Creating a Role by Using an LDAP Attribute
Creating a Role by Using the Location of the User Objects
Creating a Role by Using a Group Membership Attribute