By default, without additional rights and privileges, all members of LDAP groups selected for use with TDV are able to log into JDBC, ODBC, and Web services clients configured for TDV. Rights to use TDV tools and to view and use other resources must be added to group definitions or assigned explicitly to users.

Only a user with Read/Modify All Users, and Access Tools rights can add or modify an LDAP domain, add or remove groups, and clear and reset LDAP users to group settings.