LDAP management access allows members of LDAP groups to manage the event broker service. The configuration specifies the LDAP attribute containing group membership, and maps groups to Mission Control Manager, Mission Control Editor, and Mission Control Viewer access. An event broker service can have at most one LDAP management access configuration.

Management users are authenticated against the management LDAP authentication profile, which must already exist on the event broker service. The profile name is not part of the request: it is always management, and is returned by the GET API.

The API updates only the fields included in the request. When a group list is included, it replaces the existing list entirely. An empty list clears the groups, provided at least one of the three group lists (Mission Control Manager, Mission Control Editor, or Mission Control Viewer) still contains at least one group after the update.

Your token must have one of the permissions listed in the Token Permissions.