dn: ou=users,{{ base_dn }}
objectClass: organizationalUnit
ou: users
description: All users

dn: ou=groups,{{ base_dn }}
objectClass: organizationalUnit
ou: groups
description: Regular groups

dn: ou=privileged-groups,{{ base_dn }}
objectClass: organizationalUnit
ou: privileged-groups
description: Privileged groups

dn: ou=service-accounts,{{ base_dn }}
objectClass: organizationalUnit
ou: service-accounts
description: Service accounts