use aggregate-function to build the permissions-map in OpenURRole
use extra static methods to build rootOu's and superOu's in OrgUnitMapper-class