2.388 Attribute msDS-MembersForAzRole

This attribute is used by the Authorization Manager feature of Windows Server 2003 operating system and is not necessary for Active Directory to function. It specifies the list of member application groups or users linked to Az-Role objects.

 cn: ms-DS-Members-For-Az-Role
 ldapDisplayName: msDS-MembersForAzRole
 attributeId: 1.2.840.113556.1.4.1806
 attributeSyntax: 2.5.5.1
 omSyntax: 127
 omObjectClass: 1.3.12.2.1011.28.0.714
 isSingleValued: FALSE
 schemaIdGuid: cbf7e6cd-85a4-4314-8939-8bfe80597835
 systemOnly: FALSE
 searchFlags: 0
 linkID: 2016
 systemFlags: FLAG_SCHEMA_BASE_OBJECT
 schemaFlagsEx: FLAG_ATTR_IS_CRITICAL

Version-Specific Behavior: First implemented on Windows Server 2003.

The schemaFlagsEx attribute was added to this attribute definition in Windows Server 2008 operating system.