Veto if required attributes CN, Given Name, Surname and Internet EMail Address not available User Organizational Unit Required Attributes Organizational Unit Conditionally veto guys named "Fred" true Fred Vetoed "Fred"