- add modules, overlays, acccess rules, schemas - manage syncrepl - manage selinux
- add basic openldap role - manage certificates for openldap