Access to zimbraAccountStatus atribute for regular user
I want to use Zimbra's ldap for auth on all our services, but for security purposes i don't want to use uid=zimbra,cn=admins,cn=zimbra account as bind-dn. I want to create a regular ZCS user and give it read access to common attributes and to zimbraAccountStatus attribute (i want to use it in ldap filter to check is account closed or not).
I know that i must ajust ldap acl's. How can i do this with ldapmodify, or is there any opportunities do this without ldap modify?