What I'm trying to accomplish: user should have access to modify certain accounts where customTextAttribute2="test" (example). When I modify the criteria under "object selection" > ldap filter > i tried doing %adm-customattributetext2%=test. No results found. Is it possible to query custom attributes or do you have to use AD attributes for this?