LDAP directory tree

An LDAP directory tree is organized around a base distinguished name, often a domain-style DN such as dc=example,dc=com. Below it, organizational units group entries by their purpose: people, groups and service accounts are common starting points. User entries, group entries and application bind accounts then sit under their respective organizational units. A diagram makes the hierarchy easier to explain during onboarding, migration planning and access reviews. It should reflect the naming conventions and actual distinguished names used in the directory, not just a generic example. Directory schemas vary between OpenLDAP, Active Directory and other services, so capture the units and object classes that matter to the systems using the directory.