Hi,
Please note that as well as having to be listed as a user in store.admins configutil parameter, the uid must also be a *member* of the group specified in "store.serviceadmingroupdn" if you want the user to have proxyauth rights etc. as listed by Jay:
e.g.
store.admins = admin
store.serviceadmingroupdn = "cn=Service Administrators,ou=Groups, o=isp"
cn=Service Administrators, ou=Groups, o=isp
objectClass=top
objectClass=groupOfUniqueNames
objectClass=iplanet-am-managed-static-group
objectClass=iplanet-am-managed-group
objectClass=nsManagedDeptAdminGroup
cn=Service Administrators
**uniqueMember=uid=admin, ou=People,o=domain1.com,o=isp
uniqueMember=uid=ServiceAdmin, ou=People,o=domain1.com,o=isp
Regards,
Shane.