On to, 19 tammi 2017, Sandor Juhasz wrote: >I think >ipa permission-mod "System: Read Groups" --includedattrs=mail --includedattrs=displayname >solved my issue. Yep, that's one solution. -- / Alexander Bokovoy