In the following example, LDAP Value represents the distinguished name (DN) of a group. When Type is Attribute, the Attribute Name field represents the user attribute where the group DN is stored.
This example assigns users to a Teradata Viewpoint role based on an attribute of the user's record in LDAP. Assume you have a user with the following record in LDAP:
dn: cn=User1,ou=Users,dc=teradata,dc=com memberOf: cn=USA,ou=Groups,dc=teradata,dc=com
To map User1 to the Teradata Viewpoint role US Users, create the following role mapping:
- Set Type to Attribute.
- Type the Attribute Name memberOf.
- Type the LDAP Value cn=USA,ou=Groups,dc=teradata,dc=com.
- Set Viewpoint Role to US Users.