Looks like indirect CoS is what you want
(http://www.redhat.com/docs/manuals/dir-server/8.1/admin/Advanced_Entry_Management-Assigning_Class_of_Service.html#Assigning_Class_of_Service-About_CoS).
The question is whether indirect CoS will work with the operational
"virtual" attribute nsRole - try this out to be sure.
You can use classic groups and memberOf attribute instead, basing your
indirect CoS templates on the memberOf attribute...
2009/12/3 Emmanuel BILLOT
<emmanuel.billot@ird.fr>:> Hi,
>
> Is it possible to "paste" a CoS on a Role ?
> I mean when one use a Role definition to "group" several users
and those
> users may inherit attribut because they belong to this Role.
>
> BR,
>
> --
> 389 users mailing list
> 389-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>