check health of rbac with ldapsearch