Hi!

Basically I have the same question as unanswered https://serverfault.com/q/998893/407952:

What is the difference between write and manage?

I have a use with write permissions for  pwdGraceUseTime, and deleting that attribute requires “-e relax” for ldapmodify.

However when my user ties it, it gets a ldap_modify: Insufficient access (50)

Kind regards,

Ulrich