • The permissions outline which specific right is being granted or denied. • Bind rules specify who can access the controlled attribute or object, when they can do it and where they can do it from. We will discuss each in the next sections.
