sstReadOnly: givenName
sstReadOnly: surname
sstMandatory?
sstMethod: ou=delete,ou=backup,ou=sections,ou=virtualization,ou=services,dc=foo-cloud,dc=org
</pre>
* How and where do we store the possible api-calls and the corresponding fields in the directory.
* How do want to display and/or list the roles without overwhelming the users?
* Different default roles for different person types (reseller, customer, provider)
* Service restriction is possible per user in his roles?
* Support Switch-User (with Switch Back)