access to dn.subtree="ou=CipUX,ou=SubSystems,@SUFFIX@"
	by dn.exact=”uid=cipux,ou=System,ou=Entities,ou=SAM,@SUFFIX@" write
	by * none break