Capabilities/enrol/ldap:manage