I am trying to rename the (dn) entry through a normal user which is first authenticate it self, but I there is an error while renaming the dn entry

text=no write access to old parent's children

here is my slapd.conf access settings.

# Sample access control policy:
access to attrs=userPassword,shadowLastChange
        by self write
        by dn="cn=admin,dc=mydomain,dc=com" write
        by * auth

access to *
        by self write
        by dn="cn=admin,dc=mydom,dc=com" write
        by * read

Would you please help, what I need to set?