The ability to view, and to alter, objects and schema settings within Directory Server is controlled through a system of user accounts, user groups and permissions.
Each user wanting to use the administrative features must log on. The features available to the user are controlled by permissions. You grant permissions to a user group. The users within that group can then perform the actions governed by those permissions.