The OES User Rights Map utility is used by administrators to map the Access Control List (ACL) of the storage unit that is owned by Identity on OES to Identity on Active Directory. This utility can be used after the user identity is created on both the source and target identity stores. It maps the users from eDirectory to Active Directory using a common name or any other field that is selectable by the tool. For more information on OES User Rights Map, see NURM (OES User Rights Map) in the OES 2018 SP3: NSS AD Administration Guide.