Which two roles have the permission to connect to an LDAP directory?

The two roles that have the permission to connect to an LDAP directory are Cloud Pak Administrator and Cluster Administrator.

Cloud Pak Administrator is a role that has the highest level of access and can perform all the administrator tasks for the Cloud Pak.

Cluster Administrator is a role that has the permission to manage the resources of a Kubernetes cluster such as connecting to an LDAP directory, configuring security settings, and managing users and roles.

https://www.ibm.com/support/knowledgecenter/en/SSYHZ8_20.0.x/com.ibm.dba.baw.rpa/rpa_security_authorization.html

https://www.ibm.com/support/knowledgecenter/en/SSYHZ8_20.0.x/com.ibm.dba.baw.rpa/rpa_user_manage_users.html

https://www.ibm.com/support/knowledgecenter/en/SSYHZ8_20.0.x/com.ibm.dba.baw.rpa/rpa_security_permission.html