Control Compliance Suite (CCS) lets you control which users have what access to which directory objects. When a user account is authenticated, the type of access granted to the objects is determined by the permissions that are attached to the objects.

When a role is assigned to a user, permissions are automatically granted to the directory objects in the predefined folders. The administrator must manually assign permissions to the user-defined folders at a later time.

Every directory object has a set of effective rights that is either assigned directly to or is inherited from the parent folder. The effective rights determine what kind of directory operations a specific user can perform on that object.

Objects are stored in the CCS directory. The directory is hierarchical in nature. You can create folders and objects in an inverted tree-like structure. The directory gives the user the flexibility to create a hierarchy that allows them to model the tree that is based on their organizational needs.