I need to compare a number stored on CAC with the one in employeenumber in IdM. I have a non-admin bind user for this and other generic LDAP data access for 3rd party needs. But only the Directory Manager can pull that field. <br><br>Is there a permission setting to allow a system account to access that field? The account was created using the method from redhat solutions 4408441.<br>-- <br>Computers amplify human error<br>Super computers are really cool