Openldap ranchce schema

I can not use Rancher environment roles with openldap.
Every user of ldap is administrator for Rancher.
I want to control this grant。
thank you for your help