1) have EEM point to internal user store so that you can use original casmadmin to login USS UI temporarily
2 ) login http://<hostname>:8686/group/control_panel/ as casmadmin
3) go to Portal -> Portal Settings -> Authentication -> EEM , they can see that EEM is enabled for authentication , and the application administrator group is specified as openspaceadmingroup ( by default ) .
So any user who belongs to that group " openspaceadmingroup" will get the USS administrator privilege . In your LDAP , you will need to have a group called "openspaceadmingroup" and have some users belong to this group . Then , after your EEM is hooked up with LDAP , those users who belong to this group will be able to have the same privilege as casmadmin used to have .