As described in Working With LDAP, DPOD's installation may follow one of two scenarios.

Scenario A - an attribute at the user directory entry

When your installation scenario matches Scenario A in the Concepts Section, perform the following steps:

1. If necessary, add an attribute to the user class LDAP schema (e.g. DPOD_role attribute).
2. For each user that should use DPOD's Console, add the attribute with one of the built-in role names: todo:hk are the roles same? also scenariob
   1. DPODAdmin
   2. DPODPowerUser 
   3. DPODOperator
   4. DPODInvestigator.

Scenario B - an attribute at the group directory entry

When your installation scenario matches Scenario B in the Concepts Section, perform the following steps:

1. If necessary, add an attribute to the group class LDAP schema (e.g. DPOD_role attribute).
2. Create 4 groups - one for each built-in role. The group names do not have to be identical to the built-in role names.
   For each group, if required, add the attribute with one of the following values:
   
   1. DPODAdmin
   2. DPODPowerUser
   3. DPODOperator
   4. DPODInvestigator