To use the NSI commands to access entries in a CDS database, you
   need access control list (ACL) permissions.  Depending on the NSI
   operation, you need ACL permissions to the parent directory or the
   CDS object entry (the name service entry) or both.  The ACL
   permissions are as follows:

     +  To create an entry, you need insert permission to the parent
        directory.

     +  To read an entry, you need read permission to the CDS object
        entry.

     +  To write to an entry, you need write permission to the CDS
        object entry.

     +  To delete an entry, you need delete permission either to the
        CDS object entry or to the parent directory.

   Note that write permission does not imply read permission.

   ACL permissions for the NSI commands of the control program are
   described in the reference pages.