A permission controls use of a feature of Directory Server. For example, there is a permission that governs the administration of users and groups. You grant permissions to user groups.
There are two categories of permissions:
| Directory Server Administration | These govern the administration of the Directory Server repository (for example, the management of user accounts). |
| Server | These govern the administration of the enterprise servers that are controlled by the Directory Server. |
Some permissions include others. For example, the permission to modify an enterprise server includes the permission to start and stop the server. When a permission is granted, all those that it includes are automatically granted.