Acl for admin group

Hi Sorry for the banal question I created an acl for a group whose members have full access to OpenLDAP.

dn: olcDatabase={1}mdb,cn=config changetype: modify replace: olcAccess olcAccess: to attrs=userPassword by self write by group.exact="cn=ldap_admins,ou=Groups,dc=domain,dc=com" write by anonymous auth by * none olcAccess: to * by self write by group.exact="cn=ldap_admins,ou=Groups,dc=domain,dc=com write by * read

But members of this group didn't get full access. Please tell me what I did wrong ?