* an attribut which exists in the LDAP object but has no corresponding entry in the API will never be exported
* the mapping has always to be explicit for the API attributes: it is always considered an error if the client provides an attribute which is not listed below (aka no ''hidden'' attributes)
* whether an attribute is mandatory or not is specified by the corresponding LDAP object and/or REST API specification
* the attribute in ''bold'' letters is the REST API ressource identifier and can as such never be specified in a <code>POST</code> request but will always be generated on the server side
* specifying a read-only attribut in a <code>PUT</code> or <code>PATCH</code> request is allowed as long as the value is the same as currently set
|| '''id''' || uid=4000000,ou=reseller || uid || Always read-only.
|-
|| isCompany || uid=4000000,ou=reseller || sstIsCompany ||if isCompany is set to true, organizationName is/must be set, else givenName and surname are/must be set
|-
|| isActive || uid=4000000,ou=reseller || sstIsActive ||
|-
|| organizationName || ou=address,uid=4000000,ou=reseller || organizationName ||
|-
|| givenName || ou=address,uid=4000000,ou=reseller || givenName ||
|-
|| surname || ou=address,uid=4000000,ou=reseller || surname ||
|-
|| (none) || uid=4000000,ou=reseller || sstExternalID ||
|-
|| (none) || uid=4000000,ou=reseller || sstBelongsToResellerUID || Set Always set equal to uid on creation.|-|| (none) || ou=address,uid=4000000,ou=reseller || organizationName || Internally set to the same value as sstReseller's organizationName
|-
|| address.sstGender || ou=address,uid=4000000,ou=reseller || gender ||